Privacy Policy

Paccari España — company name, CIF/NIF, full address, contact email: j.paez@paccari.com

Last updated: [November 10, 2025]

1. Data Controller

Paccari Spain — Please provide: full company name, CIF/NIF, full address, contact email: j.paez@paccari.com

2. Data We Collect

  • Identifying information: first and last names.
  • Contact Information: email, phone number, shipping address.
  • Payment information: processed by the payment provider; we do not store sensitive card data, except where required by law.
  • Browsing data: IP address, cookies, pages visited, interactions.
  • Order history and shopping preferences.

3. Purposes and Legal Basis

  • Contract Execution: Order Management and Shipping (based on contract execution).
  • Consent: Marketing communications and non-essential cookies (basis: explicit consent).
  • Legitimate interest: fraud prevention, security, and service improvement (to document internal evaluation).
  • Legal obligations: retention of tax and accounting records (basis: legal compliance).

4. Data Retention

  • Billing and order data: 5 years (tax requirement).
  • Data for registered accounts: until cancellation or 3 years of inactivity.
  • Marketing data: until consent is withdrawn.

5. Recipients and Data Processors

  • Payment gateways (e.g., Stripe, PayPal) as data processors.
  • Carriers and logistics for order delivery.
  • Analytics and marketing platforms (e.g., Google Analytics, Meta Ads).

Include the specific names of suppliers and links to their policies in the final version.

6. International Transfers

If services are used outside the EU, the safeguards applied (standard contractual clauses, adequacy decisions, etc.) must be specified.

7. Rights of Data Subjects

You have the right to access, correct, delete, restrict the processing of, object to, and request the portability of your data. To exercise these rights, please write to: j.paez@paccari.com or by mail to our registered address (please include a copy of your identification document). You may also file a complaint with the AEPD.

8. Safety Measures

We implement technical and organizational measures: TLS encryption, access control, regular backups, access management, and staff training.

9. Minors

These services are not intended for children under 16 without parental consent. We do not knowingly collect data from children without authorization.

10. Policy Changes

Any changes will be published along with the update date.