Privacy policy

Privacy Policy

1. Introduction

Information for the User

Who is responsible for processing your personal data?

This Privacy Policy explains how MAESKA ACTIVIDADES S.L. (hereinafter, "we" or "the Company") collects, uses, and protects your personal information when you visit our website [website name] or use our services. MAESKA ACTIVIDADES S.L., with registered address at PORTUETXE 83, 1 B 18 - 20018 SAN SEBASTIAN (Gipuzkoa), is the data controller responsible for your personal data in accordance with Regulation (EU) 2016/679 of April 27 (GDPR), and Organic Law 3/2018 of December 5 (LOPDGDD).

2. Data We Collect

We collect the following types of personal data:

Contact information: Name, surname, email address, postal address, phone number.
Account information: Username, password (encrypted).
Transaction information: Details of purchased products, purchase history, payment information (we do not store complete credit card data; these are processed by our payment providers).
Shipping information: Shipping address.
Technical information: IP address, browser type, operating system, browsing data (pages visited, time spent, etc.), device identifiers.
Marketing information: Marketing and communication preferences.
Geolocation data: If you consent.
Social media information: If you interact with us via social networks.

Sources of Data:

Data you provide directly (e.g., when registering, making a purchase, subscribing to newsletters).
Data collected automatically (e.g., via cookies and similar technologies).
Data received from third parties (e.g., payment providers).

3. Purposes of Processing

We use your personal data for the following purposes:

Account management:
Purpose: Create and manage your account, authenticate access.
Legal basis: Performance of a contract (if an account is required) or legitimate interest (efficient account management).
Order processing:
Purpose: Manage your orders, process payments, ship products, handle returns.
Legal basis: Performance of a contract.
Customer service:
Purpose: Respond to your inquiries, provide support, resolve issues.
Legal basis: Performance of a contract or legitimate interest (providing effective customer service).
Marketing and commercial communications:
Purpose: Send promotional communications about our products and services, special offers, newsletters.
Legal basis: Consent (for electronic marketing communications) or legitimate interest (for direct marketing by other means, subject to legal requirements).
Website analysis and improvements:
Purpose: Analyze website usage, conduct market research, improve our products and services, personalize your experience.
Legal basis: Legitimate interest (to improve our website and services).
Compliance with legal obligations:
Purpose: Comply with legal obligations (e.g., tax, accounting).
Legal basis: Legal obligation.

4. Data Disclosure

We may share your personal data with the following categories of recipients:

Service providers: Companies that provide services to us (e.g., web hosting, payment processing, shipping, marketing, analytics). These providers act as data processors and are obliged to protect your data.
Payment providers: Klarna and other payment gateways to process your payments.
Courier companies: For delivery of your orders.
Professional advisors: Lawyers, accountants, auditors.
Competent authorities: When required by law.

International Data Transfers:
If we transfer your personal data outside the European Economic Area (EEA), we will ensure appropriate safeguards such as:

Adequacy decisions by the European Commission.
Standard contractual clauses approved by the European Commission.
Other legally accepted mechanisms.

5. Data Retention

We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including to meet any legal, accounting, or reporting requirements.

Account data: While your account is active.
Transaction data: Minimum of 4 years from the transaction date (to comply with tax and accounting obligations).
Marketing data: While you have not withdrawn consent or objected to direct marketing.
Browsing data: Minimum of 3 months.

In some cases, we may retain your data for longer periods if necessary to comply with legal obligations, resolve disputes, or enforce our agreements.

6. Your Rights

You have the following rights regarding your personal data:

Right of access: To confirm whether we are processing your personal data and to access it.
Right to rectification: To request correction of inaccurate personal data.
Right to erasure ("right to be forgotten"): To request deletion of your personal data under certain conditions.
Right to restriction of processing: To request limitation of processing in certain circumstances.
Right to data portability: To receive your personal data in a structured, commonly used format and transfer it to another controller under certain conditions.
Right to object: To object to the processing of your data, including for direct marketing purposes.
Right to withdraw consent: If processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Right to lodge a complaint: You have the right to file a complaint with the Spanish Data Protection Agency (AEPD) if you believe your rights have been violated.

How to exercise your rights:
You can exercise your rights by contacting us at:

MAESKA ACTIVIDADES S.L.
PORTUETXE 83, 1 B 18 - 20018 SAN SEBASTIAN (Gipuzkoa)
E-mail: INFO@MAESKA.COM

To process your request, we may ask you to verify your identity.

7. Data Security

In accordance with applicable data protection laws, the Company complies with the GDPR and LOPDGDD, treating personal data lawfully, fairly, and transparently, and ensuring data is adequate, relevant, and limited to what is necessary. We have implemented appropriate technical and organizational measures to protect your data and enable you to exercise your rights. For more information on our privacy safeguards, please contact us at the address above.

8. Cookies and Similar Technologies

We use cookies and similar technologies on our website. For more information on how we use these technologies, please see our Cookies Policy.

9. Changes to the Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by posting the updated policy on our website and, where appropriate, through other communication channels. We recommend that you review this Privacy Policy regularly to stay informed about how we protect your information.