Privacy Policy (GDPR / LOPDGDD)

In compliance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), users are informed of the personal data processing policy applied on the pessep.com website.

Data Controller: SEMYP, S.L.N.E. — CIF B70273669 — Plaza Doctor Fleming 1, Escalera 1, Planta -1, Puerta Izquierda, 46408 Faro de Cullera (Valencia). Email: info@pessep.com.

Purposes of Processing

(a) Order management, shipping, and after-sales; (b) customer service and query response; (c) invoicing and compliance with tax and accounting obligations; (d) fraud prevention; (e) sending, with prior user consent, commercial communications about PESSEP products and offers.

Legal Basis for Processing

The execution of the sales contract; compliance with legal obligations applicable to the seller (tax, accounting, warranty); and the data subject's consent for sending commercial communications, which can be revoked at any time.

Categories of Data Processed

Identifying data (name and surname), contact data (postal address, email, telephone number if provided), limited financial data necessary to process payment, and navigation data derived from website usage.

Data Recipients

Data will be communicated exclusively to the providers necessary for the provision of the service, acting as data processors, through contracts provided for in Article 28 of the GDPR. These include the e-commerce platform Shopify Inc.; payment gateways Shopify Payments, Bizum, and PayPal; the logistics operator Genei and the postal service Correos; the email marketing tool Klaviyo; and the advertising and analytical platforms Meta Platforms Ireland Ltd. and Google Ireland Ltd. Some of these providers are located outside the European Economic Area; in such cases, international transfers are made under the Standard Contractual Clauses approved by the European Commission or equivalent mechanisms provided for in the GDPR.

Retention Period

Data will be retained for the time necessary for the execution of the contract and, subsequently, for the legally required periods for compliance with tax, accounting, and product warranty obligations. Data processed for marketing purposes will be retained as long as the data subject does not revoke their consent.

Data Subject's Rights

Users may exercise their rights of access, rectification, erasure, opposition, restriction of processing, and data portability, as well as the right not to be subject to automated individual decision-making, at any time by written communication to info@pessep.com. Users also have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es).

Security

SEMYP, S.L.N.E. has adopted appropriate technical and organizational measures to ensure a level of security adequate to the risk of processing, in accordance with Article 32 of the GDPR.