PRIVACY POLICY

(According to the GDPR and the LOPDGDD)

Data Controller
MARMOL&FA EDITION ART PROJECT AND MANAGEMENT SL

Ps. de Reding, 37, 2a Pta. A, 29016 Málaga
Email: info@marmolandfa.com

Data Collected
– Contact data: name, email, message.
– User account data: identity, email, encrypted password.
– Purchase data: identification, postal address, email, data required to process payments and
shipments.
– Mármol & Fa does not store card data; these are handled by the payment gateway.
– Browsing and analytics data via Google Analytics (with prior consent).
– Newsletter data if the user subscribes.

Purposes
– Managing enquiries and communications.
– Creating and maintaining user accounts.
– Managing orders, payments, shipments and certificates of authenticity.
– Compliance with legal obligations (tax, accounting, consumer protection).
– Site analysis and improvement through analytical cookies.
– Sending commercial information when prior consent has been provided.

Lawful Basis
– Performance of a contract (purchases, registration).
– Consent (forms, newsletter, cookies).
– Legitimate interest (Website security).
– Legal obligation.

Retention Periods
– Enquiries: 1 year.
– Accounts: as long as they remain active.
– Orders: legal requirements (5–6 years).
– Cookies: according to the Cookie Policy.

Recipients
– Hosting provider: IONOS (within the EU).
– Payment gateway for card payments (Mármol & Fa does not store card data).
– Logistics and courier services.
– Google Analytics (subject to applicable safeguards).

User Rights
Access, rectification, erasure, objection, portability and restriction.
Requests to: info@marmolandfa.com
Complaints: Spanish Data Protection Agency (www.aepd.es).

www.aepd.es