Privacy Policy
1. Data controller
| Owner: | Daniel Iglesias de Paz |
| Tax ID (NIF): | 53533153D |
| Address: | Calle A nº9, CP 33350, Gijón (Asturias), Spain |
| Email: | info@pegame.es |
| Phone: | +34 616 069 084 |
2. Applicable regulations
This Privacy Policy is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, hereinafter GDPR) and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
3. Personal data we collect
Through pegame.es and its subdomains (pegatinas.pegame.es and future microsites) we may collect the following personal data:
- Identification data: name, surname, postal address, email address, phone number.
- Billing data: Tax ID (NIF/CIF), fiscal address.
- Browsing data: IP address, browser type, operating system, pages visited and browsing behaviour (via cookies — see our Cookie Policy).
- Transaction data: information relating to orders placed and payment method used (card or account details are managed directly by payment gateways and are not stored by us).
- Communication data: messages sent via WhatsApp, email or chat.
4. Purposes and legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Managing and fulfilling orders (manufacturing, shipping, invoicing) | Art. 6.1.b) Performance of a contract |
| Handling enquiries, requests and complaints | Art. 6.1.b) Performance of a contract / Art. 6.1.f) Legitimate interest |
| Processing payments via PayPal and Stripe | Art. 6.1.b) Performance of a contract |
| Complying with legal and tax obligations (invoicing, accounting) | Art. 6.1.c) Legal obligation |
| Analysing website traffic via Google Analytics to improve our services | Art. 6.1.a) User consent |
| Customer support via chat (WhatsApp Business) | Art. 6.1.b) Performance of a contract / Art. 6.1.f) Legitimate interest |
| Sending marketing communications (if activated in the future) | Art. 6.1.a) Explicit user consent |
5. Data recipients
Your personal data may be shared with the following recipients, solely for the purposes stated:
- Payment gateways: PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A.) and Stripe (Stripe Payments Europe, Ltd.), to process order payments.
- Shipping services: courier companies for order delivery.
- Google LLC: via Google Analytics, for statistical analysis of browsing (with your consent).
- Meta Platforms, Inc.: via WhatsApp Business, for customer support by chat.
- Public authorities: when required by law (Tax Agency, etc.).
We do not sell, rent or share your personal data with third parties for commercial purposes.
Some of these recipients may be located outside the European Economic Area (EEA). In such cases, international transfers are carried out under the safeguards provided for in the GDPR (European Commission adequacy decisions or standard contractual clauses).
6. Data retention periods
| Data | Retention period |
|---|---|
| Order and billing data | Minimum 4 years (tax obligation, Spanish General Tax Law, Art. 66) |
| Enquiry and communication data | Up to 3 years after the last communication (civil statute of limitations) |
| Browsing data (cookies) | As indicated in the Cookie Policy |
| Chat data (WhatsApp) | Up to 1 year after the last conversation, unless related to an order |
Once these periods have elapsed, data will be deleted or anonymised.
7. User rights
In accordance with the GDPR and LOPDGDD, you may exercise the following rights at any time:
- Access: know what personal data we process about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure ("right to be forgotten"): request the deletion of your data when it is no longer necessary.
- Objection: object to the processing of your data in certain circumstances.
- Restriction of processing: request the restriction of processing in legally prescribed cases.
- Portability: receive your data in a structured, commonly used format and transfer it to another controller.
- Not to be subject to automated decisions: including profiling with legal effects.
How to exercise your rights
You may contact us by any of the following means, indicating "Data Protection" as the subject:
- Email: info@pegame.es
- Post: Daniel Iglesias de Paz, Calle A nº9, CP 33350, Gijón (Asturias), Spain
You will need to verify your identity (copy of ID card or equivalent document). We will respond within a maximum of one month from receipt of the request.
If you believe your rights have not been properly addressed, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.
8. Minors
We do not intentionally collect personal data from children under 14 years of age. If you are under 14, please do not send us your personal data. If we discover that we have collected data from a minor without the consent of their legal guardian, we will proceed to delete it.
9. Security measures
We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or destruction, in accordance with the GDPR. These include:
- Encrypted communications via HTTPS/TLS protocol.
- Payment data is managed directly by the payment gateways (PayPal and Stripe), certified as PCI-DSS providers. We do not store card data.
- Restricted access to personal data, limited to authorised personnel only.
10. Changes to this policy
We reserve the right to update this Privacy Policy to adapt it to legislative changes or changes in our services. In the event of significant changes, we will communicate them through the website. We recommend reviewing it periodically.
This Privacy Policy applies to pegame.es and all its subdomains (pegatinas.pegame.es and future microsites).