IT

Informativa sulla privacy

1. Data controller

The controller of the personal data collected in this shop is:

  • Owner: María Victoria López Antúnez
  • Tax ID: 74907954J
  • Address: N-340, km 75.5, 11380 Tarifa (Cádiz)
  • Email: info@kitemikaze.com
  • Phone: +34 654 49 26 93

2. Legal framework

We process your data in accordance with Regulation (EU) 2016/679 (GDPR), Spanish Organic Act 3/2018 on Data Protection and Digital Rights, and Act 34/2002 (LSSI-CE).

3. What data we process and why

We only process the data needed for each purpose:

  • Purchase: name, email, phone, shipping and billing address and, if you provide it, tax ID. Used to handle the order, payment, delivery, invoice and after-sales support.
  • My account: email and the profile data you choose to save, so you can see your orders and download invoices, plus your Subcielo school bookings with their payments and receipts if you booked there. You sign in with a link sent by email, no password.
  • Stock and order notices: transactional emails about your purchase or about a product you asked to be notified about.
  • Contact: the data you send us by email or WhatsApp, to answer your enquiry.
  • Newsletter: your email, language and the date you accept, to send you the shop’s offers and news. You can unsubscribe at any time by writing to us.
  • Usage statistics: page views and clicks, anonymously with Umami (our own server, no cookies). If you accept cookies, also with Google Analytics, services that use a cookie identifier and device and visit data. They help us improve the shop.

4. Legal basis

Performance of the sales contract (art. 6.1.b GDPR) to handle your order and account; compliance with legal obligations (art. 6.1.c), such as accounting and tax rules; and your consent (art. 6.1.a) when you write to us or ask for a stock notice or subscribe to the newsletter. You can withdraw consent at any time.

5. Recipients

We do not sell your data. We share it only with the providers needed to deliver the service, under the corresponding data processing agreements:

  • Stripe Payments Europe, Ltd., which processes card payments. We never see or store your card details.
  • The carrier delivering your order (name, address and contact phone).
  • The shop’s hosting and email providers.
  • Tax and accounting advisers, to meet invoicing obligations.
  • Google Ireland Limited (Google Analytics), only if you accept analytics cookies.
  • Public authorities where the law requires it.

6. International transfers

Some providers may process data outside the European Economic Area. If so, this is done with GDPR safeguards such as standard contractual clauses or European Commission adequacy decisions.

7. Retention

We keep order and invoice data for the periods required by commercial and tax law. Account data is kept while you keep your account: you can delete it yourself from My account. Contact data is kept as long as needed to answer your enquiry.

8. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw consent, by writing to the email address above. From My account you can download your data and delete your account.

If you believe we have not handled your data properly you can complain to the Spanish Data Protection Agency (www.aepd.es) or to your local authority.

9. Security

We apply appropriate technical and organisational measures: encrypted connection (HTTPS), restricted access to data and payment delegated to a certified provider.

10. Stock alerts

If you ask us to let you know when a product is back in stock, we store your email or your WhatsApp (whichever you give), the product, the language and the date you accept.

  • Purpose: to let you know when the product is available again. Only if you tick the separate box do we also offer you similar alternatives, by email or WhatsApp.
  • Legal basis: your consent (art. 6.1.a GDPR and art. 21 LSSI), which you give by ticking the box and can withdraw at any time.
  • Retention: we delete the alert 30 days after sending it to you or, if the product does not come back in stock, after 12 months.
  • Unsubscribe and rights: every alert email includes a link to delete your alert in one click. You can also ask us, or exercise your other rights, by writing to the email above.

11. Changes to this policy

We may update this policy to reflect legal or service changes. The current version is always the one published on this page.