We explain what personal data we process, why, for how long, and how you can exercise your rights.
Text pending legal review
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Managing your order, delivery and invoicing | Name, surname, email, phone number, delivery and billing address, NIF/CIF if provided | Performance of the contract (Art. 6.1.b GDPR) | For the duration of the relationship and a further 6 years for tax and commercial obligations |
| Responding to your enquiries | Name, email, phone number and content of the message | Legitimate interest in responding (Art. 6.1.f GDPR) | 1 year from the last communication |
| Sending marketing communications | Name and email | Consent (Art. 6.1.a GDPR), which may be withdrawn at any time | Until you withdraw your consent |
| Website analytics | Device identifiers, pages visited, anonymised IP address | Consent given through the cookie banner | As set out in the cookie policy |
| Payment fraud prevention | Transaction data (never the full card number) | Legitimate interest and legal obligation | 6 years |
We share data only with the providers necessary to deliver the service, who act as data processors under a signed contract:
No international transfers of data take place outside the European Economic Area, except those covered by adequacy decisions or the European Commission's standard contractual clauses, as detailed in the contracts with each provider.
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time by writing to hola@verdearia.com, stating which right you wish to exercise and enclosing a copy of an identity document.
If you believe we have not properly handled your request, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
We apply appropriate technical and organisational measures: encryption in transit via HTTPS, passwords stored using key derivation functions, role-based access control for the admin panel, and an audit log of operations on orders and inventory.
This site is not aimed at children under 14 and we do not knowingly collect their data.