Privacy policy
1. Introduction
This Privacy Policy explains how dos besos ("we," "us," or "our") collects, uses, shares, and protects your personal data when you visit our online store, place an order, or otherwise interact with us. We are committed to processing your data lawfully, fairly, and transparently, in accordance with the General Data Protection Regulation (GDPR) and applicable Spanish data protection law. Please read this policy carefully to understand our practices regarding your personal data.
2. Who is responsible for your data (the controller)
The controller responsible for the personal data processed through this website is:
dos besos
Gran Vía 12
28013 Madrid, Spain
Email: contact@dosbesos.shop
Phone: +34669842926
If you have any questions about this policy or about how we handle your personal data, please contact us using the details above.
3. What personal data we collect
We only collect the personal data that is necessary for the purposes described below. Depending on how you interact with us, this may include the following categories of data.
3.1 Data collected when you visit the site
When you browse our website, our server automatically and temporarily logs certain technical information for security and reliability purposes. This may include your IP address, the date and time of access, the URL requested, the referring page, and details about your browser and operating system. This processing is necessary for our legitimate interest in keeping the website secure, stable, and functioning correctly (legal basis: GDPR Art. 6(1)(f)).
3.2 Data collected when you place an order
When you place an order with us, we collect the information necessary to process, fulfill, and deliver it. This includes your name, billing and shipping address, email address, phone number (optional), and payment details. This data is processed because it is necessary to perform the contract between you and us (legal basis: GDPR Art. 6(1)(b)).
3.3 Data collected when you contact us
If you contact us, whether by email, phone, or through a form on our website, we store the content of your message together with your contact details so that we can respond to your inquiry. This processing is based on the steps necessary to respond to your request and on our legitimate interest in providing customer support (legal basis: GDPR Art. 6(1)(b) and (f)).
4. How long we keep your data
We retain personal data only for as long as necessary to fulfill the purposes described in this policy, including to provide our services, process your orders, respond to your inquiries, and comply with any applicable legal, accounting, or reporting obligations.
5. How we share your data
We do not sell your personal data. We only share personal data with third parties in the following circumstances:
- where you have given your explicit consent to the sharing;
- where sharing is necessary to perform a contract with you, for example with the payment providers or delivery partners involved in fulfilling your order;
- where we are subject to a legal obligation requiring disclosure; or
- where we have a legitimate interest in sharing the data, in accordance with GDPR Art. 6(1)(f), and that interest is not overridden by your rights and freedoms.
6. Cookies
We use cookies that are strictly necessary for the website to function correctly, such as those needed to operate the shopping cart and checkout. Optional cookies, such as those used for analytics or marketing purposes, are only placed on your device after you have given your consent through our cookie banner. You can manage or withdraw your cookie preferences at any time through the settings available on the site.
7. Services we use
To operate our store, we rely on the following third-party services, each of which processes data under its own privacy policy:
- Hosting: this site is hosted on Shopify (Shopify Inc., 150 Elgin Street, Ottawa, ON, K2P 1L4, Canada).
- Payments: payments are processed by our configured payment providers, which are shown to you at checkout. Each provider processes your payment data under its own privacy policy.
8. Your rights under the GDPR
In relation to your personal data, you have the following rights:
- Access — request confirmation of whether we process your data and obtain a copy of it (Art. 15);
- Rectification — request correction of inaccurate or incomplete data (Art. 16);
- Erasure — request deletion of your data where applicable (Art. 17);
- Restriction — request that we limit the processing of your data in certain circumstances (Art. 18);
- Portability — request that we provide your data in a structured, commonly used, machine-readable format, or transmit it to another controller (Art. 20);
- Withdraw consent — withdraw, at any time, any consent you have previously given, without affecting the lawfulness of processing carried out before the withdrawal (Art. 7(3));
- Lodge a complaint — lodge a complaint with a supervisory authority if you consider that our processing of your data infringes the GDPR (Art. 77).
9. Right to object
Where we process your data on the basis of our legitimate interest, you have the right to object to that processing at any time under GDPR Art. 21. If you object, we will stop processing your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or where the processing is necessary for the establishment, exercise, or defense of legal claims.
10. How to exercise your rights
To exercise any of the rights described above, please contact us at contact@dosbesos.shop. We will respond to your request within the timeframes required by applicable data protection law.
11. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We encourage you to review this page periodically to stay informed about how we protect your data.