Privacy Policy
Last updated: January 2025
Data Controller
- Controller: Marcel Reig Ibarra
- Tax ID: 41507253G
- Address: Retxats 18, 07730 Alaior, Illes Balears
- Email: hola@mitaller.art
Data We Collect
For buyers (no registration required):
- Name and email (to process orders)
- Shipping address (for deliveries)
- Payment data (processed directly by Stripe, we don't store it)
For creators (with registration):
- Name, email and password
- Profile information (bio, location, avatar)
- Banking details (processed by Stripe Connect)
Purpose of Processing
- Managing orders and shipments
- Administering creator accounts
- Processing payments through Stripe
- Sending order-related communications
- Complying with legal obligations
Legal Basis
- Contract execution (orders, creator accounts)
- Consent (platform registration)
- Legal obligation (invoicing, taxation)
Recipients
We share data with these providers, necessary for operation:
| Provider | Purpose | Location |
|---|---|---|
| Stripe | Payment processing | EE.UU. |
| SendGrid | Email sending | EE.UU. |
| Cloudinary | Image storage | EE.UU. |
| Railway | Server hosting | EE.UU. |
All providers comply with standard contractual clauses for international transfers.
Data Retention
- Order data: 5 years (tax obligation)
- Creator accounts: while the account is active
- After deletion request: removal within 30 days, unless legally required
Your Rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by sending an email to hola@mitaller.art indicating your request and attaching a copy of your ID.
If you believe we have not properly addressed your rights, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
Security
We apply technical and organizational measures to protect your data: encrypted connections (HTTPS), hashed passwords, restricted database access.