top of page

Política de privacitat

Effective Date: [Insert Date]
Data Controller: PawBox
Email: [Insert your email]
Address: [Insert your business address in Spain]

PawBox (“we”, “our”, or “us”) is committed to protecting your privacy and complying with the General Data Protection Regulation (EU) 2016/679 (GDPR). This Privacy Policy explains how we collect, use, and protect your personal data when you interact with our website and services.

​

1. Who is Responsible for Your Data?

PawBox is the data controller of your personal data. This means we decide how and why your data is processed.

 

2. What Data Do We Collect?

We may collect and process the following personal data:

  • Identification Data: Name, email address, postal address, and phone number.

  • Transaction Data: Billing and shipping information, payment details (processed securely via third-party providers).

  • Technical Data: IP address, browser type, pages visited, time spent on site, and other analytics data via cookies.

  • Communication Data: Your preferences, messages, and responses to surveys or promotions.

 

3. How Do We Use Your Data?

We use your personal data to:

  • Process orders and provide services

  • Send transactional and marketing communications

  • Improve user experience and website functionality

  • Comply with legal obligations (e.g. tax laws)

 

4. Legal Basis for Processing

Under GDPR, we rely on the following legal bases:

  • Contractual necessity – to process purchases and fulfill orders

  • Consent – for marketing communications (you may withdraw at any time)

  • Legal obligation – to comply with applicable laws

  • Legitimate interest – to improve services and prevent fraud

 

5. How Long Do We Keep Your Data?

We retain your personal data only as long as necessary for the purposes stated, or to comply with legal obligations (e.g. accounting and tax regulations in Spain).

 

6. Data Sharing and International Transfers

We do not sell your data. We may share your data with:

  • Trusted third-party service providers (e.g. payment processors, delivery services)

  • Legal authorities if required

  • Analytics or marketing platforms (with your consent)

Data may be transferred outside the EU/EEA, but only to countries with adequate protection or under GDPR-compliant safeguards (e.g. Standard Contractual Clauses).

 

7. Your Rights Under GDPR

You have the right to:

  • Access your personal data

  • Rectify inaccurate or incomplete data

  • Erase your data ("right to be forgotten")

  • Restrict or object to processing

  • Data portability – to receive your data in a common format

  • Withdraw consent at any time (e.g. unsubscribe from emails)

  • File a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) at www.aepd.es

To exercise any of these rights, contact us at [Insert your contact email].

bottom of page