Privacy policy

Privacy Policy

1. Data Controller

Personal data collected on this website will be processed by the owner of MC-33. The full identification details of the controller (Company Name, CIF, Address) are detailed in our Legal Notice, accessible from the footer of this website.

2. Purpose and Lawful Basis: Why do we use your data?

We process the information provided by interested parties for the following purposes:

  • Order Management (Online Store): To process your purchase, send the order to the indicated address, and issue invoices.
    • Legal basis: The execution of a contract (Terms and Conditions of purchase).
  • Customer Service: To respond to inquiries sent via forms or email.
    • Legal basis: Legitimate interest and user consent upon contact.
  • Comments: To manage the publication of comments on products or the blog.
    • Legal basis: User consent.
  • Legal Compliance: To comply with tax and accounting obligations (invoice retention).
    • Legal basis: Legal obligation.

3. Recipients: Who do we share your data with?

In order to provide you with the service, your data must be shared with external providers who are necessary for the store's operations. We do not transfer data to third parties except when legally required. The main providers are:

  • Logistics and Transport: Your data (name, address, phone number) is transferred to courier companies to facilitate delivery.
  • Payment Gateways: Banking data is processed directly through the secure payment gateway (Redsys, Stripe, PayPal, etc.). MC-33 does not access or store your credit/debit card details.
  • Hosting and Web Maintenance: Technology service providers that ensure website security.

4. Data Retention

  • Customer Data: Will be retained as long as the commercial relationship is maintained and, subsequently, for the periods legally required to address potential liabilities (5 years according to tax and commercial regulations).
  • Subscriber/User Data: Until the user requests their unsubscription or deletion.

5. User Rights

Any person has the right to obtain confirmation as to whether MC-33 is processing personal data concerning them. Interested parties have the right to:

  • Request access to personal data.
  • Request its rectification (if inaccurate) or erasure (when no longer necessary).
  • Request the restriction of its processing.
  • Object to processing.

To exercise these rights, the user can send an email to [rrss@mc-33.com].

Likewise, we inform you that if the user considers that their rights have not been satisfactorily addressed, they have the right to file a complaint with the relevant supervisory authority (in Spain, the Spanish Data Protection Agency: www.aepd.es).

6. Security

MC-33 undertakes to use and process users' personal data respecting their confidentiality and to use them in accordance with their purpose, as well as to fulfill its obligation to store them and adopt all measures to prevent alteration, loss, unauthorized processing, or access, in accordance with the provisions of current data protection regulations.

This website includes an SSL certificate. This is a security protocol that ensures your data travels integrally and securely, meaning the transmission of data between a server and a web user, and in feedback, is fully encrypted.