Privacy policy
Last updated: 06/10/2026
This is an English translation for convenience. In case of discrepancy, the Spanish version prevails.
Data controller
Owner: Rocío García-Griñán Fernández-Jardón
Tax ID (NIF): 53763775X
Address: Calle Juan de Villanueva, 28660 Boadilla del Monte, Madrid, Spain
Email: marotinas.studio@gmail.com
Phone: +34 626 71 29 83
What data we process and why
Managing your order, payment, shipping and returns
Data: name, address, email, phone, payment details
Legal basis: performance of the contract (art. 6.1.b GDPR)
Retention: for the duration of the relationship and then the legal limitation period (up to 6 years for tax and accounting obligations)
Answering your enquiries
Data: name, email and message content
Legal basis: consent / legitimate interest (art. 6.1.a and 6.1.f)
Retention: 1 year from the last communication
Sending you marketing communications (newsletter and welcome emails)
Data: name, email, birthday if you give it to us, and data on how you interact with our emails (opens and clicks)
Legal basis: consent (art. 6.1.a)
Retention: until you unsubscribe
Asking for your opinion on your purchase and publishing your review
Data: name, email, order, and the text and photos of your review
Legal basis: legitimate interest to send the request (art. 6.1.f); consent to publish the review (art. 6.1.a)
Retention: until you ask us to remove the review
Tax and accounting obligations
Data: billing data
Legal basis: legal obligation (art. 6.1.c)
Retention: 6 years (Spanish Commercial Code)
Fraud prevention and security
Data: IP address, browsing data
Legal basis: legitimate interest (art. 6.1.f)
Retention: 12 months
We do not process special categories of data or make automated decisions with legal effects on you.
Who we share your data with
We work with providers acting as data processors:
Shopify — store platform and hosting
Shopify Payments — payment processing
Packlink PRO and the carriers we use — order shipping
Klaviyo — subscriber list management and sending of the newsletter and welcome emails
Judge.me — sending the review request after your purchase and publishing reviews
Instafeed — displays content from our Instagram profile on the website
Adobe Fonts (Typekit) — loading fonts
In addition, Shopify may use certain data, securely and combined with other data from its platform, for its own purposes, such as improving its products and services and preventing fraud. For those purposes Shopify acts as an independent controller, in accordance with its privacy policy (https://www.shopify.com/legal/privacy).
Some of these providers may process data outside the European Economic Area. In those cases appropriate safeguards apply, such as the Standard Contractual Clauses approved by the European Commission or the EU-US Data Privacy Framework, depending on the provider.
Apart from this, we do not share your data with third parties unless required by law.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to marotinas.studio@gmail.com. We may ask you to verify your identity.
You can unsubscribe from the newsletter at any time using the link at the bottom of every email.
If you feel we have not handled your request properly, you can file a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid, Spain.
Minors
Our store is not aimed at children under 14 and we do not knowingly collect their data.
Security
We apply appropriate technical and organisational measures to protect your data. No system is infallible, so we recommend that you do not send us sensitive information through unsecured channels.
Cookies
Our use of cookies is explained in our Cookie policy.
Changes
We may update this policy. We will publish the revised version on the website with its update date.