01Data we process
Depending on the service used, DIADE may process data provided directly by the user and technical data required for the operation of the website.
- Contact data: full name, email address and, where provided or required, telephone number.
- Order data: products purchased, sizes, quantities, amounts, order status and references required to manage payment.
- Delivery data: name, address, city, postal code, country and contact details required for shipping.
- Support requests: reason for contacting us, any order number and message content.
- Technical and security data, such as IP address, session information and technical logs required for security, abuse prevention and operation of the service.
02Purposes and legal bases
- Purchase and contract management: processing the cart, order, payment, delivery, any returns, refunds and purchase-related support. The legal basis is performance of the contract or pre-contractual steps requested by the user.
- Support and enquiries: responding to communications submitted through the contact form. Processing is carried out to handle the user’s request and, where required by the form, on the basis of the consent given.
- Legal and administrative obligations: tax, accounting and administrative requirements and the handling of possible claims. The legal basis is compliance with legal obligations and, where applicable, the legitimate interest in protecting DIADE’s rights.
- Website security: preventing fraud, abuse, unauthorised access and technical problems. The legal basis is the legitimate interest in ensuring the security and reliability of the service.
03Payments with Stripe
Card payments are handled through Stripe. At payment, the user is redirected to the payment provider’s secure environment. DIADE stores the technical references needed to associate the payment with the order and verify its status; card details are handled within Stripe’s payment environment in accordance with the terms applicable to the service.
04Recipients of data
Data may be processed by authorised personnel and disclosed, only to the extent necessary, to parties providing services essential to the e-commerce activity, such as payment, transport and delivery providers, technical infrastructure, hosting, IT support and administrative or professional services.
Data is not disclosed to third parties for their own commercial purposes without a specific legal basis.
05International transfers
Some technology providers may process data outside the European Economic Area. Where this occurs, processing must take place using the mechanisms and safeguards provided by applicable data protection law.
06Retention
Data is retained for as long as necessary for the purposes for which it was collected. Data relating to orders, payments and administrative records may be retained for the periods required by applicable tax, accounting and civil law. Support requests are retained for as long as necessary to handle them and, where appropriate, to protect the rights of the parties.
07Your rights
Where provided by law, data subjects may exercise their rights of access, rectification, erasure, restriction of processing, objection and data portability, and may withdraw consent without affecting the lawfulness of processing carried out before withdrawal.
Requests may be sent to [email protected], providing the information necessary to identify the request and the data subject.
Data subjects may also lodge a complaint with the Spanish Data Protection Agency (AEPD) or the competent supervisory authority.
08Cookies and technical data
The website uses cookies or technical tools required to maintain the session, shopping cart and essential service functions. Any non-essential tools introduced in the future must be managed in accordance with applicable information and consent requirements.
09Security
DIADE adopts technical and organisational measures appropriate to the risk to protect personal data against loss, alteration, unauthorised access or disclosure. However, no system can guarantee absolute security.
10Policy updates
This policy may be updated to reflect legal, organisational or technical changes. The version published on the website always shows the date of the latest update.