PRIVACY POLICY

Last Updated: February 9, 2026

Welcome to my website! I value your privacy and am committed to protecting your personal data. This policy explains how I handle your information when you visit my site, shop, download a file, or subscribe to my newsletter. Everything you can do when visiting www.covasandes.com

1. Data Controller

The person responsible for your data (the “Controller”) is:

  • Name: Covadonga González Sandes

  • Email: info@covasandes.com

2. Information I Collect

I collect data to provide the services offered on the website and fulfill your orders. This includes:

  • Contact Data: Name and email address (via email, contact form or newsletter sign-up).

  • Transaction Data: Shipping address, billing address, and order history (when you buy from my shop).

  • Technical Data: IP address, browser type, and usage data (collected via cookies).

3. Purpose and Legal Basis

Under the GDPR, I must have a “legal basis” to process your data. Depending on the specific data processing activity, the legal basis will be the execution of a contract or pre-contractual negotiations, compliance with a legal obligation, the legitimate interests pursued by the data controller or, ultimately, your consent.

  • Order Fulfillment: To ship what you buy from me (Contractual necessity).

  • Newsletter: To send you updates (Consent—which you can withdraw at any time).

  • Inquiries: To respond to your messages via the contact page (Legitimate interest).

4. Third-Party Services

I don’t sell your data. However, I share information with essential trusted partners to run my business and to deliver the services.

These providers will access your personal data solely to perform services on my behalf, in accordance with my instructions. They are prohibited from using your data for any other purpose and are bound by strict confidentiality obligations. International data transfers may be necessary to provide these services, in accordance with the EU-U.S. Data Privacy Framework or standard contractual clauses.

  • Analytics: Google Analytics to understand my website flow and gain insights in what is more valuable to users.

  • Payment Processors:  Stripe, PayPal, Apple Pay, Google Pay) to securely handle payments.

  • Shipping Providers: Such as Correos to deliver your goods.

  • Email Marketing: MailerLite to manage the newsletter.

  • Forms: Google Forms

5. Your Rights

Data protection laws allow you to exercise a number of rights, such as the right of access, to erasure or to object, where appropriate. You can withdraw your consent and unsubscribe to my newsletter at any time. To exercise these rights, simply email me at info@covasandes.com.

6. Data Retention

Your personal data will only be kept for the period of time necessary to fulfill the purpose for which it was collected, comply with legal obligations and address any duties that may arise from fulfilling the purpose for which the data was collected. For example, billing data will be kept for a period of 6 years. 

  • Newsletter data: Until you unsubscribe.

  • Purchase data: For 6 years (to comply with Spanish tax and accounting obligations).