Privacy Policy (EU/GDPR)

CalaBassaBrand S.L. (“CalaBassa”)

Last updated: May 10, 2026

This Privacy Policy explains how CalaBassaBrand S.L. (“CalaBassa”, “we”, “us”) collects, uses, discloses, and protects personal data when you visit, browse, or shop at our Shopify-based store, interact with us, or use our services. This policy aims to comply with applicable European data protection regulations, including the General Data Protection Regulation (GDPR).

WHO WE ARE (DATA CONTROLLER)

Data Controller: CalaBassaBrand S.L.
Trade name: CalaBassa
Registered address: Calle Manuel Martínez Chumillas, Madrid, 28250, Spain
Tax ID (CIF): B21840376
Contact email (privacy and general): calabassa.contact@calabassabrand.com

If you have questions or wish to exercise your rights:
calabassa.contact@calabassabrand.com

WHEN THIS POLICY APPLIES (SCOPE)

This policy applies to the personal data we process as controllers, including data from:

  • Website visitors

  • Customers (orders, shipments, returns, support)

  • Individuals who contact us

  • Newsletter subscribers (if they opt-in)

  • Participants in promotions or surveys

It does not supersede third-party policies (payments, shipping, social media).

WHAT PERSONAL DATA WE COLLECT

A) Data provided by you

  • Identity and contact: name, email, phone, address

  • Order information: products, history, returns

  • Customer service: communications

  • Marketing preferences

  • Optional information: notes or personalization

B) Automatically collected data

  • Technical data: IP, browser, device, language

  • Usage: pages visited, clicks, time, cart

  • Cookies and tracking

C) Third-party data

  • Shopify and apps

  • Payment providers

  • Shipping companies

  • Analytics/marketing tools

PURPOSES AND LEGAL BASES

A) Order management (contract)

  • Process orders

  • Customer service

  • Operational communications

Legal basis: performance of a contract (Art. 6(1)(b) GDPR)

B) Legal obligations

  • Invoicing and taxes

  • Regulatory compliance

Legal basis: legal obligation (Art. 6(1)(c))

C) Security and fraud

  • Fraud prevention

  • System security

Legal basis: legitimate interest (Art. 6(1)(f))

D) Marketing

  • Promotional emails (with consent)

  • Campaign analysis

Legal basis: consent and/or legitimate interest

You can withdraw consent at any time.

E) Analytics

  • Improve the store

  • Analyze usage

Legal basis: consent (non-essential cookies)

COOKIES AND SIMILAR TECHNOLOGIES

  • Essential cookies: necessary for operation

  • Analytical/marketing cookies: require consent

Management:

  • Cookie settings on the site

  • Browser settings

See the Cookie Policy.

WITH WHOM WE SHARE DATA

  • Shopify (platform)

  • Payment providers

  • Shipping companies

  • Service providers (support, marketing, analytics)

  • Authorities and legal advisors

We do not sell your personal data.

INTERNATIONAL TRANSFERS

Data may be processed outside the EEA.
Safeguards such as standard contractual clauses are applied.

You can request information:
calabassa.contact@calabassabrand.com

DATA RETENTION

We retain data only as long as necessary for:

  • Order management

  • Legal obligations

  • Security

  • Marketing (until unsubscribe)

  • Cookies according to their duration

Then they are deleted or anonymized.

SECURITY

We implement technical and organizational measures to protect data.
Access is restricted to authorized personnel.

YOUR RIGHTS (GDPR)

You have the right to:

  • Access

  • Rectification

  • Erasure

  • Restriction

  • Data portability

  • Object

  • Withdraw consent

  • Not be subject to automated decision-making

Exercise:
Send an email with:

  • Name

  • Email

  • Requested right

We will respond within the legal timeframe.

You can file a complaint with:
Spanish Data Protection Agency (AEPD)

MARKETING PREFERENCES

  • Unsubscribe from emails

  • Object to marketing at any time

We keep a minimal record to respect your decision.

LINKS TO THIRD PARTIES

We are not responsible for third-party policies.
Social media networks process data according to their own rules.

CHANGES TO THE POLICY

We may update this policy.
The update date will be indicated.

CONTACT

CalaBassaBrand S.L. (“CalaBassa”)
Calle Manuel Martínez Chumillas, Madrid, 28250, Spain
Tax ID (CIF): B21840376
Email: calabassa.contact@calabassabrand.com