Privacy policy
Data controller
- Controller: Enrique Adiego Cortés · Tax ID 72990366G
- Address: Calle José Martí 4, 1º 1ª, 50012, Zaragoza
- Contact: info@chiquititos.es
What data we process and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Managing your orders, deliveries, returns and invoicing | Name, address, email, phone, products bought | Performance of the contract (art. 6.1.b GDPR) and legal obligations (art. 6.1.c) | For the duration of the relationship and then for the legal periods (generally 6 years under commercial and tax law) |
| Managing your customer account, if you create one | Registration data, addresses, order history | Performance of the contract | Until you delete the account |
| Answering your enquiries | Name, email and whatever you tell us | Legitimate interest in helping you (art. 6.1.f) | As long as needed to resolve them |
| Sending you news, if you subscribe | Your consent (art. 6.1.a), which you can withdraw at any time | Until you unsubscribe | |
| Recording your cookie preferences | Random identifier, choice, date, truncated IP and browser | Legal obligation to prove consent (art. 7.1 GDPR) | Up to 3 years |
We do not make automated decisions or build profiles with your data.
Who we share it with
Only with those who help us provide the service, under contracts that protect your data:
- IONOS SE (website and email hosting, servers in the European Union).
- Stripe Payments Europe Ltd. (processing card, Bizum and PayPal payments). Stripe may process data outside the European Economic Area with appropriate safeguards (EU-US Data Privacy Framework and standard contractual clauses).
- Courier companies, to deliver your orders.
- Public authorities, when required by law.
We never sell your data.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to info@chiquititos.es and stating which right you wish to exercise.
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Minors
This website is intended for adults. We do not collect data from children under 14: if you are a minor, please ask your parent or guardian to make the purchase.
Security
We apply appropriate technical and organisational measures: encrypted connection (HTTPS), hashed passwords and restricted access to data. We do not store your card details: Stripe handles them directly.
Version 1 · in force since October 25, 2026