1. Data Controller
In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), the personal data collected through this website will be processed by:
- Data Controller: H. Perat Guardia
- Tax ID: ES18057807R
- Address: P.O. Box 21, 22500 Binéfar (Spain)
- Email: shop [at] arculamystica.com
2. Purposes of Data Processing and Legal Basis
We process personal data for the following purposes and legal grounds:
| Purpose | Legal Basis | Retention Period |
| Order Management & Fulfillment: Processing sales, shipping products, and managing invoices/payments. | Performance of a contract (Art. 6.1.b GDPR). | Duration of the commercial relationship + 4 to 6 years for legal/tax compliance. |
| Customer Support: Answering inquiries sent via contact forms or email. | Legitimate interest or consent (Art. 6.1.f/a GDPR). | Until the inquiry is resolved + 1 year. |
| Newsletter / Commercial Communications: Sending promotional updates and shop news. | Explicit consent via opt-in checkbox (Art. 6.1.a GDPR). | Until consent is withdrawn (unsubscribe link). |
3. Recipients of Data (Data Processors)
Your personal data will not be sold or shared with third parties, except where necessary for service delivery or legal obligations:
- Shipping Companies: Logistics providers for delivering orders (e.g., Correos, DHL, FedEx).
- Payment Gateways: Financial institutions for processing payments securely (e.g., Stripe, PayPal, Redsys).
- Hosting & Tech Providers: IT infrastructure suppliers (e.g., WordPress/WooCommerce host).
All third-party providers comply with GDPR requirements.
4. User Rights
You have the right to access, rectify, erase, restrict, or object to the processing of your personal data, as well as the right to data portability.
To exercise these rights, please send a written request accompanied by a copy of an official identification document (ID/Passport) to: shop [at] arculamystica.com.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es if you believe your data has been processed unlawfully.