Privacy policy

Privacy PolicyLast updated: October 23, 2026

Data Controller and Contact The controller of the data processed by 1%. arte is Simona Ruseva Karova, NIF/NIE Z4549046L, with registered address at Calle San Pascual 157, bajo, 03181 Torrevieja, Alicante, Spain. You can contact us at info@unporciento.art or at +34 624 854 989.

This policy explains the processing of data belonging to visitors, buyers, and people who contact the store, in accordance with the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). Browsing the site or reading this policy does not constitute giving general consent for all data processing activities.

Data and Source We process the data you provide when making a purchase, submitting an inquiry, or reporting an issue: first name, last name, email address, phone number, billing and shipping addresses, professional billing details when applicable, products, amounts, payment status, and the content of your communications. Mandatory data is identified in each form; without it, it may not be possible to process the purchase or respond to the request.

Payment providers manage the data necessary to authorize the transaction. The store receives the information required to identify and reconcile the payment, without you having to send us your full card number or security code by email. Shipping carriers may provide us with information regarding delivery and any related incidents.

The platform may process technical data, such as IP address, browser, session identifiers, and security logs. The use of cookies and similar technologies is explained in the Cookie Policy and, where applicable, is subject to your choices in the preferences panel.

Purposes and Legal Bases

• Orders, payments, deliveries, downloads, and returns: We process the data necessary to prepare and execute the contract and handle any related issues, pursuant to Article 6(1)(b) of the GDPR. Inquiries aimed at entering into a contract are handled on the same pre-contractual basis.

• Invoicing and tax, accounting, and consumer obligations: Processing is based on compliance with legal obligations, pursuant to Article 6(1)(c) of the GDPR. The contact details of company representatives are used to manage the professional relationship, based on legitimate interest and, where applicable, Article 19 of the LOPDGDD.

• Other inquiries, fraud prevention, and security: We use the data strictly necessary to respond to requests, protect the service, and defend legal rights, based on legitimate interest, following an assessment of necessity and of your rights. You may object where applicable.

• Commercial communications: We use your email address for news and offers if you request or authorize it through a specific opt-in choice. This choice is optional and does not affect your purchase. You may withdraw your consent at any time using the unsubscribe link in each message or by writing to us. Messages necessary to manage a purchase do not constitute an advertising subscription.

• Visit measurement, unsolicited personalization, and behavioral advertising: Only the tools identified in the applicable cookie and privacy information will be used, and with your consent when required. Consent is not presumed merely by continuing to browse. The preferences panel and cookie inventory identify the tools used and the participating third parties.

Recipients and Service Providers Shopify provides the e-commerce platform and processes the data necessary to host the store and manage its functions. Depending on the service, it may act on behalf of the store (as a data processor) or as a controller for its own processing activities. You can consult its consumer privacy policy at https://www.shopify.com/legal/privacy/app-users and exercise your rights regarding its own processing activities at https://privacy.shopify.com/en.

The payment providers you choose, banking institutions, Correos (for physical deliveries), the email and support services used to assist you, and our accounting and tax advisors may also have access to the necessary data. When they act on our behalf, their access will be subject to the corresponding contractual data protection obligations. Providers acting as independent data controllers provide information regarding their own processing activities.

Data will be disclosed to public administrations, courts, and authorities when there is a legal obligation to do so. Selecting a payment provider implies that said provider receives the information necessary to provide the chosen service. Data is not shared for incompatible advertising purposes without the corresponding legal basis.

International Transfers The use of Shopify and certain technology providers may involve the processing of data outside the European Economic Area (EEA). These transfers will be carried out using legally applicable mechanisms, such as adequacy decisions or Standard Contractual Clauses (SCCs) and, where applicable, supplementary measures.

Shopify's information regarding these transfers and their safeguards is set out in its Data Processing Addendum: https://www.shopify.com/es-es/legal/apd (English version available at https://www.shopify.com/legal/dpa). You may request information about the safeguards applicable to our providers and how to obtain a copy at unporcientoarte@gmail.com.

Data Retention Order data is retained throughout the contractual relationship and thereafter for the periods necessary to handle warranties, claims, and legal obligations. Accounting and commercial documents are generally kept for six years, and documents subject to tax obligations are kept for the applicable tax limitation periods, generally four years, taking into account the rules on calculation and interruption of limitation periods.

Inquiries are kept for as long as necessary to respond and, if they give rise to a relationship or claim, for the periods associated with it. Marketing data is used until you withdraw your consent or request to unsubscribe. The minimum information necessary to prove your choice and prevent future mailings (such as a suppression list) may be retained. Once the purposes have been fulfilled, the data will be deleted or blocked (restricted) as legally required.

The duration of each cookie or similar technology is indicated in the cookie inventory. Consent records are kept for the time necessary to demonstrate that consent was obtained and to meet associated legal responsibilities.

Your Rights You may request access, rectification, erasure, restriction of processing, and data portability where applicable, object to processing based on legitimate interest, and withdraw any consent granted. Withdrawal of consent does not affect the lawfulness of prior processing. Nor does it deprive you of an already contracted purchase when the data remains necessary to execute it or comply with a legal obligation.

Send your request to unporcientoarte@gmail.com or to the postal address indicated above, explaining the right you wish to exercise. We will only ask for additional identification information if it is necessary and proportionate. We will generally respond within one month; if a legal extension applies due to complexity, we will inform you within that first month.

You may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos - AEPD) at https://www.aepd.es, especially if you consider that we have not properly addressed your rights. It is not mandatory to file a complaint with us first.

Security and Changes We apply proportionate technical and organizational measures to protect information. Please avoid including sensitive data or unnecessary documentation in your inquiries. Contracting is intended for individuals with the legal capacity to make purchases; we do not use a mere declaration of legal age as a substitute for the applicable child protection safeguards.

We will update this policy when processing activities change. Updates will be published with their effective date, and changes will be communicated or new consents requested when necessary.

Shopify Network Intelligence We use Shopify Network Intelligence. To provide its enhanced services, Shopify processes information about your visits and purchases and may combine it with data from your interactions with other merchants and with Shopify. These features may include security, personalization, and advertising, subject to applicable consents and other legal requirements. To provide these services, information is shared with Shopify and participating providers, which may be located in other countries. You can consult Shopify's own processing activities at https://www.shopify.com/legal/privacy/app-users and manage your rights regarding them at https://privacy.shopify.com/en.