Last updated: May 2025

1. Data Controller

The data controller for your personal data is:

OKTOP SC
Carrer Curos, 6
17488 Cadaqués, Girona, Spain
Email: info@oktop.es
Phone: 872 205 209

2. What Data We Collect

When you use our online store, we may collect the following data:

• Contact details: name, postal address, phone number and email address.
• Order information: billing and shipping address, payment confirmation, items purchased.
• Browsing data: IP address, device and browser type, pages visited and time spent.
• Communications: messages you send us through contact forms or email.

3. How We Use Your Data

• Order management: processing payments, managing shipments, returns and purchase-related queries.
• Communication: sending order confirmations, shipping notifications and relevant account information.
• Marketing: sending commercial communications if you have given your consent. You can unsubscribe at any time.
• Service improvement: analysing store usage to improve the shopping experience.
• Legal compliance: retaining necessary information in accordance with applicable tax and legal obligations.

4. Legal Basis for Processing

• Contract performance: processing necessary to handle your orders.
• Consent: sending marketing communications, which you can withdraw at any time.
• Legitimate interest: fraud prevention and service improvement.
• Legal obligation: compliance with tax and accounting regulations.

5. Who We Share Your Data With

We do not sell your personal data to third parties. However, we may share it with:

• Shopify Inc.: the e-commerce platform that powers our store.
• Payment providers: to process transactions securely.
• Shipping companies: to manage the delivery of your orders.
• Analytics tools: to improve store performance (anonymised or aggregated data wherever possible).

All providers are subject to data processing agreements in compliance with the GDPR.

6. International Transfers

Some of our providers (such as Shopify) may process data outside the European Economic Area. In such cases, we ensure that transfers are carried out under appropriate safeguards, such as the Standard Contractual Clauses approved by the European Commission.

7. How Long We Retain Your Data

• Order data: minimum 5 years, in accordance with Spanish tax legislation.
• Account data: while your account is active and 2 years after the last activity.
• Marketing communications: until you withdraw your consent.
• Browsing data: maximum 13 months.

8. Your Rights

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access: know what personal data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request that we delete your data when it is no longer necessary.
• Restriction: request that we restrict the processing of your data.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interest or for direct marketing purposes.
• Withdraw consent: at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, write to us at info@oktop.es with your request and a copy of your ID document.

If you believe your data is not being handled appropriately, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

9. Cookies

Our store uses first-party and third-party cookies to improve the browsing experience, analyse traffic and display relevant advertising. You can manage your cookie preferences through your browser settings.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any significant changes will be notified to you by email or via a prominent notice in the store before they take effect.

11. Contact

For any questions about this policy or the processing of your data:

• Email: info@oktop.es
• Phone: 872 205 209
• Address: Carrer Curos, 6 — 17488 Cadaqués, Girona, Spain