Privacy Policy
Last updated: 24 June 2026
At Tienda de Camisetas Frikis (hereinafter, «the Store») we take the privacy of your data very seriously. This Privacy Policy explains what personal data we process, for what purpose, on what legal basis, with whom we share it and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD) and Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE).
1. Data controller
- Holder: Alejandro Fernández Payno
- Address: Santa Quiteria 22, 28430 Alpedrete (Madrid), Spain
- Website: tiendacamisetasfrikis.com
- Data protection contact email: privacidad@tiendacamisetasfrikis.com
2. What personal data do we process?
Depending on how you interact with the Store, we may process the following categories of data:
- Identification and contact data: name, surname, postal address, email address and telephone number.
- Order and billing data: products purchased, shipping and billing addresses, amount and purchase history.
- Payment data: handled directly by our payment gateways. We do not store full card numbers on our servers.
- Subscription data: email address and contact language when you subscribe to our club or newsletter.
- Browsing data: IP address, device and browser type, pages visited and information collected through cookies (see section 9).
3. Purposes and legal basis for processing
- To manage your orders, payments, shipping and the contractual relationship. Legal basis: performance of a contract (Art. 6.1.b GDPR).
- To comply with our legal, tax and accounting obligations (for example, issuing invoices). Legal basis: compliance with a legal obligation (Art. 6.1.c GDPR).
- To send you the welcome coupon and commercial communications (news and offers) when you subscribe. Legal basis: your consent (Art. 6.1.a GDPR), which you may withdraw at any time.
- To handle your enquiries and requests. Legal basis: your consent or our legitimate interest in responding to you (Art. 6.1.f GDPR).
- Cookies and analytics and advertising tools (for example, from Meta or Google). Legal basis: your consent (Art. 6.1.a GDPR and Art. 22 LSSI-CE).
- To prevent fraud and ensure the security of the Store. Legal basis: legitimate interest (Art. 6.1.f GDPR).
We do not make automated decisions producing legal or similarly significant effects on you. If you accept marketing cookies, the indicated providers may build advertising profiles solely to measure and target campaigns.
4. Retention periods
- Order and billing data: for the duration of the contractual relationship and, thereafter, for the legal tax and commercial limitation periods (up to 6 years under the Spanish Commercial Code).
- Newsletter subscription data: until you withdraw your consent (unsubscribe).
- Browsing data and cookies: according to the periods set out in our cookie information.
Once the purposes have been fulfilled, your data will be blocked and kept solely at the disposal of the authorities for the legally required periods, after which it will be securely deleted.
5. Recipients and processors
In order to provide our services, we share data, strictly to the extent necessary, with providers acting as data processors:
- Hostinger — website hosting (servers in the European Union).
- WooCommerce Payments / Stripe — card payment processing.
- PayPal (Europe) S.à r.l. et Cie, S.C.A. — payment processing via PayPal.
- Printful — print-on-demand and shipping of products (receives the name and shipping address needed to deliver your order).
- Meta Platforms (Facebook / Instagram) — measurement and optimisation of advertising campaigns, only if you accept marketing cookies.
- Google — conversion measurement and advertising, only if you accept the corresponding cookies.
We do not sell or transfer your data to third parties for purposes other than those described in this policy, except where legally required.
6. International data transfers
Some of our providers (such as Printful, Meta or Google) may process data in countries outside the European Economic Area, mainly in the United States. In such cases, these transfers are covered by the safeguards provided for in the GDPR, such as the EU-US Data Privacy Framework and/or the Standard Contractual Clauses approved by the European Commission.
7. Your rights
You may exercise the following rights over your data at any time:
- Access to your personal data.
- Rectification of inaccurate data.
- Erasure of your data («right to be forgotten»).
- Restriction of processing.
- Objection to processing.
- Portability of your data to another controller.
- Withdrawal of the consent given, without affecting the lawfulness of prior processing.
To exercise them, write to privacidad@tiendacamisetasfrikis.com stating the right you wish to exercise and attaching a copy of a document proving your identity. If you believe we have not properly handled your request, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid (www.aepd.es).
Likewise, persons connected to a deceased user may contact us to request access to their personal data and, where applicable, its rectification or erasure, in accordance with Article 96 of the LOPDGDD.
8. Security measures
We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration, including encryption of communications (HTTPS) and restricted access to personal information.
9. Cookies
We use our own and third-party cookies for the proper functioning of the Store, usage analysis and, with your consent, for marketing purposes. You can accept, configure or reject non-essential cookies at any time. You will find details of the cookies used in our cookie information.
10. Commercial communications and unsubscribing
If you subscribe to our newsletter, you will receive the welcome coupon and, where applicable, news and offers. You can unsubscribe at any time via the link included in each email or by writing to privacidad@tiendacamisetasfrikis.com.
11. Minors
The Store is not directed at children under 14. If you are under that age, please do not provide us with your personal data without the consent of your parents or legal guardians.
12. Changes to this policy
We may update this Privacy Policy to adapt it to legislative changes or changes in our services. We will publish any modifications on this same page, indicating the date of the last update.