Privacy Policy
Last updated: April 2, 2026
1. Data Controller
- Name: Raquel Calderín Alonso
- NIF: 54092017L
- Address: Calle El Jardín 8, 35216 Las Vegas, Valsequillo de Gran Canaria, Las Palmas, Spain
- Email: siemprecontigolibro@gmail.com
2. What data we collect and why
2.1. Customer data
We collect your email address to process the order and send you confirmation. The legal basis is performance of contract (Art. 6.1.b GDPR).
2.2. Book personalization data
We collect data that the parent or legal guardian voluntarily provides to personalize the book: child's name, date of birth, memories, and variant selection. Personalization data is provided by the adult, never directly by the child. The adult placing the order declares that they are the parent or legal guardian of the child whose data they provide.
2.3. Technical data
IP address (processed by our hosting provider for security purposes) and technical session cookies.
3. Data Processors
We share data with the following providers, all with adequate data protection safeguards under the EU-US Data Privacy Framework (DPF):
- Stripe, Inc. — Payment processing (EE.UU. / USA, EU-US DPF)
- Neon, Inc. — Database (EE.UU. / USA, EU-US DPF)
- Resend, Inc. — Transactional email (EE.UU. / USA, EU-US DPF)
- Railway Corp. — Hosting (EE.UU. / USA, EU-US DPF)
We do not sell, rent, or share your personal data with third parties for marketing purposes.
4. International transfers
Our service providers are located in the United States. Data transfers are carried out under the EU-US Data Privacy Framework, which provides an adequate level of protection as determined by the European Commission's adequacy decision.
5. Data retention periods
- Order data (email, personalization): 5 years from purchase (Spanish tax and commercial law, Art. 30 Commercial Code).
- Payment data: managed by Stripe per their retention policy.
- Technical data (logs): 12 months (security and fraud prevention).
6. Your rights
As a data subject, you have the following rights regarding your personal data:
- Access: request a copy of your personal data.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion of your data when no longer necessary.
- Restriction: restrict processing in certain circumstances.
- Portability: receive your data in a structured, commonly used format.
- Objection: object to processing in certain cases.
To exercise any of these rights, send an email to siemprecontigolibro@gmail.com with your name, the email address associated with your order, and which right you wish to exercise. We will respond within 30 days.
If you believe your rights have not been properly addressed, you may file a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.
7. Security
We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (HTTPS/TLS), restricted data access, and service providers with recognized security certifications.
8. Changes to this policy
We reserve the right to update this policy. Any changes will be published on this page with the updated date.