Rules for the Management of Personal Data

Last updated: 27 April 2026

This Privacy Policy regulates the processing of personal data of users, customers and visitors of the website www.ateliercasa.es.

By accessing, browsing or using this website, as well as by making a purchase or contacting AtelierCasa.es, the user declares that they have read and understood this Privacy Policy.

1. Data Controller

The data controller and administrator of the website www.ateliercasa.es is:

Self-employed professional: Kraft Kostiantyn
Trade name: AtelierCasa.es
NIF/NIE: Z2480254P
Address: Calle Ebanista Hervas 17, Piso 3, 3A, 12004 Castellón de la Plana, Castellón, Spain
Telephone: +34 66 383 69 62
Email: [email protected]

Hereinafter referred to as the “Controller”, “AtelierCasa.es” or the “online store”.

2. Definitions

User: any person who accesses, browses or uses the website www.ateliercasa.es.

Customer or Buyer: any natural or legal person who purchases products or contracts services through the online store www.ateliercasa.es.

Personal data: any information that allows a natural person to be identified directly or indirectly, such as name, surname, address, telephone number, email address, IP address, purchase data or billing data.

Processing: any operation performed on personal data, such as collection, recording, storage, consultation, use, disclosure, modification or deletion.

Data processor: an external provider that processes personal data on behalf of AtelierCasa.es in order to provide a necessary service, such as hosting, transport, payments, email marketing, analytics or technical maintenance.

3. Applicable Regulations

The processing of personal data is carried out in accordance with the General Data Protection Regulation — GDPR, Regulation EU 2016/679, Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights — LOPDGDD, Spanish regulations on information society services and electronic commerce, as well as any other applicable regulations regarding data protection and privacy.

4. Principles Applied to Data Processing

AtelierCasa.es will process personal data according to the following principles:

• Data will be processed lawfully, fairly and transparently.
• Data will be collected for specific, explicit and legitimate purposes.
• Only data that is adequate, relevant and necessary for each purpose will be requested.
• Data will be kept up to date as far as possible.
• Data will be kept only for the time necessary to fulfil the purpose for which it was collected or for the periods required by law.
• Data will be processed using appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, disclosure, alteration or misuse.

5. Personal Data We May Collect

AtelierCasa.es may process the following categories of personal data:

• Name and surname.
• Delivery address.
• Billing address.
• Email address.
• Telephone number.
• Data relating to orders, purchased products, incidents, returns, exchanges or warranties.
• Billing data and documentation related to the purchase.
• Payment data necessary to manage the transaction.
• IP address, device identifiers, browser, operating system, language, date and time of access, visited pages and technical browsing data.
• Data obtained through cookies and similar technologies, where applicable.
• Information voluntarily sent by the user through forms, email, telephone, WhatsApp, chat, social media or other contact channels.
• Reviews, opinions, photographs or comments submitted by the customer, where applicable.
• Data related to commercial preferences, newsletter subscription or interaction with advertising campaigns, where the user has given consent or where another applicable legal basis exists.

6. Purposes of Processing

AtelierCasa.es will process personal data for the following purposes:

6.1. Management of Purchases and Orders

We use customer data to process purchases, confirm orders, prepare products, manage deliveries, resolve incidents, process returns, exchanges, warranties and claims.

For this purpose, we may process data such as name, surname, address, telephone number, email address, order number, purchased products and any information necessary to provide the service correctly.

6.2. Payment Management

Payments made on AtelierCasa.es may be managed through external payment service providers, including:

• Stripe
• PayPal
• Bizum
• Bank transfer

AtelierCasa.es does not store full bank card details. Such data is processed directly by the corresponding payment providers, in accordance with their own privacy policies, terms of use and security measures.

In the case of payment by bank transfer, AtelierCasa.es may process the data necessary to identify the payment, associate it with the corresponding order and comply with applicable accounting and tax obligations.

6.3. Delivery and Transport Management

For order delivery, AtelierCasa.es may communicate the necessary customer data to transport and logistics companies, including:

• Correos
• GLS
• SEUR
• Own delivery services

The data communicated may include name, surname, delivery address, telephone number, email address, order number, package information and any information necessary to correctly manage the delivery.

6.4. Billing and Legal Obligations

We process the data necessary to issue invoices, keep accounting documentation, comply with tax obligations, respond to public authorities and comply with applicable regulations.

This purpose may include the processing of name, surname, NIF/NIE/CIF where applicable, tax address, purchase data, payment data and documentation related to the transaction.

6.5. Customer Service

We use the data provided to respond to queries, requests for information, incidents, complaints, questions about products, deliveries, returns, warranties or any other matter related to AtelierCasa.es.

Customer service may be provided by email, telephone, web forms, WhatsApp, social media or other available channels.

6.6. Commercial Communications and Newsletter

By subscribing to the AtelierCasa.es newsletter, the user agrees that their email address will be added to a subscriber database for the purpose of receiving commercial communications, news, promotions, discounts and content related to AtelierCasa.es.

AtelierCasa.es uses SendPulse as an external email marketing provider for the management and sending of newsletters.

The user may unsubscribe at any time by clicking the unsubscribe link included in each email or by sending a request to: [email protected].

Unsubscribing from the newsletter does not affect the sending of necessary communications related to orders, payments, deliveries, warranties, returns, account security or compliance with legal obligations.

6.7. Personalised Marketing, Analytics and Website Improvement

AtelierCasa.es may use online analytics, measurement and advertising tools, including:

• Google Analytics
• Google Ads
• Meta Pixel
• TikTok Pixel

These tools may collect technical and browsing information, such as IP address, device identifiers, browser, visited pages, viewed products, website interactions, conversions, browsing behaviour and data related to advertising campaigns.

These tools will be used where an appropriate legal basis exists, especially the user’s consent when required under applicable cookie and data protection regulations.

The user may accept, reject or configure the use of cookies and similar technologies through the cookie banner or cookie settings panel available on AtelierCasa.es.

6.8. Ratings and Reviews

We may contact the customer after a purchase to request a review of the purchased product or the service received.

If the customer submits a review, comment, image, video or rating, they agree that such content may be published on AtelierCasa.es, product pages, social media, advertisements, promotional materials or commercial channels of AtelierCasa.es, unless they expressly state otherwise.

The customer is responsible for not including personal data of third parties, sensitive information or content that infringes third-party rights in their reviews.

6.9. Security and Fraud Prevention

We may process technical, browsing, purchase or payment data to detect abusive use, prevent fraud, protect website security, avoid unauthorised access and defend the rights and legitimate interests of AtelierCasa.es.

6.10. Technical Operation of the Online Store

AtelierCasa.es operates on the OpenCart platform, used for managing the online store, product catalogue, orders, customers and functionalities related to e-commerce.

Personal data may be processed in the technical systems necessary for the proper functioning of the online store, including servers, databases, hosting services, technical maintenance, IT security and backups.

7. Legal Basis for Processing

The legal basis for processing will depend on each purpose.

For managing purchases, orders, payments, deliveries, returns, exchanges and warranties, the legal basis is the performance of a contract.

For issuing invoices, keeping accounting documentation and complying with tax or legal obligations, the legal basis is compliance with legal obligations.

For responding to queries or providing customer service, the legal basis may be the implementation of pre-contractual measures, the performance of a contract or the legitimate interest in assisting the user.

For sending newsletters or commercial communications where there is no prior commercial relationship, the legal basis is the user’s consent.

For sending commercial communications about similar products to existing customers, the legal basis may be legitimate interest, provided that applicable regulations allow it and the user can easily object.

For using non-essential analytical, advertising, measurement or personalisation cookies, the legal basis is consent.

For preventing fraud, protecting the website, improving security or defending claims, the legal basis is legitimate interest.

For publishing reviews, photographs or comments voluntarily submitted by the customer, the legal basis may be the user’s consent or the legitimate interest of AtelierCasa.es in showing real opinions about its products and services.

8. Data Retention

AtelierCasa.es will keep personal data for the time necessary to fulfil the purposes for which it was collected.

Data related to orders, purchases, billing and accounting will be kept for the legally required periods.

Data used for customer service will be kept for the time necessary to manage the query, incident or claim.

Data used for commercial communications will be kept until the user withdraws consent, requests to unsubscribe or objects to the processing.

Data obtained through cookies will be kept as indicated in the Cookie Policy and in the cookie settings panel.

Data necessary for the defence of legal rights and interests will be kept during the applicable limitation periods.

Reviews, ratings or comments may be kept while they remain published on the website or commercial channels of AtelierCasa.es, unless the user requests their removal and such removal is legally appropriate.

9. Disclosure of Data to Third Parties

AtelierCasa.es will not sell the personal data of its customers.

However, in order to provide its services correctly, AtelierCasa.es may disclose personal data to third parties in the following cases:

• Transport and logistics companies, including Correos, GLS, SEUR and own delivery services, for order delivery.
• Payment service providers, including Stripe, PayPal, Bizum and banking entities, to manage transactions.
• Technology providers necessary for the operation of the online store, including systems based on OpenCart, hosting services, web maintenance, databases, IT security and backups.
• Email marketing provider SendPulse, to manage the sending of newsletters and commercial communications where applicable.
• Analytics and advertising tools, including Google Analytics, Google Ads, Meta Pixel and TikTok Pixel, where the user has provided the necessary consent or where another applicable legal basis exists.
• Tax, accounting or legal advisers, where necessary to comply with legal obligations or defend rights.
• Public authorities, administrations, courts or law enforcement bodies, where there is a legal obligation.
• Customer service providers, communication tools or internal management systems, where necessary to provide the service.

In the event of sale, transfer, merger, reorganisation or total or partial assignment of the business, data may be disclosed to potential buyers or successors, always with the corresponding legal safeguards.

10. Data Processors

Some external providers may access personal data on behalf of AtelierCasa.es as data processors.

In such cases, AtelierCasa.es will require those providers to process the data only according to its instructions, with appropriate security measures and in compliance with the GDPR.

These providers may include hosting services, web maintenance, e-commerce platforms, email marketing, analytics, advertising, payment management, transport, customer service, tax advice, backups and productivity tools.

11. International Data Transfers

As a general rule, AtelierCasa.es will try to use providers located within the European Economic Area.

However, some technology, advertising, analytics or email marketing providers may process data outside the European Economic Area.

Where providers located outside the European Economic Area are used, AtelierCasa.es will adopt the appropriate safeguards provided for under applicable regulations, such as adequacy decisions, standard contractual clauses approved by the European Commission or other valid mechanisms under the GDPR.

This may affect, among others, services such as Google, Meta, TikTok, Stripe, PayPal or SendPulse, depending on the specific configuration of each service and its applicable terms.

12. User Rights

The user may exercise the following rights:

• Right of access: to know whether AtelierCasa.es processes their personal data and to obtain information about such processing.
• Right to rectification: to request the correction of inaccurate or incomplete data.
• Right to erasure: to request the deletion of their data where appropriate.
• Right to object: to object to certain processing activities, including direct marketing.
• Right to restriction of processing: to request that the processing of their data be restricted in certain cases.
• Right to data portability: to receive their data in a structured format and transmit it to another controller where appropriate.
• Right to withdraw consent: to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Right not to be subject to automated decisions: not to be subject to decisions based solely on automated processing, including profiling, where such decisions produce legal effects or similarly significantly affect them.

13. How to Exercise Your Rights

The user may exercise their rights by sending a request to:

Email: [email protected]
Postal address: Calle Ebanista Hervas 17, Piso 3, 3A, 12004 Castellón de la Plana, Castellón, Spain

The request must clearly indicate the right the user wishes to exercise.

AtelierCasa.es may request additional information or documentation to verify the identity of the applicant where necessary.

AtelierCasa.es will respond to the request within the time limits established by applicable regulations.

14. Complaint to the Spanish Data Protection Agency

If the user considers that the processing of their personal data violates applicable regulations, they may lodge a complaint with the Spanish Data Protection Agency — AEPD.

However, before filing a complaint, the user may contact AtelierCasa.es at [email protected] to try to resolve any issue related to the processing of their personal data.

15. Data of Minors

The products and services of AtelierCasa.es are not specifically aimed at minors.

AtelierCasa.es will not knowingly collect personal data from minors without the authorisation of their parents or legal guardians where such authorisation is legally required.

If AtelierCasa.es detects that it has collected personal data from a minor without the corresponding authorisation, it will take reasonable measures to delete it.

16. Data Security

AtelierCasa.es will apply appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction.

These measures may include access controls, passwords, backups, technical updates, hosting security measures, web protection tools and internal data management procedures.

However, the user acknowledges that no computer system or data transmission over the Internet can guarantee absolute security.

17. Cookies and Similar Technologies

AtelierCasa.es may use its own and third-party cookies to enable the operation of the website, remember preferences, analyse browsing, improve services, measure advertising campaigns and, where the user consents, display personalised advertising.

The tools that may use cookies or similar technologies include:

• Google Analytics
• Google Ads
• Meta Pixel
• TikTok Pixel

The use of cookies is governed by the Cookie Policy of AtelierCasa.es, where the user can obtain detailed information and configure, accept or withdraw consent.

The user may change their cookie settings at any time through the settings panel available on the website, where such functionality is enabled.

18. Social Media

AtelierCasa.es may be present on social media platforms such as Instagram, Facebook, Pinterest, TikTok or others.

When the user interacts with AtelierCasa.es social media profiles, their data will also be processed in accordance with the privacy policies of each social network.

AtelierCasa.es may process the data provided by the user through messages, comments, mentions, forms or interactions on social media to respond to queries, manage requests, handle complaints, promote products or improve the relationship with customers and users.

The user should avoid publishing their own or third-party personal data in public comments if they do not wish such data to be visible to other users.

19. Newsletter

After subscribing to the AtelierCasa.es newsletter, the user’s email address will be added to our subscriber database.

While the email address is included in this database, AtelierCasa.es may send newsletters, news, promotions, discounts, offers, product recommendations and commercial communications related to the online store.

AtelierCasa.es uses SendPulse to manage the sending of newsletters and commercial communications.

The user may unsubscribe at any time by clicking the “unsubscribe” link or equivalent included at the bottom of each newsletter.

The user may also request unsubscription by writing to: [email protected].

The newsletter subscriber database is not necessarily linked to the order database. Therefore, even if the user unsubscribes from the newsletter, AtelierCasa.es may continue to send necessary communications related to purchases, orders, payments, deliveries, incidents, warranties, returns, exchanges, account security or legal obligations.

20. Data Related to Customers

AtelierCasa.es may process customer data as follows:

Data provided directly by the customer, such as name, surname, email address, telephone number, delivery address, billing address and order information, will be used to manage purchases, deliveries, payments, returns, warranties, customer service, billing and compliance with legal obligations.

Data related to purchases and billing will be kept for the periods required by applicable tax, accounting and commercial regulations.

Data related to customer service will be kept for the time necessary to manage each case and, subsequently, for the periods necessary to defend against possible claims.

Data used for commercial communications will be kept until the user withdraws consent, requests unsubscription or objects to the processing.

Data voluntarily included in reviews, opinions or ratings may be published and kept for as long as appropriate to show customer experiences, unless the user requests its removal and such removal is legally appropriate.

21. Data Related to Website Visitors

AtelierCasa.es may process data from website visitors, such as IP address, device identifiers, browser, operating system, visited pages, viewed products, browsing time, website interactions and data derived from cookies or similar technologies.

This data may be used to:

• Ensure the proper technical functioning of the website.
• Improve the browsing experience.
• Analyse website usage.
• Measure the performance of advertising campaigns.
• Personalise content or ads, where the user has given consent.
• Prevent fraud, abuse or unauthorised access.

Where processing is based on non-essential cookies, the user’s consent will be requested through the corresponding banner or settings panel.

22. Necessary Communications Related to Orders

AtelierCasa.es may send the customer necessary communications related to their order, even if they are not subscribed to the newsletter.

These communications may include order confirmation, payment confirmation, order status updates, shipping information, delivery incidents, invoices, returns, warranties, exchanges, claims or communications necessary to provide the contracted service.

These communications are not promotional in nature and are necessary for the proper execution of the purchase.

23. Accuracy of the Data Provided

The user guarantees that the personal data provided to AtelierCasa.es is true, accurate, complete and up to date.

The user will be responsible for any damage, loss or incident caused by the communication of false, inaccurate, incomplete or outdated data.

If the user’s data changes, they must inform AtelierCasa.es in order to keep the information updated.

24. Modification of the Privacy Policy

AtelierCasa.es may modify this Privacy Policy when necessary to adapt it to legal, technical, commercial or operational changes of the website.

The new version will enter into force from the moment it is published on www.ateliercasa.es.

If the changes are relevant, AtelierCasa.es may inform users by reasonable means, such as a notice on the website or communication by email where appropriate.

If the user continues to use the services of AtelierCasa.es after the publication of the changes, it will be understood that they have read the new version of the Privacy Policy.

25. Contact

For any questions about this Privacy Policy or about the processing of personal data, the user may contact AtelierCasa.es through:

Email: [email protected]
Telephone: +34 66 383 69 62
Postal address: Calle Ebanista Hervas 17, Piso 3, 3A, 12004 Castellón de la Plana, Castellón, Spain