Last updated: [DATE]. Professional template to be reviewed by a lawyer/DPO before final publication.
1. Data controller
[COMPANY NAME], Tax ID [TAX ID], registered at [ADDRESS], contact email [CONTACT EMAIL], is the controller for processing your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish LOPDGDD.
2. Data we process
- Account data: name, email, delivery address, phone number.
- Order and billing data (including tax data required for invoicing).
- Parsley Green credit history: containers returned, balance, movements.
- Payment data: processed directly by our payment gateway (Stripe); Parsley Green does not store your full card details.
3. Purpose and legal basis
- Managing your account, orders, and Parsley Green credit — performance of a contract.
- Issuing invoices and complying with tax obligations — legal obligation.
- Sending transactional communications (order confirmation, shipping, credit received) — performance of a contract.
- Sending commercial communications — only with your express consent.
4. Recipients
We share strictly necessary data with: the supplier preparing and delivering your order, the payment gateway (Stripe), and hosting/infrastructure providers. We do not sell your data to third parties.
5. International transfers
Some technology providers (for example, payment gateways) may process data outside the European Economic Area, always under appropriate safeguards (standard contractual clauses or another valid mechanism under the GDPR).
6. Retention
We retain order and billing data for the period required by Spanish tax and commercial regulations. Account data is retained while the account remains active.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction, and portability by writing to [CONTACT EMAIL]. You can also file a complaint with the Spanish Data Protection Agency (aepd.es).