Privacy Policy
1. Data Controller
Trade name: UnioMarc®
Owner: Sole trader (self-employed / autónomo)
Registered address: Carrer Mare de Déu del Roser, Sant Cugat del Vallès, Barcelona, Spain
Contact email: info@uniomarc.es
For any matter related to the protection of your personal data, including the exercise of your rights, please contact us at info@uniomarc.es.
2. What Personal Data We Collect
Depending on how you interact with our Website, we may collect:
Account data: name, email address, and password, if you register an account.
Order and billing data: name or legal company name, billing and shipping address, phone number, email, tax identification details (type, number, and issuing country), whether you purchase as an individual or as a company, and order details, when you place an order.
Newsletter data: email address, if you subscribe to our newsletter.
Contact form data: name, email address, and the content of your message, if you contact us.
Navigation and cookie data: browsing information collected through cookies and similar technologies, as described in our Cookie Policy.
3. Purposes and Legal Basis for Processing
Purpose Legal basis
Managing your account and processing your orders Performance of a contract (Art. 6.1.b GDPR)
Sending the newsletter and marketing communications Consent (Art. 6.1.a GDPR)
Responding to enquiries submitted through the contact form Consent / pre-contractual measures (Art. 6.1.a / 6.1.b GDPR)
Basic website analytics and security Legitimate interest (Art. 6.1.f GDPR)
Compliance with tax, accounting, and consumer protection obligations Legal obligation (Art. 6.1.c GDPR)
4. Purchases Made Through Third-Party E-Commerce Platforms
In addition to direct purchases made on this Website, our products may also be offered for sale through third-party e-commerce platforms. When you purchase through one of these platforms, that platform acts as an independent data controller for the personal data you provide to it (such as your payment and delivery details), and processes that data under its own privacy policy.
UnioMarc® only receives from these platforms the personal data strictly necessary to fulfil your order (e.g., name, shipping address, and order details), and does not transfer your personal data to these platforms on its own initiative beyond what is required to process the same order. We recommend that you also review the privacy policy of the specific platform through which you made your purchase.
5. Data Recipients and International Transfers
Your personal data may be shared with third-party providers who assist us in operating our business, such as hosting, payment processing, or shipping services. All of our current providers are based in Spain, and no international transfers of personal data outside the European Economic Area currently take place. Should this change in the future, we will update this Privacy Policy accordingly and, where required, implement the appropriate safeguards under the GDPR.
6. Data Retention
We retain your personal data only for as long as necessary for the purposes for which it was collected:
Account and order data: for the duration of the business relationship and, thereafter, for the period required to comply with applicable tax and commercial legal obligations (generally up to 6 years).
Newsletter and marketing data: until you withdraw your consent or unsubscribe.
Contact form enquiries: for as long as necessary to handle your request and, subsequently, for a reasonable period in case of follow-up.
Security and access logs: failed access attempts and rate-limit records for 90 days; successful access and access-administration records for 12 months.
7. Your Rights
You have the right to:
Access your personal data;
Rectify inaccurate data;
Erase your data ("right to be forgotten");
Restrict or object to certain processing;
Data portability;
Withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise any of these rights, please contact us at info@uniomarc.es. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) if you believe your data protection rights have been infringed.
8. Data Protection Officer
Given the nature and scale of our activity, the appointment of a Data Protection Officer (DPO) is not mandatory. For all matters relating to the protection of your personal data, please contact us directly at info@uniomarc.es.
9. Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or alteration.
10. Security and Access Logs
When you sign in to your account or access a private Certificate of Authenticity, we record limited security information to protect accounts, certificates and our services from unauthorized access, fraud and abuse, and to investigate access-related incidents. These records may include the date and time, the outcome and reason category of the attempt, an internal account or certificate identifier, a masked email address or certificate number, a truncated network address and non-reversible keyed identifiers derived from the email address, certificate number and IP address. We never record passwords, access credentials, session tokens or authentication cookies.
Failed access attempts, rate-limit events and technical access errors are retained for 90 days. Successful accesses, explicit sign-outs and administrative changes to access credentials or private-access settings are retained for 12 months. Records are then deleted automatically. We process this information on the basis of our legitimate interests in securing our services, preventing misuse and establishing, exercising or defending legal claims. Access is restricted to authorized administrators and service providers responsible for hosting and security.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable legislation. We encourage you to review this page periodically.