1. Data Controller

Elizabeth Van Keerbergen Association.
Barrio Riocarbos 10, Cantabria, 39679, Spain.
Tax ID: G39815550
Email: [email protected]

2. Introduction

This Privacy Policy explains how the EVK Association ("we", "our") collects, uses, and protects personal data through the website evk.es (the "Site"), in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).

By using this Site, you acknowledge that you have read and understood this Privacy Policy.

3. What Personal Data We Collect and Why

We only collect personal data that you voluntarily provide to us.

3.1 Purchase Process

When you place an order in our store, we collect your name, shipping and billing address, email, and phone number. This data is necessary to manage your order, shipping, and billing. The legal basis is the performance of a contract (Art. 6.1.b GDPR).

Payment data (credit card, PayPal, etc.) is processed directly by our payment gateway, PayPal, and is not stored on our servers.

3.2 Contact Form

When you use the contact form, we collect your name, email, and the content of your message, for the sole purpose of responding to your inquiry. The legal basis is our legitimate interest in managing communications (Art. 6.1.f GDPR).

4. Data Retention

• Completed orders: retained for 5 years, in accordance with Spanish tax regulations.
• Contact data (form): retained for a maximum of 2 years from receipt, after which it is permanently deleted.
• User account data: retained as long as the account remains active, or until you request its deletion.

5. Third-Party Services

For the operation of this Site, we use the following third-party services that may process personal data:

WooCommerce (by Automattic): e-commerce platform that manages our store and orders.

WooCommerce PayPal Payments: processes payments made on the Site (PayPal, credit card, Google Pay, Apple Pay). PayPal acts as an independent data controller for payment data. More information in PayPal's Privacy Policy.

WP Mail SMTP with Brevo (formerly Sendinblue): WP Mail SMTP manages the sending of transactional emails (order confirmation, shipping, etc.) from [email protected] through Brevo's infrastructure. Brevo acts as a data processor on our behalf. More information in Brevo's Privacy Policy.

Jetpack (by Automattic): we use Jetpack for Site security and performance features. Its statistics module collects anonymized data on Site visits (page views, approximate location, browser type). This data is processed by Automattic, Inc. More information in Automattic's Privacy Policy.

Rank Math SEO: used to optimize Site content for search engines. It does not collect personal data from visitors unless the Site Analytics feature is active, in which case it processes aggregated and anonymized traffic data.

WPML: used to offer the Site in multiple languages (Spanish, English, Italian). WPML sets a cookie to remember your language preference. No personal data is shared with third parties through this plugin.

UpdraftPlus: used to back up the Site. It does not share personal data with third parties.

Complianz: used to manage the Site's cookie consent and maintain a record of users' consent preferences.

WP Rocket: used to improve the Site's performance and loading speed through caching techniques. It sets strictly necessary technical cookies for its operation. It does not share personal data with third parties.

Network Solutions Plugin: used to integrate the Site with our hosting provider's control panel, Network Solutions, for performance, security, and update purposes. Network Solutions may process technical server data as part of providing the hosting service. More information in the Network Solutions Privacy Policy.

6. Your Rights Under the GDPR

As a data subject, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Request the erasure of your personal data ("right to be forgotten").
• Request the restriction of processing of your data.
• Object to processing based on legitimate interest.
• Withdraw your consent at any time, without affecting the lawfulness of prior processing.
• File a complaint with the Spanish Data Protection Agency (AEPD) at aepd.es.

To exercise any of these rights, please contact us at: [email protected]

7. Data Security

We adopt reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or disclosure.

8. Children's Privacy

This Site is not directed at children under 14 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, please contact us and we will delete it immediately.

9. Changes to This Policy

We may update this Privacy Policy periodically. The date at the top of this page will always reflect the most recent version.