Last updated: June 2026 · In accordance with the GDPR (EU) 2016/679 and the Spanish LOPDGDD
1. Data controller
Guillermo Bornaechea Pérez — VEKSU (sole trader), Calle Valdemorillo 65, 28925 Alcórcon, Madrid, Spain. Tax ID (CIF): 53816480E. Email: veksu.store@gmail.com
2. Personal data we process
When you place an order through veksu.com, we process the following data:
- Name and surname
- Email address
- Full postal address (to arrange delivery)
- Payment data — processed directly by Stripe; VEKSU does not store any bank or card details
We do not collect data from children under 16, nor any special category of data under Article 9 GDPR.
3. Purpose of processing
The data you provide is used exclusively to:
- Manage and fulfil your order
- Communicate with you about the status of your shipment
- Comply with our legal and tax obligations
We do not use your data to send marketing communications without your prior, explicit consent.
4. Legal basis
The legal basis for processing your data is the performance of the sales contract, under Article 6(1)(b) GDPR. Processing is necessary in order to manage your order and deliver the product.
Where processing is necessary to comply with a legal obligation to which the controller is subject, the legal basis is Article 6(1)(c) GDPR.
5. Recipients and transfers
Your data may be shared with the following third parties, strictly to the extent needed to fulfil the order:
- Stripe, Inc. — payment processing — United States (EU Standard Contractual Clauses)
- Carrier — delivery of the order — Spain / EU
We do not transfer data to third parties for their own commercial purposes. Stripe operates under its own privacy policy, available at stripe.com/privacy.
6. Retention period
Order data is kept for as long as needed to perform the contract and afterwards for the periods required by Spanish tax and commercial law (as a general rule, 5 years for tax obligations and 6 years for commercial obligations).
7. Your rights
Under the GDPR and the Spanish LOPDGDD, you may exercise the following rights over your personal data:
- Access: find out what data we hold about you
- Rectification: correct inaccurate or incomplete data
- Erasure: ask us to delete your data
- Objection: object to processing in certain circumstances
- Restriction: ask us to restrict processing
- Portability: receive your data in a structured format
To exercise these rights, write to veksu.store@gmail.com. We will reply within one month of receiving your request.
If you believe your data is not being processed lawfully, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) or with the supervisory authority in your own country.
8. Data security
VEKSU applies the technical and organisational measures needed to keep personal data secure and to prevent its loss, alteration, unauthorised access or unlawful processing, in line with the state of the art and the nature of the data processed.
Note: this policy has been prepared with care, but it does not constitute legal advice. The Spanish version at veksu.com/privacidad is the reference text.