Privacy policy
Your privacy matters. This document explains how María Fernández Martín processes personal data and outlines your rights as a user.
Data controller
María Fernández Martín — NIF 11436027J.
Contact: info@djmariamartin.com
Purposes of processing
- Managing and delivering the contracted service.
- Sending newsletters, offers and targeted marketing communications.
- Responding to enquiries and general communication.
- Managing ratings and reviews.
- Reminders for unfinished requests.
- Creating and maintaining customer accounts.
- Complying with applicable legal obligations.
Access to your personal data
Data is processed mainly internally. It may be shared with: payment providers, shipping agencies, review-publishing platforms, referral providers, Google and Meta (for marketing) and IT service providers.
Transfers outside the EU/EEA
Some data may be transferred to the United States under the applicable legal frameworks that protect the fundamental rights of European data subjects in international transfers.
Your rights
- Withdraw your consent or object to processing.
- Access your personal data.
- Rectify inaccurate data.
- Request erasure and restriction of processing.
- File a complaint with the supervisory authority (AEPD).
- Data portability.
Retention periods
| Purpose | Period |
|---|---|
| Abandoned cart | Up to 5 days |
| Gallery / image wall | 1 year |
| Response to enquiries | 3 years |
| Purchase management | 12 months |
| Legal accounting obligations | 7–8 years |
| Customer account | 12 years from last access |
| Newsletters | Until unsubscription; 2 years if processed under legitimate interest |