Política de privacidad
Data Controller: Orselia Jewelry · www.orselia.com · info@orselia.com · +34 641 456 599 · Barcelona, Spain
1. Data Controller
The data controller for your personal data is Orselia Jewelry, with registered office in Barcelona, Spain. For any query related to your data, contact us at info@orselia.com or by phone at +34 641 456 599. The full tax details of the owner are available in the Legal Notice section of the website.
2. Personal Data We Collect
- Identification data: name and surname
- Contact data: email address, phone number
- Shipping and billing data: postal address, zip code, city, country
- Browsing data: IP address, browser type, pages visited (through cookies — see Cookie Policy)
- Purchase data: order history, products purchased, payment method used (we never store full card data)
3. Purpose and Legal Basis of Processing
| Purpose | Legal basis (GDPR) |
|---|---|
| Order management, shipping and tracking | Contract execution — Art. 6.1.b |
| Billing and tax obligations | Legal obligation — Art. 6.1.c |
| Customer service and incidents | Contract execution / legitimate interest |
| Sending newsletters and commercial communications | Express consent — Art. 6.1.a |
| Statistical browsing analysis | Consent / legitimate interest |
| Personalized advertising (Meta Ads / Google Ads) | Express consent |
4. Data Retention Period
- Orders and billing: 5 years (Spanish tax obligation)
- Customer account data: as long as it is active + 3 years after its closure
- Marketing data: until you withdraw consent
- Browsing data / cookies: depending on the type of cookie (see Cookie Policy)
5. Recipients of the Data
Orselia Jewelry does not sell or transfer your data to third parties for its own purposes. They can only access it to the extent necessary for the service:
- Shopify Inc. — ecommerce platform (transfer to USA under Standard Contractual Clauses)
- Zendrop / Teemdrop — fulfillment providers for shipping management (name, address, phone)
- Shipping companies — for order delivery
- Payment gateways — PayPal, Stripe / Shopify Payments (under their own PCI-DSS policies)
- Marketing tools — only with your prior express consent
6. Your Rights (GDPR)
You can exercise your rights of access, rectification, erasure, opposition, restriction and portability at any time by sending an email to info@orselia.com with the subject "GDPR Rights" and attaching a copy of your identification document. We will respond within a maximum of 30 calendar days.
If you consider that the processing does not comply with the regulations, you can file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
7. Security
Orselia Jewelry applies SSL/TLS encryption in all website communications and appropriate technical and organizational measures to protect your data against unauthorized access, loss or destruction.
Last updated: May 2026 · Orselia Jewelry · www.orselia.com