Last updated: 22 October 2026
This Privacy Policy explains how the personal data of people who visit www.danielsueiras.com, contact us or purchase from the online shop is processed, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and Ley Orgánica 3/2018, de Protección de Datos Personales y garantía de los derechos digitales (LOPDGDD, Spanish Organic Law on the Protection of Personal Data and Guarantee of Digital Rights).
1. Data controller
Controller: Daniel Sueiras Fanjul
NIF (Tax ID): 44962922S
Address: Calle Alquiladores 12, 11500 El Puerto de Santa María, Cádiz, Spain
Email: prints@danielsueiras.com
For any matter relating to the processing of your personal data, you can write to prints@danielsueiras.com.
2. What data we process
We process only the data necessary for each purpose:
- Purchases in the shop: first name and surname(s), billing and delivery address, email address, telephone number, products purchased, amounts, any tax details you provide and order history.
- Contact form: name, email address and the content of your message.
- Newsletter: email address and the date on which you confirmed your subscription.
- Customer account: if you have an account, your login details and the data associated with your orders.
- Browsing: IP address, technical data about your device and browser, and information obtained through cookies, under the terms of the Cookie Policy.
Payment data: card payments are processed directly by the Stripe payment gateway. Daniel Sueiras does not receive or store your full bank card details; it only receives confirmation of payment and certain limited transaction data (for example, the card type and its last digits).
3. Purposes and legal bases
- Managing your orders: processing the purchase, payment collection, preparation, shipping and delivery, returns, refunds and incidents. Legal basis: performance of the sales contract (Art. 6(1)(b) GDPR).
- Invoicing and legal obligations: issuing invoices and complying with accounting, tax and consumer protection obligations. Legal basis: compliance with legal obligations (Art. 6(1)(c) GDPR).
- Responding to your enquiries: replying to messages sent via the contact form or by email. Legal basis: your consent (Art. 6(1)(a) GDPR) and, where the enquiry relates to a purchase, performance of the contract.
- Sending you the newsletter: keeping you informed about new works, editions, exhibitions and shop news. Legal basis: your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.
- Website security and operation: preventing fraud and misuse and ensuring the technical security of the website. Legal basis: the controller’s legitimate interest (Art. 6(1)(f) GDPR).
- Website usage statistics: understanding, in aggregate form, how the website is used, by means of Google Analytics. Legal basis: your consent, given in the cookie settings panel (Art. 6(1)(a) GDPR). If you do not accept, it is not used.
No automated decisions are made and no profiles producing legal effects concerning users are created.
4. Retention period
- Order and invoice data: for the duration of the commercial relationship and, thereafter, for the periods required by commercial and tax legislation (generally, six years).
- Contact form enquiries: for the time necessary to deal with them and, thereafter, for the limitation period of any liabilities that may arise.
- Newsletter: until you unsubscribe or withdraw your consent.
- Customer account: for as long as the account remains active or until you request its deletion, without prejudice to the retention of order data indicated above.
- Cookies: for the periods indicated in the Cookie Policy.
Once these periods have elapsed, the data will be erased or anonymised.
5. Recipients of the data
We do not sell or disclose your personal data to third parties for commercial purposes. In order to provide the shop’s services, certain providers access the strictly necessary data, acting as processors or, where applicable, as independent controllers of their own service:
- Stripe (Stripe Payments Europe, Limited, Ireland): processing of card payments and fraud prevention.
- Packlink (Packlink Shipping, S.L., Spain) and the carriers that make the delivery: management and shipping of orders. They receive the name, delivery address, telephone number and email address necessary for delivery and tracking.
- Brevo (Sendinblue SAS, France): sending of the newsletter, management of subscriptions and synchronisation of the contact and purchase data of the shop’s customers.
- Google (Google Ireland Limited, Ireland): website usage statistics by means of Google Analytics, only if you accept analytics cookies; and playback of the YouTube video on the “About Daniel” page, only if you choose to play it.
- Web hosting, technical maintenance and email providers, necessary for the operation of the website and of communications.
- Public authorities, courts and tribunals, where there is a legal obligation.
- Banks and payment institutions, in the management of payments and refunds.
6. International transfers
Some providers, such as Stripe or Google, may process data outside the European Economic Area, mainly in the United States. Brevo processes newsletter data within the European Union. In such cases, transfers are carried out with the safeguards provided for in the GDPR, such as the EU-U.S. Data Privacy Framework or the standard contractual clauses approved by the European Commission.
7. Commercial communications
We will only send you the newsletter or other commercial communications if you have expressly subscribed, via the form on the website or by ticking the corresponding box when making a purchase, and have confirmed your subscription from the email we send you (double opt-in).
All communications include a link to unsubscribe. You can also request to unsubscribe by writing to prints@danielsueiras.com.
Emails relating to your orders (confirmation, shipping, invoice, incidents) are not commercial communications and will be sent in all cases, as they are necessary to manage the purchase.
8. Your rights
You may exercise the following rights at any time:
- Access: to know what data about you we process.
- Rectification: to correct inaccurate or incomplete data.
- Erasure: to request that your data be deleted when it is no longer necessary.
- Objection: to object to certain processing.
- Restriction: to request that processing be restricted in certain cases.
- Portability: to receive your data in a structured, commonly used format.
- Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.
To exercise them, write to prints@danielsueiras.com stating the right you wish to exercise. If necessary to verify your identity, we may ask you for additional information.
If you consider that your data has not been processed correctly, you may lodge a complaint with the Agencia Española de Protección de Datos (AEPD, Spanish Data Protection Agency) (www.aepd.es).
9. Minors
The online shop is aimed at adults. Data from children under 14 years of age is not knowingly collected. If we detect that data of a minor has been provided without the corresponding authorisation, it will be deleted.
10. Accuracy of data
You are responsible for ensuring that the data you provide to us is truthful and up to date. If you provide data of third parties, for example a delivery address in another person’s name, you must have their authorisation.
11. Security
We apply appropriate technical and organisational measures to protect personal data against loss, misuse or unauthorised access, such as an encrypted connection (HTTPS) across the entire website and restricted access to information.
12. Cookies
This website uses its own and third-party cookies. You can find out which cookies are used and how to configure them in the Cookie Policy.
13. Further information
Use of the website is governed by the Legal Notice, and purchases by the Terms and Conditions.
This Privacy Policy may be updated to adapt it to legal changes or changes in the website’s services. The current version will always be available on this page.
This English version is provided for information purposes. In the event of any discrepancy, the Spanish version shall prevail.
