Privacy Policy

Last updated: 03 January 2026
Effective date: 03 January 2026

This Privacy Policy describes how Rioja Art Lab, operated by Martin Berdini Mateo, collects, uses, and protects your personal data when you access or use the website https://www.riojaartlab.com (the “Service”), in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish data protection law.

1. Data Controller

Controller: Martin Berdini Mateo
Address: Rio Ebro 18, La Rioja 26140, Spain
Email: info@riojaartlab.com
Phone: 660708881

2. Personal Data We Collect

We may collect and process the following personal data:

• Identification data: name and surname

• Contact data: email address, phone number

• Shipping and billing address

• Order and transaction data

• Payment confirmation data (we do not store full payment details)

• Technical data: IP address, browser, device information

• Account data (if you create an account)

Generated Instructions

If our service generates custom instructions or digital outputs for your order:

• ❌ We do not store uploaded photos or source images

• ✅ We store only the generated instructions, exclusively so that the customer can download them again at any time

3. Purpose and Legal Basis of Processing

We process your personal data for the following purposes and legal bases:

4. Payment Processing

Payments are processed securely through third-party providers:

• WooCommerce Payments

• PayPal

We do not store credit card or full payment details. These providers act as independent data controllers or data processors in accordance with their own privacy policies.

5. Shipping and Logistics

To fulfill your order, we share the necessary data (name, address, contact details) with our logistics provider:

• envia.com

This data is used exclusively for delivery purposes.

6. Data Retention

We retain personal data only for the minimum period required by law:

• Order and billing data: up to 6 years, in accordance with Spanish tax and accounting regulations

• Customer account data: while the account remains active

• Generated instructions: available while the customer account exists or while needed to provide the service

• Marketing data: until consent is withdrawn

After these periods, data will be securely deleted or anonymized.

7. Data Recipients and International Transfers

Your data may be shared with:

• Payment providers (WooCommerce Payments, PayPal)

• Shipping providers (envia.com)

• Hosting and technical service providers (Hostinger)

• Analytics and cookie providers (as defined in the Cookie Policy)

Some providers may be located outside the European Union. In such cases, transfers are carried out using appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.

8. Your Rights

You have the right to:

• Access your personal data

• Rectify inaccurate data

• Request erasure (right to be forgotten)

• Restrict or object to processing

• Request data portability

• Withdraw consent at any time

• Lodge a complaint with the Spanish Data Protection Authority (AEPD)

You may exercise these rights by contacting us at info@riojaartlab.com.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to ensure proper website functionality and, where applicable, for analytics and marketing purposes.

Cookie usage and consent management are handled through CookieYes.
For more information, please refer to our Cookie Policy.

10. Data Security

We apply appropriate technical and organizational security measures to protect your personal data against unauthorized access, loss, or misuse. However, no system is completely secure, and we cannot guarantee absolute security.

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect legal or operational changes.
Any significant changes will be published on this page and will take effect upon publication.