1. Controller
The controller responsible for processing your personal data is Burbur Pet Care SL, C/ Charles Darwin, Edificio Bogaris, Oficina 1, Sevilla, Spain, email [email protected], phone +34 637 96 00 52. Data protection contact (if appointed): [DATA PROTECTION CONTACT].
2. Personal data we collect
- Checkout data: first and last name, email, phone, shipping address, order notes, ordered products, prices, currency and delivery method.
- Contact form: name, email, optional order number and your message.
- Technical data: data necessary to deliver and secure the website, such as IP address, device/browser information, timestamps and request logs held by our hosting provider.
- Local storage on your device: cart, wishlist, currency and cookie choices. These are not customer accounts and ordinarily stay in your browser.
- Consent data: the categories you accept or reject and the time your choice is saved.
3. Purposes and legal basis
- Processing, reviewing and delivering your order, and communicating about it — performance of a contract (Art. 6(1)(b) GDPR).
- Answering enquiries — contract or pre-contract measures, or our legitimate interest in responding (Art. 6(1)(b)/(f)).
- Keeping accounting, consumer-law and tax records — legal obligation (Art. 6(1)(c)).
- Preventing fraud, maintaining security and defending legal claims — our legitimate interests (Art. 6(1)(f)).
- Optional analytics and marketing technologies — only with your consent (Art. 6(1)(a)).
4. Retention
Order and invoice data is retained for the period required by applicable accounting, tax and consumer law: [RETENTION PERIOD]. Contact messages are deleted when no longer needed to handle the enquiry or related claim. Security logs are retained for [SECURITY LOG RETENTION]. Consent choices remain on your device until changed, cleared or expired.
5. Recipients and processors
We use carefully selected service providers acting on our behalf under data processing agreements, such as our website hosting and database provider, email delivery provider and delivery/shipping partners. We share delivery data with shipping carriers only as needed to deliver your order. [LIST OF PROCESSORS]
6. International transfers
Where a provider processes data outside the European Economic Area, we ensure appropriate safeguards are in place, such as an adequacy decision or the European Commission's Standard Contractual Clauses. [DETAILS OF TRANSFERS, IF ANY]
7. Security
We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS) and restricted access to order data.
8. Whether data is required
Checkout fields marked as required are necessary to process an order. Without them, we cannot accept or deliver the order. Optional notes and apartment details may be left blank. We do not use solely automated decision-making that produces legal or similarly significant effects.
9. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing. Contact us at [email protected] to exercise your rights.
10. Right to complain
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work or place of the alleged infringement. Our lead supervisory authority is: [SUPERVISORY AUTHORITY].
11. Cookies and local storage
See our Cookie Policy.
12. Changes to this policy
We may update this policy when our services, providers or legal obligations change. The current version and its update date will remain available on this page.
Last updated: [DATE]