Last updated: 29 October 2026
At La Botavara we process your data lawfully, fairly and transparently, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). This policy explains what data we use, why, and what your rights are.
Data controller
La Botavara Tienda Marinera S.L. · Tax ID B93296556 · Urb. Áncora nº 29, 30380 La Manga del Mar Menor (Murcia), Spain · [email protected] · +34 968 43 05 10.
What data we process, why and on what legal basis
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Managing your orders: payment, shipping, invoicing, returns, guarantee and after-sales service, including guest orders. | Name, address, email, phone, order and billing details | Performance of the contract and legal obligations (tax and commercial) | For the duration of the relationship and then blocked for the legal periods (up to 6 years) |
| Your customer account, if you choose to create one | Name, email, encrypted password, addresses and orders | Performance of the contract (your account request) | Until you delete it or ask us to |
| Answering your questions by email, phone, form or social media | Name, contact details and content of your message | Your request and our legitimate interest in helping you | As long as needed to resolve it and up to 2 years |
| Sending you news and offers by email | Name and email | Your consent (a specific box, never pre-ticked) or, if you are already a customer, our legitimate interest in offering products similar to those you bought (art. 21.2 LSSI) | Until you unsubscribe, which you can do at any time using the link in every email |
| Publishing your product reviews, if you leave one | Name or nickname and review | Your consent | While published or until you ask us to remove it |
| Giveaways and promotions on social media | Those required by the rules of each giveaway | Your consent when you take part | Up to 12 months after the giveaway |
| Website usage statistics | Browsing data via cookies | Your consent (see our Cookie policy) | As stated in the Cookie policy |
| Security of the website and prevention of fraud and spam | IP address and technical logs | Our legitimate interest in protecting the shop and our customers | Up to 12 months |
Fields marked with an asterisk (*) are required; without them we cannot handle your order or question. We do not make automated decisions with legal effects on you or create profiles. You must be of legal age to buy, and we do not process data of children under 14.
Who we share your data with
We do not sell or give away your data. We only share it when needed to provide the service or when required by law:
- Carriers (MRW in Spain and DHL, UPS, DPD or FedEx for international shipments): name, address and phone to deliver your order.
- Payment providers: Redsys and our bank for card, Bizum, Apple Pay and Google Pay payments; PayPal if you pay with PayPal. They process your card or account details; we never see them.
- Service providers working for us under a data processing agreement: web hosting (Profesional Hosting, in Spain), email service and, if you accept cookies, Google statistics and security tools (Google Analytics, reCAPTCHA).
- Public authorities (tax agency, courts, police) when required by law.
Some of these providers (Google, PayPal) may process data in the United States. Such transfers rely on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.
Your rights
You can ask us at any time to access, rectify or erase your data, object to or restrict its processing, and for the portability of the data you gave us. If you gave consent for something, you can withdraw it at any time, without affecting anything done before.
Write to [email protected] or by post to the address above, stating which right you want to exercise. If we are unsure of your identity, we may ask you to prove it. We will reply within one month. You can also change your details yourself in "My account".
If you believe we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid).
Security
We apply technical and organisational measures to protect your data: the website uses an encrypted connection (HTTPS), passwords are stored encrypted, and payments are made on the payment providers' gateways, without going through our servers.
Changes to this policy
If we make significant changes to this policy, we will show them on this page and, if they affect something you consented to, we will let you know.