Privacy policy

1. Controller

This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit our website, browse our products, or place an order. It also explains the rights available to you under the General Data Protection Regulation (GDPR) and how you can exercise them.

The controller responsible for the processing of personal data described in this policy is:

Autoescuela
Avenida Andalucía
41804 Olivares, Spain
Email: contact@autoescuelas.shop
Phone: 34669842926

If you have any questions about this policy or about how your personal data is handled, please contact us using the details above.

2. What Data We Collect

We collect different categories of personal data depending on how you interact with our website — simply browsing the site, placing an order, or contacting us directly. Each category is described below, together with the legal basis under the GDPR that allows us to process it.

2.1 When You Visit the Site

When you browse our website, our server temporarily logs certain technical information for security and reliability purposes. This may include your IP address, the date and time of your visit, the URL you requested, the referring page, and information about your browser and operating system. This data is processed on the basis of our legitimate interest in keeping our website secure, stable, and functioning correctly (legal basis: GDPR Art. 6(1)(f)).

2.2 When You Place an Order

To process and fulfill an order, we need to collect the information required to complete the transaction. This includes your name, billing and shipping address, email address, phone number (optional), and payment details. We use this data solely to process your order, arrange shipping, and manage any related customer service requests. Legal basis: GDPR Art. 6(1)(b), as this processing is necessary to perform the contract between you and us.

2.3 When You Contact Us

If you contact us — by email, phone, or through a contact form — we store the content of your message along with the contact details you provide, so that we can respond to your inquiry and keep a record of the correspondence. Legal basis: GDPR Art. 6(1)(b) and (f).

3. How We Share Your Data

We do not sell your personal data. We only share personal data with third parties in the following circumstances:

  • you have explicitly given your consent to the sharing;
  • sharing is necessary to fulfill a contract with you (for example, providers involved in delivering your order or processing payment);
  • we are subject to a legal obligation requiring disclosure; or
  • we have a legitimate interest in the disclosure, in accordance with GDPR Art. 6(1)(f).

Any third party that processes personal data on our behalf is required to handle it in accordance with applicable data protection law and only for the purposes we specify.

4. Cookies

We use cookies that are strictly necessary for the website to function correctly, such as those required to keep items in your cart or to keep you securely logged in. These necessary cookies do not require your consent, as they are essential to providing the service you request.

Optional cookies — including those used for analytics or marketing purposes — are only set after you have given your consent through our cookie banner. You can manage or withdraw your cookie preferences at any time through the settings available in that banner.

5. Services We Use

To operate our store, we rely on the following service providers, each of which processes personal data under its own privacy policy:

  • Hosting: This site is hosted on Shopify (Shopify Inc., 150 Elgin Street, Ottawa, ON, K2P 1L4, Canada), which provides the technical infrastructure needed to run our online store.
  • Payment processing: Payments are processed by our configured payment providers, shown at checkout. Each payment provider operates under its own privacy policy governing how it handles your payment data.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, including any period required to comply with our legal, accounting, or reporting obligations. Once data is no longer needed for these purposes, it is deleted or anonymized.

7. Your Rights

Under the GDPR, you have the following rights in relation to your personal data:

  • the right to request access to your personal data (Art. 15);
  • the right to request correction of inaccurate or incomplete data (Art. 16);
  • the right to request deletion of your data (Art. 17);
  • the right to request restriction of processing (Art. 18);
  • the right to data portability (Art. 20);
  • the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Art. 7(3));
  • the right to lodge a complaint with a supervisory authority (Art. 77).

To exercise any of these rights, please contact us at contact@autoescuelas.shop. We will respond to your request in accordance with applicable data protection law.

8. Right to Object

Where we process your personal data on the basis of our legitimate interest, you have the right to object to that processing at any time under GDPR Art. 21. If you object, we will stop processing your data for those purposes unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defense of legal claims.

To exercise your right to object, or if you have any other questions about how we handle your personal data, please contact us at contact@autoescuelas.shop or by phone at 34669842926.