Privacy and cookies

Who is responsible for your data

Marc Urtasun · info@marcurtasun.com

What data I process and why

If you email me: your email address and whatever you tell me, to answer you. Legal basis: your consent when you write to me.
If you buy something: your name, email, phone number and shipping address, the products you bought and the amount paid. I use them to process and ship your order, send you the confirmation and tracking emails, and handle returns and warranty claims (legal basis: performance of the purchase contract), and to comply with my tax and accounting obligations (legal basis: legal obligation).
Your card details are processed directly by Stripe, the payment platform: I never see or store them.
I do not send advertising or newsletters, and I do not make automated decisions or profiles about you.

Who I share it with

Only with the providers needed to run the shop, all of them bound by data processing agreements:

Stripe (payments)
Resend (sending the order emails)
Google Ireland Ltd. (Google Analytics, only if you accept analytics cookies)
Vercel (website hosting) and Cloudflare (storage of files and orders)
The courier that delivers your parcel, through Packlink (only your name, address and phone number)
My accountant, for bookkeeping and tax purposes

Some of these providers may process data outside the European Economic Area (for example, in the United States). In that case they do so with the safeguards required by the GDPR, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

How long I keep it

Emails: for as long as needed to answer you and follow up on your enquiry.
Orders: for as long as the purchase relationship lasts and, afterwards, for the periods required by law (generally up to 6 years for accounting and tax obligations).
Unpaid orders (if you leave the payment page without paying) are deleted automatically.

Your rights

You can ask me at any time to access, rectify or delete your data, to object to or restrict its processing, and to receive it in a portable format, by writing to info@marcurtasun.com. If you think your data has not been handled properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

Cookies and storage in your browser

This website does not use advertising cookies. The first time you visit, a notice lets you accept or reject the analytics cookies; none of them are set until you accept. Without them, the website only uses:

lang (cookie, 1 year): remembers the language you chose.
Your browser's local storage: the shopping cart, the shipping country and the light/dark theme. This information never leaves your browser.
adm_session (cookie): only for the owner, when logging into the admin panel.
Stripe: when you go to pay, you are taken to Stripe's payment page, which uses its own cookies, necessary for the payment and for fraud prevention.
Vimeo and YouTube videos: they are embedded in privacy-enhanced / "do not track" mode. Even so, when you play them, those services may store data according to their own policies.
Instagram photos: they are loaded from an external server (Feedspring), which receives your IP address like any other website.

All of these are technical or necessary to provide what you ask for, so they do not require your consent.

Analytics cookies (only if you accept):

Google Analytics (Google Ireland Ltd.): the cookies _ga (2 years) and _ga_XXXXXXXXXX (2 years) let me know, in aggregate form, how many people visit the website, which pages they see and how they arrive. I use this information only to improve the website. The data may be processed by Google in the United States under the safeguards mentioned above. Legal basis: your consent.
Your choice is saved in your browser's local storage (cookie-consent), so you are not asked again. You can change or withdraw your consent at any time with the "Cookie settings" link at the bottom of every page. Rejecting is as easy as accepting and has no effect on how you use the website.

You can also delete cookies at any time from your browser settings.

Last updated: 30 September 2026