Privacy and cookies
Who is responsible for your data
Marc Urtasun · NIF 43458598Y · Calle Sardenya 338 4o 2a · info@marcurtasun.com
What data I process and why
- If you email me: your email address and whatever you tell me, to answer you. Legal basis: your consent when you write to me.
- If you buy something: your name, email, phone number and shipping address, the products you bought and the amount paid. I use them to process and ship your order, send you the confirmation and tracking emails, and handle returns and warranty claims (legal basis: performance of the purchase contract), and to comply with my tax and accounting obligations (legal basis: legal obligation).
- Your card details are processed directly by Stripe, the payment platform: I never see or store them.
- I do not send advertising or newsletters, and I do not make automated decisions or profiles about you.
Who I share it with
Only with the providers needed to run the shop, all of them bound by data processing agreements:
- Stripe (payments)
- Resend (sending the order emails)
- Vercel (website hosting) and Cloudflare (storage of files and orders)
- The courier that delivers your parcel, through Packlink (only your name, address and phone number)
- My accountant, for bookkeeping and tax purposes
Some of these providers may process data outside the European Economic Area (for example, in the United States). In that case they do so with the safeguards required by the GDPR, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
How long I keep it
- Emails: for as long as needed to answer you and follow up on your enquiry.
- Orders: for as long as the purchase relationship lasts and, afterwards, for the periods required by law (generally up to 6 years for accounting and tax obligations).
- Unpaid orders (if you leave the payment page without paying) are deleted automatically.
Your rights
You can ask me at any time to access, rectify or delete your data, to object to or restrict its processing, and to receive it in a portable format, by writing to info@marcurtasun.com. If you think your data has not been handled properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
Cookies and storage in your browser
This website does not use analytics or advertising cookies. It only uses:
- lang (cookie, 1 year): remembers the language you chose.
- Your browser's local storage: the shopping cart, the shipping country and the light/dark theme. This information never leaves your browser.
- adm_session (cookie): only for the owner, when logging into the admin panel.
- Stripe: when you go to pay, you are taken to Stripe's payment page, which uses its own cookies, necessary for the payment and for fraud prevention.
- Vimeo and YouTube videos: they are embedded in privacy-enhanced / "do not track" mode. Even so, when you play them, those services may store data according to their own policies.
- Instagram photos: they are loaded from an external server (Feedspring), which receives your IP address like any other website.
All of these are technical or necessary to provide what you ask for, so they do not require your consent. You can delete them at any time from your browser settings.
Last updated: 30 September 2026