This Privacy Policy regulates the data processing carried out by EKIEKO in relation to users interacting with the websites:

• https://ekieko.es/en/

• https://ekieko.com

• https://ekieko.fr

• https://ekieko.de

• https://ekieko.it

• https://ekieko.pt

(hereinafter referred to as the "Website" o "EKIEKO").

By using the Website, requesting information, registering as a customer or making a purchase, you agree to this Privacy Policy.

1. Responsible for the treatment

Responsible:
Karina Vázquez Fernández
TAX IDENTIFICATION NUMBER: ES71521834E
Trade name: EKIEKO

Contact (privacy): contact (at) https://ekieko.es/en/
Activity: online store of organic food, natural cosmetics and hygiene and wellness products.

2. Data we collect

EKIEKO may process the following categories of data:

2.1. Data provided directly by the user

• Name and surname

• Shipping and billing address

• DNI/NIF (if applicable in invoicing)

• Phone

• E-mail address

• Bank / payment details (handled directly by PayPal or CECA)

• Information included in messages sent by form or WhatsApp

• Data to manage returns or warranties

2.2. Data derived from the use of the Web Site

• Browsing data (pages visited, clicks, products added to cart)

• IP address (anonymized where applicable)

• Session identifiers

• Technical, statistical and advertising cookies (see Cookies Policy)

2.3. Data from authorized third parties

• Payment platforms (PayPal, CECA)

• Transport platforms (carriers, pick-up points)

• Advertising platforms (Google Ads, Meta Ads, TikTok Ads)

• Analytical tools (Google Analytics 4)

EKIEKO does not process particularly sensitive data (health, ideology, etc.).

3. Purposes of treatment

EKIEKO will process your data for the following purposes:

3.1. Order management and service delivery

• Processing orders

• Order preparation, shipping and delivery

• Billing and accounting

• Management of returns, exchanges and warranties

• Notifications related to your purchase

Legal basis: execution of a contract (art. 6.1.b RGPD).

3.2. Manage your user account

• Account creation and maintenance

• Purchase history

• Address List

• User Preferences

• Security and access

Legal basis: execution of the contract / legitimate interest.

3.3. Customer service and support

• Respond to queries by email, form or WhatsApp

• Resolution of incidents and complaints

• After-sales management

Legal basis: execution of the contract and legitimate interest.

3.4. Sending commercial communications

(Only if you have subscribed to the newsletter or have accepted to receive offers)

• Newsletters

• Customized offers

• Product information and promotions

• Remarketing campaigns (Meta, Google, TikTok)

Legal basis: express consent.

You can unsubscribe at any time from the link included in each email.

3.5. Web Site Security

• Protection against fraud and unauthorized access

• Protection against bots (Cloudflare Turnstile, Google reCAPTCHA)

• Technical incident management

• Control of malicious traffic and cybersecurity

Legal basis: legitimate interest of EKIEKO.

3.6. Statistical analysis and improvement of the Web site

• Traffic measurement

• Site performance analysis

• Conversion optimization

Tools: Google Analytics 4, Google Tag Manager.

Legal basis: consent (when cookies are not technical).

4. Data retention

5. Data recipients

EKIEKO only shares data with:

5.1. Suppliers required to provide the service

• Hosting / servers

• PrestaShop (software)

• Payment platforms (PayPal, CECA)

• Logistics operators (couriers, carriers)

• Transactional email services (if applicable)

• Cloudflare (security and CDN)

5.2. Analytical and advertising platforms

• Google Analytics / Tag Manager

• Google Ads

• Meta (Facebook / Instagram)

• TikTok Ads

This exchange only takes place if you have given your consent for analytical or advertising cookies.

5.3. Support tools

• WhatsApp Business (Meta)

EKIEKO does not sell personal data to third parties.

6. International transfers

Data processed by providers such as Google, Meta, TikTok, PayPal or Cloudflare may be transferred outside the European Economic Area.

EKIEKO requires these suppliers to use:

• Standard Contractual Clauses (SCC) approved by the European Commission

• and complementary security measures where appropriate.

You can consult their privacy policies on their respective websites.

7. User rights

You may exercise the following rights:

• Access to your data

• Correction (modification of incorrect data)

• Suppression ("right to be forgotten")

• Opposition to treatment

• Limitation of the treatment

• Portability

• Withdrawal of consent (e.g. newsletter or cookies)

How to exercise them?

By sending an email to:

📧 contact (at) https://ekieko.es/en/
Subject: "Data protection - Request for rights"

You will need to identify yourself so that we can fulfill your request.

If you feel that your rights have not been respected, you may file a complaint with:

AEPD - Agencia Española de Protección de Datos (Spanish Data Protection Agency)
https://www.aepd.es

8. Data security

EKIEKO applies appropriate technical and organizational measures:

• sSL encryption

• firewall and CDN protection

• bot mitigation

• access control

• log auditing

• security copies

• regular updating of the platform

9. Links to third party sites

The Website may include links to social networks or external platforms. EKIEKO does not control such sites and is not responsible for their content or their own privacy policies.

10. Changes to this Privacy Policy

EKIEKO may modify this Policy to adapt it to:

• legislative or jurisprudential changes,

• new AEPD criteria,

• technical updates to the Web Site

• or new data processing.

If the changes are substantial, the user will be informed and consent will be requested again when necessary.

11. Contact

For privacy and data protection related inquiries:

📧 contact (at) https://ekieko.es/en/
Recommended subject: "Privacy"