Privacy policy

1. Data controller
Pikantista S.L., Tax ID (NIF) B93881761
Calle Balleneros 10 (bajo), 20009 Donostia-San Sebastián, Spain
Email: general@pikantista.com · Phone: +34 695 766 424

2. Purposes and legal basis

  • Order processing: name, address, email, phone and order and payment details, to process and ship your purchase. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and compliance with legal, tax and accounting obligations (Art. 6(1)(c) GDPR).
  • Enquiries (contact form, email, WhatsApp): to answer your request. Legal basis: your request and our legitimate interest in responding (Art. 6(1)(b) and 6(1)(f) GDPR).
  • Newsletter: your email address, only with your consent (Art. 6(1)(a) GDPR and Art. 21 of the Spanish LSSI). You can unsubscribe at any time via the link in every email.
  • Web analytics: Google Analytics 4, only if you accept it in the cookie banner (Art. 6(1)(a) GDPR and Art. 22(2) LSSI).

3. Recipients
We only share data where necessary for the purposes above:

  • Shopify (Shopify International Ltd., Ireland): online shop platform, hosting and Shop Pay.
  • PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg): payment, if you choose PayPal.
  • UPS: shipping and order tracking.
  • Google (Google Ireland Ltd.): web analytics, only with your consent.
  • Tax advisors and public authorities, where required by law.

Shopify, PayPal and Google may transfer data to the United States. These transfers are based on the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

4. Cookies
We use technical cookies needed for the shop to work (cart, checkout), which do not require consent. Analytics cookies (Google Analytics 4) are only set if you accept them in the banner. You can change or withdraw your consent at any time via "Cookie preferences" in the footer.

5. Retention period

  • Order and invoice data: 6 years (Art. 30 of the Spanish Commercial Code) and any periods required by tax law.
  • Enquiries: until resolved, then for the applicable legal limitation periods.
  • Newsletter: until you unsubscribe.

6. Your rights
You have the right to access, rectify, erase, object to, restrict the processing of and port your data, and to withdraw your consent at any time, by writing to general@pikantista.com. If you believe your data has not been handled correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Last updated: October 2026