Shopping Cart
There are no more items in your cart
Privacy Policy
Data Controller
Edabea Natura S.L.
Calle Gaiko Kale, nº 11 bajo, 20749 Aizarnazabal, Gipuzkoa
CIF: B75166058
Phone: 943041494
Email: contacto@edabea.com
Applicable Legislation
The processing of personal data by Edabea Natura S.L. is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and the Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights (LOPDGDD).
What data do we collect and for what purpose?
Customers and users of the online store
- Data collected: first name, last name, shipping and billing address, email, phone number, and order history.
- Purpose: order management, product shipping, invoice issuance, and customer service.
- Legal basis: execution of a contract.
Contact form
- Data collected: name and email.
- Purpose: to respond to the user's inquiry or request.
- Legal basis: consent of the interested party.
Newsletter and commercial communications
- Data collected: email.
- Purpose: sending commercial communications about products and news from Edabea Natura S.L.
- Legal basis: consent of the interested party.
- The user can unsubscribe at any time via the link included in each communication.
Retention periods
The data will be retained for the minimum necessary time for each purpose and, in any case:
- Customers: during the term of the contractual relationship and subsequently until the applicable legal obligations expire.
- Contact form: until the inquiry is resolved and for one additional year.
- Newsletter: until the user withdraws their consent.
Data Processors and Recipients
For the provision of contracted services, Edabea Natura S.L. may share personal data with third parties when necessary for managing orders, payments, shipments, legal obligations, or technical services related to the online store.
Edabea Natura S.L. has suppliers acting as data processors, with whom the corresponding data processing contracts have been signed where applicable.
| Provider | Service | Type of relationship | Location |
|---|---|---|---|
| Digital Factory | Hosting, email, and web technical support | Data processor | Spain / European Union |
| Contracted Transport Company | Order management and delivery | Data processor or independent controller, depending on the type of postal service contracted and applicable regulations | Spain / European Union. In case of international shipments, necessary communications may occur for order delivery. |
| External IT Technician | Technical support, maintenance, and occasional access to systems | Data processor | Spain / European Union |
| Redsys and corresponding bank entity | Secure processing of card payments | Independent data controllers | Spain / European Union |
| Google LLC | Web analytics and statistics | Technology provider | United States, with adequate safeguards in accordance with applicable regulations |
Payment data is entered into the corresponding secure gateway. Edabea Natura S.L. does not store or access the full bank card data of the user.
Edabea Natura S.L. does not disclose personal data to third parties unless required by law or when necessary for the provision of the contracted service.
International Transfers
In general, Edabea Natura S.L. does not carry out international data transfers. However, certain technology providers, such as Google LLC, may involve processing outside the European Economic Area. In these cases, transfers will only occur when there are adequate safeguards in accordance with the GDPR, such as adequacy decisions, standard contractual clauses, or other legally valid mechanisms.
In the case of international shipments, the necessary data for order delivery may be communicated to logistics operators in the destination country when essential for executing the service requested by the customer.
Rights of Interested Parties
The user can exercise the following rights at any time:
- Access: to know what personal data Edabea Natura S.L. processes.
- Rectification: to correct inaccurate or incomplete data.
- Erasure: to request the deletion of data when they are no longer needed.
- Restriction of processing: to request that data be retained only for the exercise or defense of claims.
- Portability: to receive data in a structured format or request its transfer to another controller.
- Objection: to object to processing when appropriate.
- Withdrawal of consent: to withdraw consent at any time when processing is based on it.
To exercise these rights, the user can contact contacto@edabea.com, providing their first name, last name, the right they wish to exercise, and attaching a copy of their ID or equivalent identification document.
If the user believes that the processing of their data is not in accordance with the regulations, they can file a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.
Security Measures
Edabea Natura S.L. has implemented the necessary technical and organizational measures to ensure the security of personal data and prevent its alteration, loss, unauthorized processing, or access. The website is equipped with SSL encryption for secure data transmission.
Accuracy of Data
The user is responsible for the accuracy of the data provided and undertakes to communicate any changes. Edabea Natura S.L. will not be liable for any damages arising from inaccuracies in the data provided by the user.
Last update: April 2026