Privacy policy
Last update: May 2025
1. Responsible for treatment
In compliance with Regulation (EU) 2016/679 (RGPD) and of the Organic Law 3/2018 (LOPDGDD), we inform you of the data of the treatment manager:
CIF: B93366904
Street Diderot, 3, Ship 6, 29004 Málaga, Spain
Phone: +34 605 080 940
Email: info @peskayak.com
Web: https://www.peskayak.com
2. Personal data we deal
Client data and registered users: Name and Surname, Postal address of delivery and billing, email, phone and history of orders. The payment data is processed by PCI-DSS certified platforms; We do not store banking card data.
Navigation data: IP address, browser type, visited pages, permanence time and cookies (according to our cookies policy).
Contact information: Name, email and any information that the user voluntarily facilitates through the contact form or by phone.
3. Purposes and legal basis of treatment
| Purpose | Legal basis | Conservation period |
|---|---|---|
| Order management and contractual relationship | Execution of the contract (art. 6.1.b Rgpd) | 5 years since the last operation |
| Sending Commercial Communications (Newsletter) | Consent (art. 6.1.a Rgpd) | Until the consent is removed |
| Customer Service and Claims Resolution | Legitimate interest / contract (art. 6.1.b and f rgpd) | 3 years since resolution |
| Compliance with legal obligations (AEAT) | Legal obligation (art. 6.1.c Rgpd) | 6 years (Commercial and Fiscal Legislation) |
| Statistical analysis and improvement of the website | Legitimate interest (art. 6.1.f Rgpd) | 12 months (anonimized data) |
4. Transfer data to third parties
Personal data will not be assigned to third parties except in the following cases:
- Transport and logistics companies, exclusively for the delivery of orders.
- Pay platforms (Stripe, PayPal, Banking Entities), for the safe processing of charges.
- Public Administrations and Judicial Bodies, when there is legal obligation.
- Technological Suppliers (Hosting, ERP, Ecommerce platform), under treatment manager contracts according to Art. 28 RGPD.
5. International data transfers
Some technological suppliers may be located outside the European Economic Area. In these cases we guarantee that transfers are made with adequate guarantees: Type of the European Commission type contractual clauses or countries with recognized adequacy decision.
6. Rights of the interested parties
The user can exercise at any time the following rights:
- Access: Know what personal data we deal with about you.
- Correction: Correct inaccurate or incomplete data.
- Suppression ("Right to oblivion"): request the elimination of your data when they are no longer needed.
- Opposition: Oppose treatment based on legitimate interest or for direct marketing purposes.
- Treatment limitation: Request the suspension of treatment in certain circumstances.
- Portability: Receive your data in structured format and commonly used.
- Removal of consent: at any time, without affecting the legality of the previous treatment.
To exercise any of these rights, head in writing info @peskayak.com or call +34 605 080 940, Attaching a copy of your identification document. We respond within a maximum period of 30 calendar.
If you consider that your rights have not been duly taken care of, you can file a claim before the Spanish Agency for Data Protection (www.aepd.es).
7. Data security
On Peskayak Iberia SL We adopt appropriate technical and organizational measures to ensure an adequate security level to risk: SSL / TLS encryption, restricted access to data, periodic backup copies and role access control.
8. Modifications of the Privacy Policy
We reserve the right to modify this Privacy Policy to adapt it to legislative news or changes in our services. Any modification will be published on this page with indication of the update date.