Shopping Cart
Privacy Policy
Last updated: October 2026
1. Data Controller
In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), we inform you of the identity of the data controller:
Peskayak Iberia SL
Spanish tax ID (CIF): B93366904
Calle Diderot, 3, Nave 6, 29004 Málaga, Spain
Phone: +34 605 080 940
Email: info@peskayak.com
Web: https://3lithium.eu
Spanish tax ID (CIF): B93366904
Calle Diderot, 3, Nave 6, 29004 Málaga, Spain
Phone: +34 605 080 940
Email: info@peskayak.com
Web: https://3lithium.eu
2. Personal Data We Process
Customers and registered users: first and last name, delivery and billing address, email, telephone and order history. Payment data is processed by PCI-DSS certified platforms; we do not store card details.
Browsing data: IP address, browser type, pages visited, time spent on the site and cookies (see our Cookie Policy).
Contact data: name, email and any information you voluntarily give us through the contact form or by phone.
3. Purposes and Legal Basis
| Purpose | Legal basis | Retention period |
|---|---|---|
| Order management and contractual relationship | Performance of a contract (art. 6.1.b GDPR) | 5 years from the last transaction |
| Sending marketing communications (newsletter) | Consent (art. 6.1.a GDPR) | Until consent is withdrawn |
| Customer service and handling complaints | Legitimate interest / contract (art. 6.1.b and f GDPR) | 3 years from resolution |
| Compliance with legal obligations (tax and accounting) | Legal obligation (art. 6.1.c GDPR) | 6 years (commercial and tax law) |
| Statistical analysis and website improvement | Consent (art. 6.1.a GDPR) | As set out in the Cookie Policy |
4. Disclosure to Third Parties
Personal data is not shared with third parties except in the following cases:
- Transport and logistics companies, solely to deliver orders.
- Payment platforms (Redsys, PayPal and banks), to process payments securely.
- Public authorities and courts, where required by law.
- Technology providers (web hosting, ERP, e-commerce platform), under data processing agreements in accordance with art. 28 GDPR.
5. International Data Transfers
Some technology providers may be located outside the European Economic Area. In such cases, transfers are made with appropriate safeguards: European Commission standard contractual clauses or transfers to countries with an adequacy decision.
6. Your Rights
You may exercise the following rights at any time:
- Access: find out what personal data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure ("right to be forgotten"): ask us to delete your data when it is no longer needed.
- Objection: object to processing based on legitimate interest or for direct marketing.
- Restriction of processing: ask us to suspend processing in certain circumstances.
- Portability: receive your data in a structured, commonly used format.
- Withdrawal of consent: at any time, without affecting the lawfulness of earlier processing.
To exercise any of these rights, write to info@peskayak.com or call +34 605 080 940, enclosing a copy of your ID document. We reply within one month.
If you believe your rights have not been properly respected, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority in your country of residence.
7. Data Security
Peskayak Iberia SL applies technical and organisational measures appropriate to the risk: SSL/TLS encryption, restricted access to data, regular backups and role-based access control.
8. Changes to this Policy
We may update this Privacy Policy to reflect legal changes or changes to our services. Any change will be published on this page with the date of the update.