Privacy Policy

We appreciate your interest in our website. The protection of your privacy is very important to us. Below we inform you in detail about the processing of your personal data in accordance with the EU General Data Protection Regulation (GDPR).

1. Controller / contact

The controller within the meaning of the GDPR is:

Hello Spain Box, S.L.
Héroes de Chernóbil, 3
14007 Córdoba, Spain

If you have any questions or requests regarding data protection, you can contact us by e-mail at hello@hellospain.de.

2. Access data and server log files

You can visit our website without providing any personal data. We only store access data in so-called server log files, such as the name of the requested file, the date and time of the request, the amount of data transferred, the requesting provider and the IP address. This data is processed on the basis of Art. 6(1)(f) GDPR to ensure the trouble-free operation and security of the website (legitimate interest). Log files are deleted after a short period unless they are required for security purposes.

3. Data processing for orders, customer accounts and enquiries

We collect personal data when you provide it to us as part of your order, when contacting us (for example via the contact form or by e-mail) or when opening a customer account. The data collected can be seen from the respective input forms. We process this data for the performance of the contract or to respond to your enquiries on the basis of Art. 6(1)(b) GDPR. After complete performance of the contract or deletion of your customer account, your data will be restricted from further processing and deleted after expiry of the statutory retention periods under tax and commercial law (Art. 6(1)(c) GDPR), unless you have expressly consented to further use or we reserve a further use permitted by law, about which we inform you below. You can delete your customer account at any time, either by sending a message to the contact option described above or via the designated function in your customer account.

4. Data transfer for the performance of the contract

For the performance of the contract (Art. 6(1)(b) GDPR), we pass on your data to the shipping company responsible for the delivery (e.g. UPS), insofar as this is necessary for the delivery of the ordered goods. For payment processing, we pass on the necessary payment data to the payment service provider selected by you in the ordering process (e.g. Stripe, PayPal). The payment service providers are themselves controllers for the payment transaction; their own privacy policies apply.

5. E-mail newsletter

If you subscribe to our newsletter, we use the data required or separately provided by you to send you our regular e-mail newsletter, based on your consent (Art. 6(1)(a) GDPR). You can withdraw your consent and unsubscribe at any time free of charge, either via the link provided in every newsletter or by sending a message to the contact option described above. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

6. Product recommendations by e-mail

As an existing customer, you may receive product recommendations for similar goods by e-mail from us, based on Art. 6(1)(f) GDPR in conjunction with the applicable e-privacy rules on electronic mail marketing to existing customers. You can object to this use of your e-mail address at any time with effect for the future, free of charge apart from the transmission costs at basic rates, via the link at the end of each e-mail or by contacting us.

7. Cookies and consent

To make your visit to our website attractive and to enable the use of certain functions, we use cookies and similar technologies. Some cookies are technically necessary for the operation of the website (Art. 6(1)(f) GDPR). All non-essential cookies — in particular for analytics and marketing — are only set with your prior consent (Art. 6(1)(a) GDPR), which you can give and withdraw at any time via our cookie consent banner. You can also configure your browser to inform you about the setting of cookies, to decide individually on their acceptance or to reject cookies in general. Rejecting cookies may limit the functionality of our website.

8. Google Analytics

Subject to your consent (Art. 6(1)(a) GDPR), this website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies and similar technologies to analyse your use of the website. IP addresses are processed in truncated/anonymised form. The information generated is generally transmitted to and stored on Google servers, which may include servers in the USA. Data transfers to the USA are based on the EU-US Data Privacy Framework and/or EU Standard Contractual Clauses. You can withdraw your consent at any time via the cookie settings on our website. Further information: https://policies.google.com/privacy.

9. Google Ads Remarketing

Subject to your consent (Art. 6(1)(a) GDPR), we use the remarketing technology of Google Ireland Limited. This technology allows users who have already visited our website to be shown targeted, interest-based advertising on the pages of the Google partner network. Cookies are used for this purpose. If you do not wish to receive interest-based advertising, you can withdraw your consent via our cookie banner or disable personalised advertising in your Google settings at https://adssettings.google.com. Please note that Google has its own privacy policies, for which we accept no responsibility.

10. Social media elements (X, Facebook/Meta, Instagram)

Our website may contain links or integrated elements of social networks, in particular X (X Corp., USA) and Facebook/Instagram (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland). Where such elements are integrated, data may be transmitted to the respective provider when you visit our pages; if you are logged into your account with the provider, your visit may be linked to your account. Any such data transmission by integrated elements only takes place with your consent (Art. 6(1)(a) GDPR) via our cookie banner. We have no knowledge of the content of the data transmitted or its use by the providers. Further information can be found in the providers' privacy policies: https://x.com/privacy and https://www.facebook.com/policy.php.

11. Storage period

We store personal data only for as long as is necessary for the respective purpose or as required by statutory retention obligations (in particular under tax and commercial law). Thereafter, the data will be deleted.

12. Your rights

Under the GDPR you have the following rights, free of charge: the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on legitimate interests (Art. 21). Where processing is based on your consent, you may withdraw it at any time with effect for the future. To exercise your rights, simply contact us using the contact details above.

13. Right to object (Art. 21 GDPR)

Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time on grounds relating to your particular situation. In the case of processing for direct marketing purposes, you may object at any time without stating reasons.

14. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular with the Spanish supervisory authority (Agencia Española de Protección de Datos, www.aepd.es) or with the supervisory authority of your habitual residence.