Privacy policy
Last updated: 6 October 2026
Who is responsible for your data
The owner of Paseo y Pista, whose details are in the legal notice. Contact for privacy questions: contact@paseoypista.com.
What we process and why
- When you buy: the email, name, shipping address and phone number entered in Stripe Checkout, to handle your order, deliver the pack, send dispatch updates and deal with questions or returns.
- When you contact us: your email and message, to respond. Enquiries do not subscribe you to updates.
- If you separately ask for updates: we process your adult email, form language and request, consent, confirmation and unsubscribe records to manage your subscription and send Paseo y Pista news. Brevo (Sendinblue SAS) provides the form and mailing-list service. Subscription is confirmed by email; you can unsubscribe from any message or by contacting us. We do not ask for names or children's details. Order emails and enquiries are not added to this list. Brevo records technical delivery, confirmation and unsubscribe events; we do not use individual opens or clicks to profile subscribers. After you unsubscribe, we stop sending messages and keep only the minimum data needed to respect your choice.
- When you visit: the server may log your IP address, requested page, time and browser information to operate the service and detect errors or abuse. We do not use these logs for advertising profiles.
We do not request children's data or use it for profile-based advertising. We do not sell your data. We send updates only if you give separate, explicit consent.
Legal basis
Performance of the sale contract and handling pre-contract enquiries (GDPR Article 6(1)(b)), compliance with tax and accounting obligations (Article 6(1)(c)), and our legitimate interest in responding to other enquiries and keeping the website secure (Article 6(1)(f)). Email updates are based on your consent (Article 6(1)(a)), which you can withdraw at any time.
How long we keep data
For the duration of your order and then for the legally required invoice and accounting retention periods, generally up to six years. Enquiries are retained while needed to address them or resolve claims. If you subscribe, we keep list data while the subscription is active; after you unsubscribe, we stop sending messages and keep only the minimum data needed to respect your choice. Server logs rotate daily, with fourteen rotated files retained; necessary records may be preserved for a security incident.
Who receives it
- Stripe Payments Europe, Ltd., which processes payment. Stripe handles card details; we do not see them. See its privacy policy.
- The delivery company, which receives only your name, address and phone number.
- Zoho Corporation B.V. (Zoho Mail), our contact-email provider.
- The hosting provider, to serve and secure the website.
Stripe and email providers, where applicable, may process data outside the European Economic Area. Appropriate safeguards must apply, such as adequacy decisions or standard contractual clauses. See those providers' privacy information.
Cookies
This site uses no analytics or advertising cookies and no tracking tools. Fonts are served from our own server. Selecting “Buy the pack” takes you to Stripe's payment page, which has its own cookie policy. The updates form opens on Brevo's page, with its own privacy policy; it is not embedded on this site.
Your rights
You may request access, correction, erasure, restriction, objection or portability by emailing contact@paseoypista.com. You may lodge a complaint with the Spanish Data Protection Agency (AEPD).