Privacy policy
Last updated: 2026-09-28
This is an English translation provided for convenience. In case of discrepancy, the Spanish version prevails.
1. Data controller
- Controller: Manuel Romero García (Málaga Makers)
- Tax ID (NIF): 76882394H
- Address: Calle Alcalareño, 7, 29003 Málaga (España)
- Privacy email: manuelmalagamakers@gmail.com
2. What data we process and why
| Purpose | Data | Legal basis |
|---|---|---|
| Replying to your enquiries and quote requests via WhatsApp, email or Instagram | Name, phone number or username, company, event or order details and anything you tell us | Your consent and steps taken at your request before entering into a contract (Art. 6(1)(a) and 6(1)(b) GDPR) |
| Managing orders, sales, shipping and invoicing | Identification, contact, shipping and payment details | Performance of a contract and compliance with legal, tax and accounting obligations (Art. 6(1)(b) and 6(1)(c) GDPR) |
| Analysing website use and measuring our ad campaigns | Browsing data via cookies | Your consent, which you can withdraw at any time (Art. 6(1)(a) GDPR) |
The quote form on this website does not store data on any server: it simply prepares a message that opens in WhatsApp, which you choose whether to send.
3. How long we keep it
Enquiries that don't lead to an order are kept for up to 12 months. Client data is kept for the duration of the business relationship and then for the periods required by tax and commercial law (generally 4 to 6 years). Cookie data, as set out in the cookie policy.
4. Who we share it with
We never sell your data. We only share it when needed to provide our services or when required by law:
- Service providers acting as data processors: web hosting, courier and shipping companies, accountants and payment providers.
- Messaging platforms: if you contact us via WhatsApp or Instagram, Meta Platforms Ireland Ltd. processes your data under its own privacy policy.
- Analytics and advertising tools (Google, Meta), only if you have accepted the relevant cookies.
- Public authorities where required by law.
Some of these providers may process data outside the European Economic Area (for example, in the USA). Such transfers rely on the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission.
5. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw your consent at any time, by writing to manuelmalagamakers@gmail.com and stating which right you wish to exercise.
If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency: www.aepd.es.
6. Security and minors
We apply appropriate technical and organisational measures to protect your data. Our services are not aimed at children under 14.