MAIN PAPER · A CONSIDERED CREATIVE EVERYDAY
Privacy Policy
Controller
The controller of your personal data is Main Paper SL, Ctra de Humera 92 Bl.A 1, Pozuelo de Alarcón, Spain. For any data protection matters, contact us at [email protected].
What we process and why
- Order fulfilment – name, email, phone, delivery address, order contents and payment status – Art. 6(1)(b) GDPR (performance of a contract).
- Accounting and tax obligations – order and payment records – Art. 6(1)(c) GDPR (legal obligation).
- Handling withdrawals and complaints – Art. 6(1)(b) and (c) GDPR.
- Answering enquiries sent through the contact form, email or phone – Art. 6(1)(f) GDPR (our legitimate interest in replying to you).
- Marketing – only with your consent, Art. 6(1)(a) GDPR. We currently do not send marketing.
Providing data is voluntary, but the data marked as required at checkout is needed to conclude and perform the contract.
Recipients
We share data only as needed with: courier and postal companies; hosting and IT service providers; our email service provider; payment service providers; accounting services; and public authorities where required by law.
How long we keep data
- Order data: for the period required by tax law, i.e. 5 years from the end of the calendar year in which the tax obligation arose.
- Complaint and withdrawal data: until the related claims become time-barred.
- Enquiries: as long as needed to handle them.
- Marketing data: until you withdraw your consent.
Transfers outside the EEA
If a service provider processes data outside the European Economic Area, we ensure an appropriate safeguard such as an adequacy decision or standard contractual clauses.
Your rights
You have the right to access your data, to rectification, erasure, restriction of processing and data portability, and the right to object to processing based on our legitimate interest. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal. To exercise your rights, email [email protected].
You also have the right to lodge a complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa.
We do not use automated decision-making or profiling.
Cookies and browser storage
See our Cookie Policy.