This policy explains what personal data we process, why, and what rights you have, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Act 3/2018 (LOPDGDD).
Data controller
- Controller: Fernando Puente Pinto
- Tax ID (NIF): 13979794A
- Address: Roman Alonso 3, 3, 28039 Madrid, Spain
- Email: hello@miramono.com
What we process, why, and on what legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Handling your order: payment, shipping, invoicing and after-sales support | Name, address, email, phone, payment and delivery details | Performance of the contract (Art. 6(1)(b) GDPR) and legal tax and accounting obligations (Art. 6(1)(c)) |
| Managing your customer account, if you create one | Email, hashed password, order history | Performance of the contract (Art. 6(1)(b)) |
| Answering your enquiries | Whatever you include in your message | Consent or our legitimate interest in replying to you (Art. 6(1)(a) and 6(1)(f)) |
| Measuring how the site is used | Browsing data and analytics cookies | Your consent (Art. 6(1)(a)). See our Cookie Policy |
| Preventing payment fraud | Transaction data, IP address | Legitimate interest and legal obligation (Art. 6(1)(f) and 6(1)(c)) |
We do not make automated decisions with legal effects on you, beyond the anti-fraud checks applied by the payment providers.
Who has access to your data
We only share data with the providers needed to deliver the service, who process it on our behalf as processors:
- Web hosting: IONOS (1&1 IONOS España, S.L.U.).
- Card payments: WooPayments, operated by Automattic Inc. and Stripe.
- PayPal payments: PayPal (Europe) S.à r.l. et Cie, S.C.A.
- Delivery: the courier or postal operator handling your shipment, which receives only the data needed to deliver it (name, address, phone and email).
- Analytics: Google Analytics, provided by Google Ireland Limited. Only if you accept analytics cookies.
Some of these providers are located outside the European Economic Area or belong to groups headquartered in the United States. In those cases the transfer relies on the EU–US Data Privacy Framework adequacy decision or on standard contractual clauses approved by the European Commission.
We will also disclose your data to tax or other authorities where required by law.
How long we keep it
- Order and invoicing data: for the duration of our relationship and afterwards for the period required by tax and accounting law (up to 6 years).
- Customer account: until you ask us to delete it.
- Email enquiries: as long as needed to deal with them, and up to one year afterwards.
- Analytics data: for the periods stated in our Cookie Policy.
Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time, and withdraw any consent you have given. Write to hello@miramono.com stating which right you wish to exercise. We may ask you to confirm your identity.
If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency, Agencia Española de Protección de Datos (aepd.es), C/ Jorge Juan 6, 28001 Madrid, Spain.
Security and minors
We apply reasonable technical and organisational measures to protect your data, including an encrypted connection to this site. We do not knowingly collect data from children under 14. You must be of legal age to purchase.
Changes to this policy
If we change this policy we will publish the updated version on this page.
Last updated: August 2026.