Last updated: 1 August 2026
1. Data Controller
The controller responsible for the processing of your personal data is:
Patriotic Trade Co.
Calle de Balmes, 152, P3 Pta 2, 08008 Barcelona, Spain
Tax ID (CIF): B65511842
Registered: 14 March 2011
Trading as: LUNACI Barcelona
Contact: info@lunaci.es
2. What Personal Data We Collect
Depending on how you interact with our website (lunacibarcelona.com), we may collect:
- Identification and contact data: name, email address, phone number, shipping and billing address.
- Order data: products purchased, order history, payment confirmation (we do not store full card numbers — payments are processed by our payment provider).
- Account data: if you create an account, your login credentials and preferences.
- Communication data: messages you send us through contact forms or email.
- Technical data: IP address, browser type, device information, and cookies (see our Cookies section below).
- Marketing preferences: if you subscribe to our newsletter.
3. Purpose and Legal Basis for Processing
- Processing and delivering your orders — Performance of a contract
- Managing your customer account — Performance of a contract
- Responding to inquiries — Legitimate interest / consent
- Sending marketing communications (newsletter) — Consent (opt-in)
- Complying with tax and accounting obligations — Legal obligation
- Preventing fraud and ensuring website security — Legitimate interest
4. Who We Share Your Data With
We share personal data only with third parties strictly necessary to operate our business, including: payment processors, shipping and courier companies, website hosting and IT service providers, and email/marketing service providers (only if you have subscribed). We do not sell your personal data to third parties.
5. International Data Transfers
Where any service provider is located outside the European Economic Area (EEA), we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) in compliance with the GDPR.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes described above, including any legal, accounting, or reporting requirements (generally, order and invoicing data is kept for the period required by Spanish tax law).
7. Your Rights
Under the GDPR, you have the right to: access, rectify, erase (“right to be forgotten”), restrict or object to processing, data portability, and withdraw consent at any time. To exercise these rights, contact info@lunaci.es. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).
8. Cookies
Our website uses cookies to ensure basic functionality (e.g. shopping cart) and, where you consent, to analyse traffic and personalise content. You can manage your cookie preferences through your browser settings at any time.
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “last updated” date.
11. Contact
For any questions about this Privacy Policy, contact info@lunaci.es.
