Data Protection, GDPR & LOPDGDD

Privacy Policy

Last updated: October 2026 • Compliant with EU GDPR (Regulation 2016/679) and Spanish LOPDGDD (Ley Orgánica 3/2018)

1. Data Controller

The entity responsible for processing your personal data on lanodriza.shop is:

2. Personal Data We Collect & Legal Basis

We collect and process personal data strictly to fulfill botanical orders, provide live parcel tracking across Spain, process payments, and respond to customer support requests:

• Order & Delivery Information (Art. 6(1)(b) GDPR – Contract Performance): Full name, billing and shipping street address in Spain, email address, and telephone number (used for courier delivery notifications and tracking updates).
• Payment Transactions (Art. 6(1)(b) & (c) GDPR): Processed securely via PCI-DSS Level 1 certified payment processors (Stripe / Klarna). Lanodriza never stores raw credit card numbers on its servers.
• Logistics & Carrier Sharing: We share your shipping name, delivery address, email, and phone number strictly with our Spanish courier partners (Correos Express, SEUR, DHL Parcel Spain) to execute parcel delivery.

3. Data Retention

Order and invoicing records are retained only for the duration necessary to fulfill your purchase, honor our 12-month warranty, and comply with mandatory Spanish tax and accounting retention laws.

4. Your Rights Under GDPR & LOPDGDD

Under the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), you have the right to request access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), objection (Art. 21), and data portability (Art. 20). To exercise any of these rights, contact us at contact@lanodriza.shop.

5. Supervisory Authority

You have the right to lodge a complaint with the competent data protection supervisory authority in Spain: Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan, 6, 28001 Madrid, Spain (www.aepd.es).