Privacy policy

In compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), we inform you of the following:

Data controller

Creatriche S.L., tax ID (NIF) B86784923
C/ Campo de la Estrella 1A - 5B, 28050 Madrid (Spain)
E-mail: info@duendeo.com

Purposes of processing

• Managing orders and services purchased through the website, including the personalisation of the products requested.
• Managing your registration and user account.
• Answering enquiries and requests for information.
• Sending communications related to the service purchased.
• Sending commercial communications, only with your express consent.
• Issuing and keeping invoices and complying with the tax, accounting and commercial obligations that apply to us.

Legal basis

• Performance of a contract (management of orders and of your user account).
• The data subject's consent (contact forms and commercial communications).
• Compliance with legal obligations (invoicing and tax, accounting and consumer regulations).

Data retention

Data will be kept for as long as necessary to fulfil the purpose for which it was collected and, thereafter, for the periods required by tax and commercial regulations (as a general rule, up to six years for accounting and invoicing documentation) and to deal with potential liabilities.

Recipients

Your data may be communicated to the third parties necessary to provide the service, always under contract and with adequate safeguards: printing companies, transport companies, payment providers that process the payment, and technology providers (hosting, e-mail, analytics).

Likewise, the identification data shown on invoices is communicated to the Spanish Tax Agency (AEAT) in compliance with the VERI*FACTU invoicing regulations (Spanish Law 11/2021 and Royal Decree 1007/2023), through our invoicing service provider Invocash Solutions S.L., which acts as data processor. When an invoice is issued with a tax ID, it may be verified against the AEAT census.

International transfers

Some technology providers (Google: analytics, advertising and authentication; Meta: advertising pixel) may process data in the United States. These transfers are covered by the EU-U.S. Data Privacy Framework adequacy decision and, where applicable, by standard contractual clauses.

Your rights

You may at any time exercise your rights of access, rectification, erasure, restriction of processing, objection and portability, and withdraw any consent given, by sending an e-mail to info@duendeo.com or a letter to the postal address indicated above. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Accuracy of the data

The user guarantees that the data provided is truthful and undertakes to keep it up to date.

Use of images and third-party data

The user declares that they have the necessary consent of the people whose data and images they provide to personalise the products, especially in the case of minors, and releases Creatriche S.L. from any liability arising from the improper use of such content.

We provide a downloadable certificate describing the use we make of the data, intended to inform recipients of group gifts, and we can provide an authorisation form template for the use of data in orders for schools, associations, etc.