At Carsoundcraft, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website https://carsoundcraft.com, place an order, contact us via email or phone, or interact with us in any other way.

We comply fully with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and the Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD). We are committed to processing your information lawfully, fairly, and transparently.

1. Who is the Data Controller?

Data Controller: Danev Rado Georgiev (Director of Carsoundcraft)
NIE: Z3430395L
Address: R. López Mora, 5, 36211 Vigo, Pontevedra, Spain
Phone: +34 627 898 763
Email: danevrado@gmail.com

For any questions regarding your personal data, please contact us directly at danevrado@gmail.com.

2. What personal data do we collect and for what purposes?

Depending on your interaction with us, we may collect and process:

  • Your full name
  • Email address
  • Phone number
  • Billing and delivery address
  • Order information (products purchased, quantities, amounts)
  • Payment details (processed securely by third-party providers; we do not store full card numbers)
  • IP address and basic browsing data (via essential and analytics cookies – see our Cookie Policy)
  • Any details you provide in messages, support requests, or warranty claims (e.g., photos of products)

Primary purposes:

  1. Processing and fulfilling your orders, shipping, and issuing invoices (contract performance).
  2. Providing customer support, handling returns, warranties, and complaints.
  3. Complying with legal obligations (tax, accounting, consumer rights laws).
  4. Sending promotional updates or newsletters only with your explicit consent (you can opt out at any time).
  5. Improving our website through anonymized analytics (e.g., Google Analytics with IP anonymization).

3. Legal basis for processing

  • Order fulfillment and shipping: necessary for performing the contract (Art. 6.1(b) GDPR).
  • Legal compliance (e.g., retaining invoices): legal obligation (Art. 6.1(c) GDPR).
  • Marketing emails: your consent (Art. 6.1(a) GDPR).
  • Essential cookies / anonymized analytics: legitimate interests or consent (as per our Cookie Policy).

If you do not provide required information for an order, we will be unable to process or ship your purchase.

4. How long do we retain your data?

  • Customer and order records: 6 years from your last purchase (Spanish tax requirements + 3-year warranty + claims period).
  • Marketing subscriptions: until you withdraw consent or unsubscribe.
  • Website analytics / cookies: as detailed in our Cookie Policy (typically up to 2 years).

After these periods, your data is securely deleted or anonymized.

5. Sharing your data with third parties

We share data only when necessary and with appropriate safeguards:

  • Shipping carriers (e.g., SEUR, MRW, Correos, DHL) – name, phone, address for delivery only.
  • Payment processors (e.g., Stripe, PayPal, Redsys) – secure payment handling; no full card data stored by us.
  • Tax/accounting professionals – for legal compliance only.
  • Public authorities – when legally required (e.g., tax office, courts).

We never sell your data or share it for third-party marketing. International transfers outside the EEA occur only with approved safeguards (e.g., standard contractual clauses).

6. Your rights under GDPR

You have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure ("right to be forgotten")
  • Restrict processing
  • Object to processing (especially marketing)
  • Data portability
  • Withdraw consent at any time

To exercise these rights, email danevrado@gmail.com with a copy of your ID (DNI/NIE). We respond within 1 month (extendable to 2 months if needed).

You may also file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

7. Data security

We implement appropriate technical and organizational measures (HTTPS encryption, access controls, regular reviews) to protect your data from unauthorized access, loss, or alteration.

8. Updates to this policy

This policy may be updated due to legal changes or business practices. The current version is always available here with the last update date.

Last updated: February 02, 2026

Director: Danev Rado Georgiev, NIE Z3430395L | Phone: +34 627 898 763 | Email: danevrado@gmail.com | Address: R. López Mora, 5, 36211 Vigo, Pontevedra, Spain