Privacy policy

Privacy Policy

Last update: September 2026

At Gemonier we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, who we may share it with, and what your rights are when you use our website or make a purchase.

1. Data controller

The person responsible for the processing of personal data collected through this online store is Gemonier.

For any queries related to privacy or data protection, you can contact us through the contact page available on our website.

2. Personal data we collect

Depending on how you use our website, we may collect:

  • name and surname;
  • billing and delivery address;
  • email address;
  • telephone number provided during purchase;
  • information related to orders, returns and customer service;
  • technical information about the device, browser and IP address;
  • data about the navigation and use of our website;
  • marketing preferences and cookie consent;
  • information necessary to detect and prevent fraudulent operations.

Payment data is mainly processed by the payment service providers used in our store. Gemonier does not directly store complete bank card data.

3. What we use your data for

We may use your personal data to:

  • manage and process your orders;
  • organize the shipment and delivery of the products;
  • manage payments, returns and refunds;
  • respond to customer service inquiries and requests;
  • comply with our legal, tax and accounting obligations;
  • prevent fraud, abuse and security issues;
  • improve the operation and experience of our store;
  • perform statistical analysis on the use of the site;
  • send you commercial communications when you have given your consent;
  • display personalized advertising when you have authorized the corresponding cookies or technologies.

4. Legal basis of processing

We process your personal data on different legal bases depending on the purpose.

When you make a purchase, the processing necessary to manage the order, payment, delivery and after-sales service is carried out to execute the contract entered into with you.

We may also process certain data to comply with legal obligations applicable to our activity.

When processing depends on your consent, such as certain commercial communications or advertising cookies, you can withdraw said consent at any time.

In certain cases we may process information based on our legitimate interest, for example, to prevent fraud, improve our services and maintain the security of the store, always respecting your rights and freedoms.

5. Providers and recipients of data

In order to provide our services, we may share only necessary data with providers who perform functions on our behalf, including:

  • e-commerce platform;
  • hosting and technology services providers;
  • transport and logistics companies;
  • payment providers;
  • customer services;
  • analysis tools;
  • fraud prevention services;
  • advertising and marketing platforms, where applicable.

These providers only receive the information necessary to provide their respective services and must process the data in accordance with applicable legislation.

We do not sell your personal data.

6. Shopify

Our store uses Shopify to provide its e-commerce services.

Shopify may process certain personal data necessary to provide its platform, process orders, maintain the security of its services and enable the operation of our store.

Processing carried out directly by Shopify is also subject to its own privacy policies and conditions.

7. Cookies and similar technologies

Our site may use cookies and similar technologies necessary for its operation.

We may also use, with prior consent when required, analysis, personalization and advertising cookies.

You can accept, reject or configure non-essential cookies using the options available on our site.

The withdrawal of consent does not affect the legality of the processing carried out before said withdrawal.

8. Advertising and analysis

Where you have given your consent, we may use third-party tools to analyze site performance and measure our advertising campaigns.

These tools may use information about navigation and interactions on our site to measure results, create audiences, or personalize ads.

The use of these technologies will be subject to the consent preferences selected by the user.

9. International data transfers

Some of our technology providers may process information from countries outside the European Economic Area.

When there is an international transfer of data, the mechanisms and guarantees provided for by the applicable regulations will be used, such as adequacy decisions, standard contractual clauses or other legally recognized mechanisms.

10. Data retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected.

Certain information related to purchases, billing and transactions may be retained for the periods required by applicable legal, tax or accounting obligations.

When the processing is based exclusively on your consent, we may stop using the data for that purpose when you withdraw that consent.

11. Security

We take reasonable technical and organizational measures to protect personal data from unauthorized access, loss, alteration, disclosure or destruction.

However, no information transmission or storage system over the Internet can guarantee absolute security.

12. Your rights

In accordance with applicable data protection regulations, you can exercise, where applicable, the following rights:

  • Access: know what personal data we process about you.
  • Rectification: request the correction of incorrect or incomplete data.
  • Deletion: request the deletion of your data when appropriate.
  • Restriction: request restriction of processing.
  • Objection: object to certain processing of your personal data.
  • Portability: receive your data in a structured format and transmit it to another controller when applicable.
  • Withdrawal of consent: withdraw a previously granted consent at any time.

To exercise any of these rights, please contact us through the Gemonier contact page and clearly indicate your request.

We may request additional information when necessary to verify your identity and prevent unauthorized access to personal data.

You also have the right to file a claim with the Spanish Data Protection Agency (AEPD) if you consider that the processing of your personal data fails to comply with applicable regulations.

13. Commercial communications

We will only send commercial communications when there is a legal basis that allows it.

You can stop receiving these communications at any time by using the opt-out option included in the messages or by contacting us.

Cancellation of commercial communications does not affect messages necessary to manage orders, payments, deliveries, returns or other communications related to a purchase.

14. Minors

Our products and services are not specifically directed at minors.

We do not knowingly collect personal data from minors when we know they do not have the necessary legal authorization.

15. Third party links

Our site may contain links to web pages or services managed by third parties.

Gemonier does not control the privacy practices of such external sites. We recommend consulting their respective privacy policies before providing personal data.

16. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our services, suppliers, internal practices or legal requirements.

The current version will always be available on our website and will indicate the date of its last update.

17. Contact

For queries related to this Privacy Policy, the processing of your personal data or the exercise of your rights, use the Gemonier contact page.

The AEPD confirms rights such as access, rectification, erasure, restriction and objection, in addition to the right to complain to the supervisory authority; Transfers outside the EEA also need to comply with the guarantees provided for by the GDPR.