1. Data Controller
The personal data you provide is processed by:
Andersen Audio Productions SL
Compositor Wagner, 9.
08191, Rubí.
Barcelona, Spain
NIF (Spanish Tax Identification Number) / VAT NUMBER: ES-B65865495
Contact: info@bnudeart.com
2. Data We Collect and Purpose
We collect data necessary for our e-commerce:
-
Account & Purchase Data: Name, email, password (encrypted), contact phone number, ID or legally valid identification number (ID, passport, driver's license...), date of birth (for age verification), gender (optional), and billing/shipping addresses.
Purpose: To process your orders, manage your account, and fulfill our contractual obligations. -
Wishlist Data: The products you save in your wishlist.
Purpose: To provide this functionality and improve your shopping experience, based on your consent. -
Technical & Usage Data: IP address, browser type, device information.
Purpose: For site security (via reCAPTCHA), functionality, and analytics.
3. Legal Basis for Processing (GDPR)
-
Performance of a Contract: To process and deliver your orders.
-
Legal Obligation: To retain invoice data as required by Spanish commercial law.
-
Consent: For your wishlist and any optional marketing communications in the future. You can withdraw consent at any time.
4. Data Sharing with Third Parties
We share data only when strictly necessary:
-
Payment Processors: Redsys TPV by Banc Sabadell, Stripe, Transferwise. They act as independent controllers for payment data. We do not store any of your credit card details.
-
Shipping & Logistics: Our third-party shipping partner, "metrópoli cuatro" (Metropoli Cuatro Sl), and their carriers (mainly DHL, UPS, FedEx) to deliver your artwork.
-
Technical Service Providers: Our hosting provider, "Piensa Solutions" (Tesys Internet S.L.U.), acts as a data processor.
-
Legal Requirements: If required by law.
5. Data Retention Periods
We keep your data only as long as necessary:
-
Account Data: While your account is active. Inactive accounts may be anonymized after 3 years.
-
Order Data (Invoices): For 6 years from the end of the financial year to comply with Spanish commercial law (Art. 30 Código de Comercio).
-
Wishlist Data: Until you delete the items or delete your account, both of which you can do at any time.
6. International Data Transfers
Your data is processed primarily within the EU/EEA. Transfers to shipping partners outside the EU (e.g., DHL/USPS internationally) will be governed by GDPR-approved mechanisms like Standard Contractual Clauses.
7. Your Rights (GDPR)
You have the right to:
-
Access, rectify, or erase your data.
-
Restrict processing or object to it.
-
Data portability.
-
Not be subject to automated decision-making.
-
Withdraw consent.
To exercise these rights, contact us at info@bnudeart.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).
8. Age Restriction
Our services are not directed at individuals under 18 years of age. We do not knowingly collect data from minors. By creating an account, you confirm you meet this age requirement.