Privacy policy
Data Controller and Contact Information
In accordance with Regulation (EU) 2016/679 of 27 April 2016 (General Data Protection Regulation – GDPR) and the Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), users are informed that the entity responsible for the processing of their personal data is:
Modo Artesano, S.L.
(trading as Foránea)
-
Tax ID (NIF): B19884139
-
Registered Office: Calle de Aviador Zorita 13, Oficina 314, 28020 Madrid, Spain
-
Fiscal Address: Calle de Castelló 36, piso 1ºA, 28001 Madrid, Spain
-
Email: info@foranea.com
Foránea acts as Data Controller of the personal data collected through its online store and related services.
Purpose and Legal Basis of Processing
The personal data collected shall be processed for the purposes and on the lawful bases indicated below:
| Purpose of Processing | Lawful Basis (Article 6 GDPR) |
|---|---|
| Management and execution of the commercial relationship: processing orders, payments, deliveries, returns, exchanges, and related communications. | Performance of a contract (6.1 b) |
| Customer service and resolution of inquiries, incidents, or product-related issues. | Legitimate interest (6.1 f) / Contract (6.1 b) |
| Compliance with accounting, tax, and consumer protection obligations. | Legal obligation (6.1 c) |
| Sending commercial or promotional communications regarding Foránea’s products and services by electronic or physical means. | Consent (6.1 a) |
| Internal analytics, service improvement, and fraud-prevention measures. | Legitimate interest (6.1 f) |
Whenever processing is based on legitimate interest, Foránea has carried out a balancing test confirming that such interests do not override the fundamental rights and freedoms of the data subject.
Categories and Source of Data
Foránea may process the following categories of data:
-
Identification and contact data: name, surname, address, email, phone (if provided).
-
Financial and transactional data: payment method, billing details, purchase history.
-
Commercial data: preferences, wish-lists, communications exchanged with Foránea.
-
Technical and navigation data: IP address, browser, device identifiers, and data obtained through cookies or similar technologies.
-
Cookies and Tracking Technologies: see Section 10 below.
All data are obtained directly from the user through the website forms, order process, or communications with Foránea.
Nature of the Information Provided
Fields marked as mandatory in our online forms must be completed to process your request, order, or query. Failure to provide mandatory data may make it impossible for Foránea to fulfil the corresponding service.
Data Retention Period
Personal data shall be retained for no longer than necessary:
-
Transactional data: for the duration of the contractual relationship and six (6) years thereafter, in compliance with tax and accounting regulations.
-
Customer support communications: for a maximum of two (2) years after resolution of the inquiry.
-
Marketing data: until consent is withdrawn or an objection is received.
-
Technical/log data: for the period necessary to ensure network security and service performance.
After these periods, the data will be securely deleted or anonymised.
Recipients and Data Transfers
Your personal data may be communicated to:
-
Shopify International Ltd., which provides the hosting and e-commerce platform for our website, acting as Data Processor under GDPR.
-
Financial entities and payment gateways (e.g., Stripe, PayPal, or Klarna if used) to process payments and refunds.
-
Shipping and logistics partners for the delivery of goods.
-
External professional advisers (legal, accounting, or IT) bound by confidentiality agreements.
-
Public administrations, courts, and competent authorities when legally required.
International transfers outside the European Economic Area (EEA) will only occur where appropriate adequate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or equivalent mechanisms.
Data Protection Officer
Given the nature and scope of our data processing activities, Foránea is not legally required to appoint a Data Protection Officer under Article 37 GDPR.
Nevertheless, any privacy-related inquiry may be addressed to: info@foranea.com, where it will be handled by our designated internal data-protection contact.
Rights of Data Subjects
You may exercise the rights granted by Articles 15 to 22 GDPR:
-
Right of Access – obtain confirmation whether we process your data and access such data.
-
Right to Rectification – correct inaccurate or incomplete data.
-
Right to Erasure – request deletion where data are no longer necessary or consent is withdrawn.
-
Right to Restriction – request limitation of processing in certain circumstances.
-
Right to Data Portability – receive your data in a structured, machine-readable format.
-
Right to Object – oppose processing based on legitimate interest or direct marketing.
-
Right to Withdraw Consent – withdraw consent at any time without affecting prior processing.
Requests shall be addressed to info@foranea.com, attaching valid identification.
If you consider your rights have not been properly addressed, you may file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
Security Measures and Breach Notification
Foránea implements appropriate technical and organisational measures to ensure data confidentiality, integrity, and availability, preventing unauthorised access, alteration, or loss.
In accordance with Articles 32 to 34 GDPR, Foránea shall notify any personal-data breach to the Spanish Data Protection Agency and, where relevant, to affected individuals without undue delay when such breach is likely to result in a risk to their rights and freedoms.
Cookies and Similar Technologies
Our website uses cookies and similar technologies to enhance browsing, provide functionalities, and perform statistical analysis.
-
Strictly necessary cookies are essential for website operation and do not require consent.
-
Analytical, performance, or advertising cookies will only be used with your prior consent through our cookie banner.
You may manage or revoke your consent at any time via your browser settings or through our Cookie Policy, which details the types of cookies used, their duration, and purposes.
Limitation of Liability
Foránea shall not be held liable for:
-
Improper or unlawful use of this website by users.
-
Technical failures caused by force majeure or third-party services (internet providers, servers, etc.).
-
Damage resulting from viruses, malware, or harmful software introduced by third parties.
Users are responsible for adopting adequate technical measures to protect their own devices and data.
Modifications to This Policy
Foránea reserves the right to modify or update this Privacy Policy to reflect legislative changes, updates to processing activities, or new technologies.
Substantial modifications will be announced via the website or by direct communication, indicating the new effective date.
Contact Information
For any questions, requests, or complaints related to this Policy or to the processing of personal data, please contact:
Modo Artesano, S.L. (Foránea)
Calle de Castelló, 36 piso 1ºA
28001 Madrid, Spain
Email: info@foranea.com
As seen in...
.