Privacy and Data Protection Policy

Last updated: February 2025

This document summarizes our data protection practices. For more detailed and complete information — including the full list of rights, legal bases, and security measures — see our GDPR — Instructions for Use notice.

1. Introduction

At Canvartin, which operates the website https://canvartin.com (hereafter referred to as "Website"), we take the protection of your personal data seriously. We are committed to safeguarding the privacy of our users and follow the requirements of the General Data Protection Regulation (GDPR), as outlined in Regulation (EU) 2016/679, as well as the Organic Law 3/2018 on Data Protection and Digital Rights (Ley Orgánica 3/2018).

2. Data Controller

The data controller responsible for the processing of personal data on the Canvartin website is:

Canvartin (Nadezhda Khusainova)
Tax ID (NIF): ESZ0887444V
Registered address: Calle Lince, 10, 29100, Coín, Málaga, Spain
Email: admin@canvartin.com

3. Data We Collect

We collect the following categories of personal data:

Identification and contact data: name, surname, email, phone, delivery and billing address.
Order data: order number, items purchased, price, shipping method, delivery status.
Communications data: messages you send us by email or WhatsApp.
Personalization data: text, images, or design preferences you provide for personalized products.

4. Purpose of Processing

We use your personal data to:

Manage and deliver your orders.
Produce personalized items according to your specifications.
Respond to your enquiries and handle complaints.
Comply with our legal, accounting, and tax obligations.
Prevent fraud and keep the website secure.

5. Legal Basis for Processing

We process your data on the following legal bases, in accordance with Regulation (EU) 2016/679:

Contract performance: to manage your order, delivery, and personalization.
Legal obligations: to comply with tax and other legal requirements in Spain (Ley 58/2003).
Legitimate interest: for fraud prevention and dispute resolution.

6. Recipients of Your Data

Your data is only shared, to the extent necessary, with payment service providers, carriers, professional advisors (accounting, legal), and, where required by law, with public authorities. We do not sell your personal data to third parties.

7. International Data Transfers

If data is transferred outside of the European Economic Area (EEA), for example, when using service providers based in the USA, we ensure that such transfers are protected by adequate safeguards, such as:

Standard Contractual Clauses: (Article 46 GDPR).

8. Data Retention

We retain your personal data only for as long as necessary for the stated purposes: for the duration of the contractual relationship and after-sales support period, and subsequently for the periods required by accounting and tax law, or until any potential claims become time-barred.

9. Your Rights

Under the GDPR (Articles 15-22 of Regulation (EU) 2016/679), you have rights of access, rectification, erasure, restriction, portability, and objection regarding your personal data.

To exercise these rights, contact us at admin@canvartin.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).

10. Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or alteration, in accordance with Article 32 of the GDPR.

11. Changes to This Policy

We reserve the right to periodically update this Privacy Policy. Changes will take effect upon publication on the website https://canvartin.com.

12. Contact Information

Email: admin@canvartin.com
Address: Calle Lince, 10, 29100, Coín, Málaga, Spain