Privacy policy
This policy explains how we process your personal data under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on personal data protection and digital rights.
Data controller
Tienda Demo InAI, S.L., Tax ID B00000000, with registered office at Calle Gran Vía 1, 28013 Madrid (Spain). Data protection contact: hola@demo.inaishop.dev.
What data we process and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Managing your order, payment and delivery | Identification, address, contact and transaction data | Performance of a contract (Art. 6.1.b GDPR) | For as long as the relationship lasts and, afterwards, the tax and commercial retention periods (up to 6 years) |
| Issuing and keeping invoices | Identification, tax ID, amount | Legal obligation (Art. 6.1.c GDPR) | The periods required by tax law |
| Handling enquiries and after-sales | Contact details and the content of your message | Legitimate interest (Art. 6.1.f GDPR) | 2 years from the last contact |
| Newsletter and commercial communications | Name and email | Consent (Art. 6.1.a GDPR) | Until you unsubscribe |
| Analytics and store improvement | Aggregated, pseudonymised usage data | Consent for non-essential cookies | 14 months at most |
Who we share your data with
Only with providers that need to process it to serve us, under a signed data processing agreement: the payment gateway, the shipping carrier, the transactional email provider and the cloud hosting provider. We do not sell or hand over data for third-party advertising.
International transfers
Some providers may process data outside the European Economic Area. In that case the transfer relies on an adequacy decision or on the standard contractual clauses approved by the European Commission, with whatever supplementary measures apply.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to hola@demo.inaishop.dev and identifying yourself. From your account you can download a copy of your data and request deletion.
If you believe we have not handled your request properly, you can complain to the Spanish data protection authority (aepd.es).
Security
We apply technical and organisational measures proportional to the risk: encryption in transit and at rest, role-based access control, audit logging of sensitive operations and backups.
Minors
The store is not aimed at children under 14 and we do not knowingly collect their data.
Last updated: 30 August 2026.