Privacy Policy

This Privacy Policy describes how Protein Bázis collects, uses, and shares your personal data when you visit our website, make a purchase, or interact with our services. We are committed to protecting your privacy in full compliance with the General Data Protection Regulation (GDPR).

1. Data Controller

2. Data We Collect

We may collect and process the following categories of personal data:

• ✔ Full name
• ✔ Email address
• ✔ Phone number
• ✔ Billing and shipping address
• ✔ IP address and browser details
• ✔ Order history and purchase details
• ✔ Payment status (processed securely via Stripe)
• ✔ Customer account credentials (if registered)
• ✔ Social login data (Google / Facebook / Apple)

3. Purpose of Processing

We process your personal data for the following operational and commercial purposes:

• • Process and fulfill orders, including delivery, confirmation, and status updates.
• • Provide responsive customer support and resolve general inquiries.
• • Manage payments, handle invoicing, and comply with tax regulations.
• • Send relevant transactional emails and notification updates.
• • Analyze and improve our website performance, stability, and customer experience.
• • Conduct tailored marketing activities, campaigns, and newsletter distributions (strictly with explicit consent).
• • Prevent fraud, protect intellectual property, and secure transactions against abuse.

4. Legal Basis for Processing

We process personal data based on the following legal frameworks:

• Contract performance: Necessary to process and deliver orders placed through our shop.
• Legal obligations: Necessary to comply with tax, corporate accounting, and financial reporting laws.
• Legitimate interest: Applied to fraud prevention, commercial security, and service analytics.
• Explicit consent: For marketing newsletters, promotional campaigns, and non-essential cookie tracking.

5. Third-Party Providers

We share data with trusted third-party providers solely to facilitate our core business operations:

• ✔ Stripe: Secure, encrypted payment processing.
• ✔ GLS Spain, SEUR, Correos Express: Shipping and tracking services.
• ✔ Google: Website traffic analytics (GA4) and advertising metrics.
• ✔ Meta: Facebook Pixel tracking for social media campaign statistics.
• ✔ Email CRM System: Internal database used strictly for order updates and customer notifications.
• ✔ Social Login Providers: Google, Facebook, and Apple authentication systems.

6. Data Retention Periods

We store personal data only as long as necessary for its intended purpose:

• Order transactions: Retained for 5–10 years as required by commercial tax and auditing law.
• Customer accounts: Maintained continuously until a deletion or deactivation request is submitted.
• Marketing data: Retained continuously until the user formally withdraws their consent.
• Analytics data: Retained for a maximum period of 26 months.

7. Your Rights (GDPR Compliance)

Under European General Data Protection Regulation, you have the following enforceable rights:

• • Access your stored data at any time.
• • Correct inaccurate, outdated, or incomplete data.
• • Request permanent data deletion ("right to be forgotten").
• • Restrict the processing or limiting of specific dataset actions.
• • Exercise data portability to another system/provider.
• • Object to the processing of data based on legitimate interests.

To exercise any of these rights, please contact our Data Protection Officer at: bazisprotein@gmail.com

8. Automated Decision-Making

We may employ automated algorithms for fraud detection and transaction risk scoring to keep our ecommerce ecosystem secure. These automated systems are designed to protect users and merchants and do not produce legal consequences without human review.

Last Updated: May 21, 2026. Fully GDPR and Spanish AEPD compliant.