PRIVACY POLICY

Who is the controller of your data?

In accordance with General Data Protection Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we inform you that the personal data you provide when using the website www.iberianmarket.com (hereinafter, "the WEBSITE") are processed, as controller, by:

• EXCLUSIVAS JUAN BARRERO, S.L. (hereinafter, "the COMPANY"), trade name Iberian Market
• CIF (Tax ID): B91588202
• Address: C/ Diego de los Reyes, 28, 41950 Castilleja de la Cuesta (Sevilla), Spain
• E-mail: info@iberianmarket.com
• Telephone: +34 954 164 480

Are you obliged to provide your data?

Visiting the WEBSITE does not require you to provide any personal data. To make a purchase, create an account or send us an enquiry, we will ask you for the data marked as mandatory in each form: without them we would be unable to process your order or request. All other data are optional.

For what purposes do we process your data and on what legal basis?

• Orders and customer account. Managing your purchase, payment, delivery, invoicing, returns and warranty, and your customer account if you create one. Legal basis: performance of the sales contract (Art. 6(1)(b) GDPR) and compliance with legal obligations, such as accounting and tax obligations (Art. 6(1)(c) GDPR).
• Customer service. Answering the enquiries you send us via the contact form, by e-mail, by telephone or via WhatsApp. Calls to the Customer Service department may be recorded for service quality purposes. Legal basis: your own request (Art. 6(1)(b) GDPR) and, for call recording, our legitimate interest in the quality of the service (Art. 6(1)(f) GDPR).
• Commercial communications. Sending you news and offers by e-mail if you have subscribed to our newsletter or, if you are already a customer, about products similar to those you have purchased, as permitted by Article 21.2 of Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI). Legal basis: your consent (Art. 6(1)(a) GDPR) or our legitimate interest as a seller (Art. 6(1)(f) GDPR). You can unsubscribe at any time using the link in each message or by writing to info@iberianmarket.com.
• Product reviews. Publishing the reviews you leave about our products, under the name you indicate. Legal basis: your consent (Art. 6(1)(a) GDPR).
• Cookies and similar technologies. Measuring use of the WEBSITE (Google Analytics and Microsoft Clarity), showing and measuring advertising (Google Ads and Meta) and personalising communications (Connectif). They are only used if you accept them in the cookie banner. Legal basis: your consent (Art. 6(1)(a) GDPR). Full information, including the list of cookies and their duration, is available in the Cookie policy, and you can change your choice at any time in Cookie settings.

Card and Bizum payments are made on the secure Redsys payment gateway and PayPal payments on the PayPal website: the COMPANY neither knows nor stores your card details.

How long do we keep your data?

• Orders and invoicing: for as long as the business relationship lasts and, thereafter, for the periods required by law (six years for accounting records, under Article 30 of the Spanish Commercial Code, and the periods laid down in tax legislation).
• Customer account: until you request its deletion.
• Customer service enquiries: for the time needed to deal with them and, thereafter, for the limitation periods of any possible liabilities.
• Call recordings: a maximum of six months.
• Commercial communications: until you unsubscribe or object.
• Reviews: while they are published or until you ask us to remove them.
• Cookies: the period indicated for each one in the Cookie policy.

What data do we process?

The data you provide in each form (for example, name, delivery and billing address, e-mail address, telephone number and order details), the data from the conversations you have with us and, if you accept them, the browsing data collected by cookies.

To whom do we disclose your data?

We do not sell your data. We only disclose them when necessary to provide you with the service, when you have consented or when required by law:

• Payment institutions: Redsys and the bank (card and Bizum payments) and PayPal (Europe) S.à r.l. et Cie, S.C.A., if you pay with PayPal.
• Carriers that deliver your order, such as GLS.
• Providers that supply services to us and process data on our behalf, under the contract required by Article 28 GDPR: hosting of the WEBSITE and sending of e-mail communications (Connectif Ai, S.L.).
• If you accept the relevant cookies: Google Ireland Limited, Meta Platforms Ireland Limited and Microsoft Ireland Operations Limited, on the terms set out in the Cookie policy.
• If you write to us via WhatsApp, your messages pass through WhatsApp Ireland Limited, in accordance with its own terms.
• Public authorities, the Spanish Tax Agency (Agencia Tributaria), and courts and tribunals, when required by law.

Are there international data transfers?

Google, Meta and Microsoft may process data in the United States. These transfers are covered by the EU-US Data Privacy Framework, to which they have adhered, or by the standard contractual clauses approved by the European Commission.

What is the user's responsibility?

The USER is responsible for ensuring that the data they provide to the COMPANY are true, accurate, complete and up to date, and for keeping them up to date. The USER shall be liable for any false or inaccurate information provided through the WEBSITE and for any direct or indirect damage or loss caused to the COMPANY or to third parties.

What are your rights?

You may exercise the following rights at any time and free of charge:

• Access to your personal data.
• Rectification of inaccurate or incomplete data.
• Erasure of your data where, among other reasons, they are no longer necessary for the purposes for which they were collected.
• Objection to processing, including the sending of commercial communications.
• Restriction of processing in the cases provided for in data protection legislation.
• Portability of your data.
• Withdrawal of any consent given, without affecting the lawfulness of processing carried out before its withdrawal.

To exercise them, write to info@iberianmarket.com or to the COMPANY's postal address, quoting the reference "Data protection". If we have reasonable doubts about your identity, we may ask you for additional information to confirm it. If you consider that we have not properly dealt with your rights, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) (www.aepd.es).

Is it safe to provide us with your data?

The COMPANY processes the USER's data confidentially and in accordance with the duty of secrecy, in compliance with applicable legislation, and adopts the technical and organisational measures necessary to guarantee their security and prevent their alteration, loss, or unauthorised processing or access, taking into account the state of the art, the nature of the data and the risks to which they are exposed.

Can this privacy policy change?

The COMPANY may amend this Privacy policy to adapt it to changes in the law or in its services. It will publish the changes on the WEBSITE reasonably in advance of their application.

Last updated: 18 October 2026.