Privacy

Controller

Traceo Studio, NIF 49013004G, Dalí, 24, 28342 Valdemoro, Madrid, Spain. For privacy questions or to exercise your rights, email admin@traceo.art.

Data processed in this version

When you browse, the hosting service may process your IP address, browser information and request data to deliver pages, prevent abuse and maintain security. We do not install advertising or behavioural analytics tools.

If you email us, we process your address, message and any information you choose to provide in order to respond. Please avoid sending sensitive information or unnecessary documents.

When you select an enabled payment method, we store your email, country of residence, collection, currency, amount, order identifier and immediate-delivery consent. Stripe or PayPal processes payment on its own page; we do not receive or store full card details. Resend sends confirmation and access by email.

Purposes and legal bases

Purchase-related enquiries are handled on the basis of pre-contractual steps or contract performance. Other enquiries and technical security rely on our legitimate interest in responding to communications and maintaining a secure service. Where law requires retention, the basis is compliance with that obligation.

Purchase data is used to perform the contract, deliver files, provide support and comply with applicable obligations. It is not used for advertising.

Providers and disclosures

Cloudflare hosts the store and private files. Stripe and PayPal process payments when you select those options. Resend sends confirmation and delivery emails. These providers receive only the data needed for their role. We do not sell personal data.

If a provider processes data outside the European Economic Area, the safeguards required by the GDPR must apply, such as an adequacy decision or standard contractual clauses, as appropriate.

Retention

Enquiries are retained for the time needed to respond and address any resulting liabilities. Technical records are limited to operational and security needs, according to the hosting configuration. Records subject to legal obligations are retained for the required periods. Download links expire after 7 days; order records and consent confirmations are retained for support and applicable legal obligations.

Your rights

You may request access, rectification, erasure, objection, restriction and portability where applicable. You may also withdraw consent without affecting earlier processing. Email admin@traceo.art; additional identity information will be requested only if necessary to handle your request.

If you believe your rights have not been respected, you may complain to the Spanish Data Protection Agency at aepd.es or to your competent supervisory authority.