Effective Date: November 10, 2026

Welcome to the privacy policy of MUEBLES DE COCINA AS MARIÑAS SL. This document is designed to inform you of how we collect, use, store, and protect your personal information when you interact with our e-commerce website www.marinascocina.com, as well as to outline your rights regarding your personal data in full compliance with applicable global and Spanish data protection regulations, including the General Data Protection Regulation (GDPR) (EU) 2016/679 and the Spanish Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights.

1. Data Controller Identification

For the purposes of all relevant data protection laws, the data controller responsible for your personal information is:
‌Full Legal Name‌: MUEBLES DE COCINA AS MARIÑAS SL
‌Registered Address‌: Calle Rúa das Mariñas 11, Bajo, 15300 Betanzos, A Coruña, Spain
‌Contact Email‌: lumir@marinascocina.com
‌Contact Telephone‌: +34 981 77 51 37
Our dedicated data protection team can be reached through all the contact channels listed above, and we will respond to all legitimate data-related inquiries within a maximum period of 30 calendar days from receipt of your request.

2. Types of Personal Information We Collect

We only collect information that is strictly necessary to deliver our kitchen furniture products, process your orders, and provide you with a seamless e-commerce shopping experience. The categories of data we may collect include:

• ‌Account and Order Information‌: When you register for an account on our website, place an order, or request a product quotation, we collect your full name, billing and delivery address, email address, phone number, and selected payment details. We never store full sensitive payment card information, and all payment processing is handled through PCI DSS certified third-party payment providers to ensure maximum financial security.
• ‌Technical Usage Data‌: As you browse our website, we automatically collect non-identifiable technical information including your IP address, browser type and version, device operating system, browsing preferences, pages visited on our site, time spent on each page, access dates and times, and other diagnostic data. This information helps us optimize our website performance, resolve technical errors, and tailor our product catalog to match your browsing interests.
• ‌Voluntarily Provided Information‌: If you contact our customer support team via email, phone, or our on-site contact form, we may record the content of your communications, including any personal details you voluntarily share to help us resolve your inquiries, process custom furniture requests, or address post-sales support issues.
• ‌Marketing Preference Data‌: If you opt in to receive our promotional newsletters, we store your consent records, email address, and any preferences you share regarding product categories of interest to you, such as custom kitchen cabinetry, countertop materials, or home installation services.

3. Legal Basis for Processing Your Personal Data

We process your personal information strictly based on the following legal grounds as defined by GDPR:

1. ‌Contract Performance‌: The processing of your order, delivery, and payment information is necessary to fulfill the purchase contract you enter into with us when you place an order on our website, and to carry out all pre-contractual steps you request before completing a purchase.
2. ‌Legitimate Interests‌: We process technical usage data and basic browsing information to maintain and improve the security, functionality, and user experience of our e-commerce platform, which constitutes a legitimate business interest that does not override your fundamental privacy rights.
3. ‌Explicit Consent‌: We only send you marketing communications, use non-essential cookies, or process any special categories of personal data you voluntarily provide (such as custom furniture measurement details or accessibility requirements for your home) after we have obtained your clear, freely given, and revocable explicit consent.
4. ‌Legal Compliance‌: We may process your personal data to comply with our legal obligations under Spanish tax law, commercial regulatory requirements, and cross-border product delivery regulations that apply to our operations.

4. How We Use Your Personal Information

All your personal data is processed exclusively for the following specified, transparent purposes:

• To process, confirm, and fulfill your orders for kitchen furniture, including arranging production, coordinating shipping and delivery, managing installation services if applicable, and sending you real-time order status updates via email or SMS.
• To verify your identity, prevent fraudulent transactions, and protect our e-commerce platform, our customers, and our business partners from unauthorized access, identity theft, and financial fraud.
• To provide responsive customer support, respond to your product inquiries, resolve post-sales warranty claims, and address any issues you encounter with our products or services.
• To send you order-related notifications, delivery alerts, payment confirmations, and important service updates, including information about product recalls or safety notices related to items you have purchased from us.
• If you have opted in to marketing communications, to send you personalized newsletters, exclusive promotional offers, new product launch announcements, and information about upcoming home furniture exhibitions that may be relevant to your interests. You can opt out of these marketing messages at any time, free of charge, by clicking the unsubscribe link included in every promotional email, or by sending a request to our contact email listed above.
• To analyze website usage trends, optimize our product catalog, improve our website interface and shopping functionality, and conduct anonymous market research that helps us better understand the needs of our customers. All data used for such market research is fully anonymized and cannot be linked back to any individual user.
• To comply with all applicable legal, regulatory, or judicial requirements, including responding to valid court orders, government inspection requests, or mandatory disclosures required under Spanish law.

5. Sharing and Disclosure of Your Personal Information

We never sell, rent, or trade your personal identifiable information to any third parties for their independent marketing purposes. We may share your data only with the following categories of trusted third parties, strictly to fulfill the purposes outlined in this privacy policy:

• ‌Authorized Service Providers‌: We share necessary information with our pre-vetted logistics partners, payment processors, cloud hosting providers, website maintenance teams, and professional installation service providers, all of whom are bound by strict data processing agreements that require them to protect your personal data to the same high standards we maintain, and prohibit them from using your information for any purposes other than the specific services they are contracted to deliver for us.
• ‌Legal Authorities and Regulatory Bodies‌: We may disclose your personal information if we are required to do so by law, court order, or official regulatory request, or if such disclosure is necessary to protect our legal rights, defend ourselves in legal proceedings, or protect the safety of our staff, our customers, or members of the general public.
• ‌Business Transfer Scenarios‌: In the unlikely event of a merger, acquisition, sale of all or part of our company assets, or other corporate restructuring process, your personal data may be transferred to the relevant successor entity, who will be bound by the terms of this privacy policy, and notified to you in advance if any material changes to data processing practices occur.

All third parties we share data with are required to maintain appropriate technical and organizational security measures to safeguard your personal information, and we conduct regular audits of their data protection practices to ensure ongoing compliance.

6. International Data Transfers

Our e-commerce website and associated data hosting systems are primarily operated within the territory of the European Economic Area (EEA). On rare occasions, if we need to transfer your personal data to a location outside of the EEA, we will ensure that the relevant destination country has an adequate level of data protection recognized by the European Commission, or we will put in place appropriate safeguards approved under GDPR, such as standard contractual clauses, binding corporate rules, or other legally approved data transfer mechanisms, to guarantee that your personal rights and protections are fully enforced even after cross-border transfer. You are entitled to request a copy of these safeguards at any time by contacting us via our listed contact details.

7. Data Retention Periods

We will not retain your personal identifiable information for any longer period than is strictly necessary to achieve the purposes for which it was originally collected:

• For order and transaction related data: We retain this information for the full duration of our commercial and tax legal obligations, which is 10 years in accordance with Spanish tax regulations, to comply with accounting, audit, and legal record keeping requirements.
• For customer account information: We retain your account data for as long as you maintain an active account on our website, and for a reasonable period after you request account deletion to resolve any pending outstanding orders, warranty claims, or disputes.
• For marketing consent records: We retain these records for as long as you remain subscribed to our marketing communications, and for 3 additional years after you opt out of such communications to document our compliance with anti-spam regulations and consent requirements.
• For technical usage and website analytics data: We store this anonymized or pseudonymized data for a maximum period of 24 months, after which it is fully anonymized and can no longer be linked back to any individual user.
  Once the relevant retention period expires, your personal data will be securely and permanently deleted or anonymized in full compliance with our data disposal protocols.

8. Your Rights as a Data Subject

Under applicable data protection laws, you hold a comprehensive set of rights over your personal information, which you can exercise at any time free of charge by submitting a request to us via our contact email lumir@marinascocina.com or our listed telephone number:

• ‌Right of Access‌: You can request a full copy of all personal data we hold about you, along with a detailed explanation of how and why we process that information.
• ‌Right to Rectification‌: If you find that any of the personal information we hold about you is inaccurate, incomplete, or outdated, you can request immediate correction and updating of that data at any time.
• ‌Right to Erasure (Right to be Forgotten)‌: You can request that we permanently delete your personal data, under circumstances where the data is no longer necessary for the purposes it was collected, you have withdrawn your consent for processing, or the processing is no longer based on any valid legal ground.
• ‌Right to Restriction of Processing‌: You can request that we temporarily suspend processing of your personal data, for example during the period where we verify the accuracy of your data, or assess the legitimacy of an objection you have raised against our processing activities.
• ‌Right to Data Portability‌: You can request to receive all the personal data you have provided to us in a structured, commonly used, machine-readable format, or request that we directly transfer this data to another data controller you specify, where technically feasible.
• ‌Right to Object‌: You can object at any time to processing of your personal data that is based on our legitimate interests, or to direct marketing communications, including profiling activities related to such marketing.
• ‌Right to Withdraw Consent‌: You can withdraw any previously given consent for processing of your personal data at any time, without affecting the lawfulness of processing that was carried out before your consent was withdrawn.
• ‌Right to Lodge a Complaint‌: If you believe that our processing of your personal data violates applicable data protection regulations, you have the right to submit a complaint to the competent data protection authority in Spain, the Agencia Española de Protección de Datos (AEPD), at any time.

Before processing your data rights request, we may ask you to provide basic identification verification to confirm your identity and protect your data from unauthorized access by third parties. We will process all valid requests and provide you with a response within 30 calendar days of receipt.

9. Data Security Measures

We implement strict industry-standard technical and organizational security measures to protect your personal information against unauthorized access, accidental loss, alteration, disclosure, or destruction:

• All data transmitted between your browser and our website is encrypted using up-to-date TLS 1.3 protocols, ensuring that no third party can intercept or read your personal information during transmission.
• Our servers are hosted in ISO 27001 certified secure data centers within the European Union, with multi-factor authentication, 24/7 security monitoring, regular security patching, and automated backup systems in place.
• Our internal staff are only granted access to your personal data on a need-to-know basis, and all team members complete mandatory annual data protection and information security training.
• We conduct regular third-party security audits and penetration testing of our e-commerce platform to identify and resolve any potential vulnerabilities promptly.

While we take every reasonable step to protect your personal data, no internet transmission or electronic storage system can be guaranteed to be 100% secure, and we will notify you and the relevant regulatory authority immediately in the unlikely event of a personal data breach that poses a high risk to your rights and freedoms, in full compliance with GDPR notification requirements.

10. Cookie Policy Supplementary Information

Our website uses cookies and similar tracking technologies to enhance your browsing experience. For full details on the types of cookies we use, how you can manage your cookie preferences, and the purposes of each tracking category, you can refer to the dedicated Cookie Policy published on our website. You can adjust your browser settings to reject non-essential cookies at any time, though note that disabling certain cookies may limit access to some full functionality of our e-commerce platform.

11. Privacy Policy Updates

We may periodically update and revise this privacy policy to reflect changes in our business operations, new legal regulatory requirements, or improvements to our data processing practices. Any material changes to this document will be posted on this page with a clearly updated effective date, and we will notify all registered users of our website via email of significant changes at least 15 days before they come into effect. We encourage you to review this privacy policy on a regular basis to stay informed of how we protect your personal information.

12. Contact Us

If you have any questions, concerns, or feedback about this Privacy Policy, or any matters related to how we handle your personal data, please do not hesitate to contact us at any time:

• By Email: lumir@marinascocina.com
• By Telephone: +34 981 77 51 37
• By Post: Calle Rúa das Mariñas 11, Bajo, 15300 Betanzos, A Coruña, Spain

We are committed to resolving all your privacy related inquiries in a transparent and timely manner, and ensuring that your personal information is always handled with the highest level of care and respect.