privacy policy

1. Data Controller

Controller / Responsible Party: Sonia Pueche Gómez
Tax ID (NIF / CIF): 05300957D
Trade Name: época
Studio Location: Asturias, Spain
Contact Email: epoca@epocaceramic.com

2. Collected Data and Purpose of Processing At época, we collect only the information strictly necessary to manage our commercial and artisanal activity. The personal data provided will be processed for:

Contractual and logistics management: Processing purchases, invoicing, made-to-order production, and shipping items via courier agencies.
Customer support: Responding to questions, inquiries, or issues regarding orders or custom projects submitted via web forms, email, or social media.
Commercial communications: Sending updates on studio news, item restocks, or promotions, strictly provided that the user has granted prior explicit consent (opt-in).

3. Accuracy of Data and Limitation of Liability for Customer Errors The user is solely responsible for the truthfulness, accuracy, validity, and authenticity of the data provided (shipping address, contact phone number, email address, or Tax ID for invoicing).

Limitation of liability: época is fully exempt from any liability or delay in order delivery resulting from incorrect, incomplete, false, or outdated addresses entered by the user during the checkout process. In the event that a package is returned to the studio due to incorrect details provided by the buyer, all logistics costs for reshipping will be borne entirely by the customer.

4. Legal Basis for Processing The legal basis for processing your data is:

Performance of a contract or pre-contractual measures (Art. 6.1.b GDPR): Necessary for the sale, crafting, and shipment of products.
Compliance with legal obligations (Art. 6.1.c GDPR): Required under tax, accounting, and consumer protection laws.
Data subject's explicit consent (Art. 6.1.a GDPR): For sending newsletters or commercial communications.
Legitimate interest (Art. 6.1.f GDPR): To maintain network security and prevent fraudulent use of the website.

5. Data Processors and Third-Party Data Transfers época does not sell, rent, or transfer personal data to third parties for advertising purposes. Data will only be disclosed to essential external service providers necessary to deliver our commercial services (data processors):

Courier and shipping companies: Strictly the delivery details essential to carry out package logistics.
Payment platforms and financial institutions: For secure payment processing (e.g., Stripe, PayPal, Redsys).
Hosting and web software providers: Digital hosting services and e-commerce platform management.
Legal obligations: Public authorities, tax agencies, or law enforcement agencies when required by applicable law.

Limitation of liability regarding third parties: época assumes no liability for the data usage or security vulnerabilities of external third-party platforms (payment gateways, courier agencies, or social networks) beyond the studio's direct control.

6. Security Measures and Limitation of Digital Liability We ensure the confidentiality of your data by implementing appropriate technical and organizational security measures, utilizing the SSL (Secure Socket Layer) encryption protocol across the entire website.

However, data transmission over the internet is not 100% invulnerable. época shall not be held liable for illegal interceptions, unauthorized access, or network failures resulting from cyberattacks, malicious software, or force majeure events beyond our reasonable technical control.

7. Data Retention Period Personal data will be stored only for as long as necessary to fulfill the purpose for which it was collected and to satisfy legal obligations arising from the commercial relationship:

Purchase and invoicing data: Minimum of 5 years due to tax and accounting requirements.
Newsletter or communication data: Until the user requests erasure or cancels their subscription.

8. Exercise of Rights and Dispute Resolution Users may exercise their rights of access, rectification, erasure, objection, restriction of processing, and data portability at any time.

To exercise these rights, please send a written request to epoca@epocaceramic.com, attaching a copy of an official identity document (ID card/NIE/Passport) to verify data ownership.

Before filing a formal complaint with the Spanish Data Protection Agency (AEPD), we kindly ask that you contact us directly so we can resolve any questions or issues swiftly and amicably.

9. Amendments to the Privacy Policy época reserves the right to modify or update this Privacy Policy at any time to adapt to statutory changes, case law updates, or organizational decisions of the studio. Any modifications will take effect upon publication on the website.