Privacy and Cookies Policy

At FBA Pinatar, the trade name used by Hanna Kalynogorska, with NIF Y3866628C, we are fully aware that the protection of personal data is not only a legal requirement but also a commitment to trust, transparency and responsibility towards our clients, collaborators, suppliers and users. The proper management of this information is fundamental, and we carry it out in compliance with the General Data Protection Regulation (GDPR), the Spanish Organic Law on Data Protection and Digital Rights (LOPDGDD), and the Law on Information Society Services and Electronic Commerce (LSSI-CE). This document unifies our Privacy Policy and our Cookies Policy, explaining how we collect, use, store, share and protect personal data, in which circumstances it may be communicated to third parties, what rights you may exercise and how, as well as all details about the use of cookies and similar technologies on our website www.fbapinatar.es.

You can contact us at any time by writing to info@fbapinatar.es or by calling +34 672 167 736. For reasons of privacy protection, no physical address is published, these channels being the official means of communication.

Processing of personal data. The data we process may come from different sources: directly from the user when contacting us by form, email or telephone; from our clients within the framework of the contractual relationship, for example by providing us with logistical data of recipients in cases of returns or reshipments; automatically through cookies and similar technologies when browsing the website; or from public professional sources in B2B contexts. The categories of data include identification and contact (name, surname, NIF, telephone, email), professional or commercial data (position, company), logistics data (delivery addresses, reference codes, FNSKU labels, incidents), billing data (without storing complete card numbers), support and communication information (messages, incidents, documents), technical browsing data (IP, browser, language, device, pages visited) and, in the case of job applications, the information contained in the CV. We do not intentionally process special categories of data such as health, ideology or religion, and if they are received accidentally, they will be deleted.

Purposes and legal bases. We process the data for legitimate and specific purposes: providing logistics and preparation services for Amazon FBA and FBM; issuing invoices and complying with tax and accounting obligations; responding to queries, incidents and support requests; maintaining communications necessary on the status of services; sending moderate information about updates related to FBA Pinatar; ensuring the security of the website and operations; and in the case of job applications, assessing professional profiles. The legal bases are the performance of a contract or pre-contractual measures, compliance with legal obligations, explicit consent in cases such as marketing or non-essential cookies, and the legitimate interest of the company, always balanced against users’ rights.

Retention periods. Data is kept only as long as necessary: six years for tax and accounting records, up to five years after the end of contracts, twelve months for commercial inquiries, twenty-four months for incidents, twelve months for job applications, and up to thirteen months for cookies and analytics. Afterwards, they are blocked and securely deleted or anonymised.

Recipients and transfers. We do not sell or disclose data unjustifiably. Data is only shared when essential for the provision of services or required by law. Providers with limited access may include web hosting services, accounting firms, email and cloud platforms, carriers such as UPS and Amazon, as well as analytics providers. All act as data processors under confidentiality agreements and legal compliance. In the case of transfers outside the EEA, we apply the European Commission’s Standard Contractual Clauses and additional safeguards.

User rights. You can exercise your rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent by writing to info@fbapinatar.es. We will respond within one month, extendable to two in complex cases. If you believe your rights have not been respected, you can file a complaint with the Spanish Data Protection Agency at www.aepd.es. Our services are not aimed at children under 14 years of age, and if we detect such data, it will be immediately erased.

Data security. We apply appropriate technical and organisational measures: SSL encryption, regular backups, strong passwords, multifactor authentication, access controls, segregation of environments, minimisation protocols, periodic audits and confidentiality agreements with staff and providers. In the event of a security breach affecting users’ rights, we will promptly inform both users and the competent authority.

Use of cookies. Our website uses cookies and similar technologies to improve browsing, ensure security, analyse usage and, with your consent, display personalised content or advertising. Cookies are classified into technical (necessary for site operation, not requiring consent), preference (to remember language and settings), analytics (to measure and improve site use), marketing (to personalise advertising and measure effectiveness) and social media (when sharing content or interacting with external features). When you first access the site, a banner informs you of cookies and allows you to accept all, reject or configure them. Your choice is stored for a reasonable period and can always be modified from the “Configure cookies” link in the footer. Session cookies are deleted when the browser is closed, while persistent cookies remain until expiration or manual deletion. We also retain proof of consent granted, as required by law. The use of third-party cookies (such as Google or Meta) means that these providers may receive information about your browsing. We recommend reviewing their privacy policies and, if desired, managing preferences at EDAA (youronlinechoices.eu), DAA (optout.aboutads.info) or NAI (networkadvertising.org/choices). You can deactivate or delete cookies at any time from your browser. Note that disabling certain cookies may affect the functioning of the site.

Policy updates. This Privacy and Cookies Policy is periodically reviewed to adapt to regulatory, technological or organisational changes. The current version will always be published on www.fbapinatar.es and constitutes the reference framework applicable to all personal data processing at FBA Pinatar.