Privacy Policy
1. Data Controller
Controller: YARR Rally (David Vega Fontelos) NIF: [YOUR NIF] Address: [POSTAL CONTACT ADDRESS] Email: info@yarr-rally.com
2. Purpose and Legal Basis
We process the personal data that users provide us for the following purposes:
2.1 Order Management and Billing
- Purpose: Process orders placed through our online store and manage billing.
- Legal basis: Contract performance (art. 6.1.b GDPR).
- Data processed: Name, surnames, shipping and billing address, email, payment data (securely managed by payment providers).
- Retention: During the contractual relationship and the periods required by tax and accounting regulations (normally 6 years).
2.2 Customer Service
- Purpose: Attend to user queries and requests.
- Legal basis: Legitimate interest (art. 6.1.f GDPR).
- Data processed: Contact data and query content.
- Retention: Up to 3 years from the last communication.
2.3 Website Analysis and Improvement
- Purpose: Analyze website usage and improve services.
- Legal basis: Consent, when analytical cookies are accepted (art. 6.1.a GDPR).
- Data processed: Navigation data obtained through cookies.
- Retention: According to cookie policy.
3. Personal Data Collected
- Data provided directly by the user when placing orders or making queries.
- Navigation data obtained through cookies.
- We do not store configurations or data from customer devices.
4. Data Processors
For the provision of our services we use external providers that act as data processors, such as e-commerce platforms, web hosting services, billing management, secure payment solutions and communication sending.
All of them process data according to our instructions, offering adequate guarantees in accordance with the GDPR.
5. International Transfers
Some of these providers may be located outside the European Economic Area. In these cases, an adequate level of protection is guaranteed through standard contractual clauses approved by the European Commission or other legally recognized mechanisms.
6. User Rights
Users can exercise the following rights:
- Access, rectification, deletion, limitation of processing, portability and opposition.
- Withdraw consent at any time.
To exercise your rights, you can contact us at:
- Email: info@yarr-rally.com
- Postal address: [FULL ADDRESS]
An identity document may be requested to verify the applicant's identity.
7. Security Measures
We adopt technical and organizational measures to protect personal data, including the use of encryption (SSL/TLS), restricted access and periodic security reviews.
8. Minors
Our services are not directed to minors under 14 years of age. If we detect that we have received data from minors, we will delete it immediately.
9. Supervisory Authority
Users can file complaints with the Spanish Data Protection Agency (AEPD):
- Web: www.aepd.es
- Address: C/ Jorge Juan, 6, 28001 Madrid
10. Modifications
We may update this Privacy Policy when necessary. The date of the last revision will appear at the end of the document.
Last updated: 7/8/2026