-privacy policy

Aquí tienes la versión en inglés totalmente adaptada y alineada con la versión en español.

He corregido el formato de la tabla (Punto 5) para que no se peguen los textos y he añadido el apartado 6.1 de Transferencias Internacionales que dejamos pendiente en tu borrador previo para blindar el tema de WhatsApp y Google Analytics.

Privacy and Data Protection Policy

1. Data Controller

The data controller responsible for processing your personal data is Grupo Óptico Mayvision, S.L. (Tax ID / CIF: B82906439), located at Plaza Vicente Guillén Zamorano, 1 - 28430 Alpedrete (Madrid), Spain. You can contact us at info@centroopticoalpedrete.com or +34 918 570 324.

2. Data We Process and Where It Comes From

We process the following categories of data, obtained directly from you when placing an order, contacting us, or browsing our website:

  • Identification and contact details: name, postal and email address, phone number.

  • Commercial information: orders, product preferences.

  • Financial and transaction data: required to process payments and invoicing.

Prescription Data (Health Data)

When you provide us with your optical prescription for custom eyewear, we process data concerning your visual health (Art. 9 GDPR). This processing is carried out with your explicit consent and solely to manufacture your lenses in our workshop and coordinate production with our partner laboratories (Oakley, Shamir, Varilux Essilor, Bollé, Prats, or others according to your order).

Notice regarding submission channels: If you choose to send your prescription via WhatsApp, please note that this service is provided by Meta Platforms, Inc., which involves an international transfer of your data to the US (see section 6.1). If you prefer to avoid this, you can send your prescription via email.

This data is stored in our optical practice management software, an independent system separate from this online store, and is not stored in the website’s database.

3. Purposes of Data Processing

  • Managing your order, shipping, and invoicing.

  • Handling inquiries and post-sales service (warranties, returns).

  • Manufacturing prescription lenses according to your prescription, where applicable.

  • Sending commercial communications, only if you have given us your explicit consent.

  • Complying with our legal, tax, and accounting obligations.

4. Retention Period

We retain your personal data for as long as a contractual relationship exists with you and, thereafter, for the minimum statutory periods required by applicable tax and accounting laws. Contact data collected via forms, if an order is not placed, will be retained until you request its erasure.

5. Lawful Basis for Processing

Purpose / Processing Lawful Basis
Order management, invoicing, and shipping Execution of the purchase contract (Art. 6.1.b GDPR).
Manufacturing prescription lenses (health data) Explicit consent of the data subject (Art. 9.2.a GDPR).
Tax and accounting management Compliance with a legal obligation (Art. 6.1.c GDPR).
Marketing and commercial communications Free and unambiguous consent; revocable at any time (Art. 6.1.a GDPR).
Web analytics (cookies) Express consent given via the cookie consent panel (Art. 6.1.a GDPR).

If you do not provide the necessary data, we will not be able to process your order or fulfill our legal obligations.

6. Recipients of Your Data

We do not transfer your data to third parties for direct marketing purposes unless you have expressly authorized us to do so.

We only share data, strictly to the extent necessary, with:

  • Data Processors providing services to us: hosting and website maintenance providers, logistics and transport companies, tax and accounting advisors, and lens laboratories/manufacturers (prescription data only, strictly for your order).

  • Aplazame: if you select deferred payment as your payment method — strictly the data necessary to manage that specific service.

  • Public administrations or competent authorities: when there is a legal obligation to do so.

6.1. International Data Transfers

Some of our technology service providers are located or process data outside the European Economic Area (EEA):

  • Google LLC (Google Analytics): United States.

  • Meta Platforms, Inc. (WhatsApp messaging service): United States.

    These transfers are conducted under the EU-US Data Privacy Framework or Standard Contractual Clauses approved by the European Commission, ensuring a level of protection equivalent to European standards.

7. Cookies

This website uses Google Analytics to understand in an aggregated manner how the site is used and to improve your browsing experience. These cookies are only activated if you give your consent through our cookie settings panel. You can withdraw your consent at any time from the same panel.

More information on how Google processes this data: https://policies.google.com/technologies/partner-sites

8. Your Rights

You have the right to:

  • Access your personal data and, where processing is automated, receive it in a structured, commonly used format (data portability).

  • Rectify inaccurate data.

  • Request erasure of your data when it is no longer necessary for the purposes for which it was collected.

  • Restrict or object to processing under certain circumstances.

  • Withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

You can exercise these rights by writing to us at info@centroopticoalpedrete.com, proving your identity by appropriate means.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you consider that we have not properly addressed your request: https://www.aepd.es

9. Commercial Communications

In accordance with Spanish Law 34/2002 (LSSI), we will not send you advertising by email without your prior express authorization. You can unsubscribe at any time via the link included in each email or by contacting us directly.