1. Data Controller

In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), the data controller of personal data collected through this website is:

Name: Arnau Casellas Collell
Tax ID (NIF): 48044792T
Address: Calle Cavalleria, 37 – 08560 Manlleu (Barcelona), Spain
Email: info@mizizi.art

2. Personal Data We Collect

We collect personal data when you:

• Place an order

• Contact us by email

• Subscribe to our newsletter (if applicable)

• Interact with the website

The data collected may include:

• Full name

• Billing and shipping address

• Email address

• Phone number

• Payment information (processed securely via third-party providers)

• IP address

• Technical and browsing data

We do not create user accounts and do not allow public comments on the website.

3. Purpose of Processing

Your personal data is processed for the following purposes:

a) Order Management

• Processing and fulfilling purchases

• Payment processing

• Shipping and delivery

• Customer support

b) Legal Compliance

• Compliance with tax, accounting, and consumer protection laws

c) Website Security and Improvement

• Preventing fraud

• Monitoring website performance

• Improving user experience

d) Marketing Communications (if applicable)

• Sending newsletters or promotional emails (only with explicit consent)

4. Legal Basis for Processing

We process personal data based on:

• Performance of a contract (processing orders)

• Legal obligations (tax and accounting requirements)

• Legitimate interest (fraud prevention, website security)

• Explicit consent (newsletter subscriptions)

5. Payment Processing

Payments are processed through secure third-party payment providers. We do not store full credit card details on our servers.

These providers process your data in accordance with their own privacy policies.

6. Data Retention

Personal data will be retained:

• For the duration necessary to fulfill contractual obligations

• As required by applicable tax and accounting laws

• Until consent is withdrawn (in the case of marketing communications)

After this period, data will be securely deleted or anonymized.

7. Data Sharing

Your personal data may be shared with:

• Payment service providers

• Shipping and logistics companies

• Hosting provider (SiteGround)

• Technical service providers necessary for website operation

All third-party providers process data under appropriate data protection agreements.

We do not sell or rent personal data to third parties.

8. International Transfers

If you are located outside the European Union, your data may be transferred to Spain for processing.

When data is transferred outside the EU/EEA (e.g., certain service providers), appropriate safeguards are implemented in accordance with GDPR requirements.

9. Your Rights

Under GDPR, you have the right to:

• Access your personal data

• Rectify inaccurate data

• Request erasure (“right to be forgotten”)

• Restrict processing

• Object to processing

• Data portability

• Withdraw consent at any time

To exercise your rights, please contact: info@mizizi.art

You also have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos – AEPD) or your local supervisory authority.

10. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.

However, no internet transmission is completely secure, and absolute security cannot be guaranteed.

11. Cookies

This website uses cookies and similar technologies. Detailed information is available in our Cookie Policy.

12. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Changes will be published on this page.