The privacy policy contains all the information regarding the processing and management of personal data collected through this website, specifically through contact forms, subscriptions, or comments.

In this section, we explain the purposes for which we use your personal data.

This policy outlines how the personal information of all individuals who interact with ALEGRÍA STORE through this website will be treated and protected. Please read all sections of the Legal Notice, Cookie Policy, and this Privacy Policy before using this website.

In accordance with the provisions of EU Regulation 2016/679, of the European Parliament and of the Council of April 27, 2016 (GDPR) and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, we inform you that by accepting this Privacy Policy, you provide your explicit, informed, free, and unequivocal consent for the Data you provide, and for which security measures, technical and organizational, as provided by current regulations, to be processed by María Rosario Díaz Palacios as the data controller.


Controller: María Rosario Díaz Palacios


Tax ID: 04180589V

Address: C/ Alfares, 34, local, Zip Code: 45600 Talavera de la Reina (Toledo)


Activity: Sale of gift items


For the purposes established in this Privacy Policy, ALEGRÍA STORE collects and processes the following Personal Data, depending on the different products or services requested on this website:

Identifying data: first name, last name.

Contact information: postal address, email address, mobile phone number.

Contractual data: data regarding contractual operations, ID number, purchased products and services, payment data.

Browsing data: IP address, device type and identification, browser type, domain through which you access the website, browsing data, website activity.


We process your personal data based on the following legal bases:

Processing of orders and management of requested services.

User consent for contact, subscription to content, and sending commercial communications via email, cookies, or messaging systems.

Legitimate interest of the data controller in protecting users of the website from misuse and fraud in the use of our services.


On this website, there are different forms, and the collected information from each form will be used as follows:

Content subscription forms: Several forms exist to activate subscriptions. The provided data will be used exclusively to send the Newsletter and keep you updated on news and occasional offers, exclusive to subscribers of

Comment form: Personal data entered in the form for inserting these comments will be used exclusively for moderation and publication.

Contact form: There is also a contact form for inquiries, suggestions, or professional contact. In this case, the email address will be used to respond to inquiries and send requested information through the website.

Registration form: In this case, we request the following personal data: Name, Email, for you to create an account in our system and access its functionalities.

Sales form: We also process data to manage the purchase of our products, including order management, payment, and all operations related to the chosen service or product. This includes sending follow-up emails, responses, invoices, receipts, etc.


Customer data: The retention period for personal data will vary depending on the service the customer contracts. In any case, it will be kept for the minimum necessary time, potentially up to:

    4 years: Law on Social Order Infringements and Sanctions (obligations related to affiliation, enrollments, withdrawals, contributions, salary payments, etc.); Articles 66 and onwards of the General Tax Law (accounting books, etc.).

    5 years: Article 1964 of the Civil Code (personal actions without a special deadline).

    6 years: Article 30 of the Commercial Code (accounting books, invoices, etc.).

    10 years: Article 25 of the Anti-Money Laundering and Terrorist Financing Prevention Law.

Subscriber data: From the time the user subscribes until they unsubscribe.

Potential customer data: Data will be kept for the duration of the established commercial relationship and, once concluded, for two years, unless the user requests deletion before that.


Any individual has the right to obtain confirmation of whether is processing personal data concerning them.

Interested parties have the right to:

    Request access to personal data concerning the data subject.

    Request rectification or deletion of data.

    Request erasure of data.

    Request restriction of data processing.

    Object to processing.

    Request data portability.

If you have given your consent for a specific purpose, you have the right to withdraw that consent at any time, without affecting the legality of processing based on consent before its withdrawal.

If you believe your rights regarding the protection of your personal data have been violated, especially if you have not received satisfaction when exercising your rights, you can file a complaint with the relevant Data Protection Authority through their website:

To exercise these rights, you can write to

There is a form available for the exercise of these rights; you can request it via email, or if you prefer, you can use forms provided by the Spanish Data Protection Agency or third parties.

These forms should be electronically signed or accompanied by a photocopy of your ID.

If you are representing someone, you should attach a copy of their ID, or the form should be signed with their electronic signature.

Forms can be submitted in person, sent by mail, or by email to the address of the data controller as shown at the beginning of this text.


Ads is a Google platform designed for ADVERTISERS who want to advertise on GOOGLE. On, Google Ads, Google's advertising platform that allows creating campaigns and ads to display on other websites, is used. When generating an ad, the audience can be segmented by:


    Demographic data (age, gender, etc.)

    Interests (activities, hobbies, etc.)

    Online and other channel purchasing behavior


Data obtained through Google Ads is subject to this privacy policy from the moment the user submits their data in the form on this website to join the subscription newsletter. Under no circumstances will information from Google be used for a different purpose.


Facebook Conversion Tracking Pixel

For optimizing advertising campaigns for ads published on Facebook and for statistical purposes, the Facebook Inc. conversion tracking pixel is used. This pixel tracks user actions after clicking on an ad.

The data obtained through this pixel is anonymous and does not reference identified individuals, nor is it stored or used to create profiles with personal data.

This data can be stored and processed by Facebook, which may link this data to your Facebook account and use it for its own advertising purposes according to Facebook's data use policy found at, recently updated at

You can allow Facebook and its partners to deliver ads both on and off Facebook, and for these purposes, a cookie may be stored on your computer.


Security Notification and Breach Declaration

At ALEGRÍA STORE, we adopt appropriate security measures based on the level of risk to protect personal information against loss, misuse, unauthorized access, disclosure, alteration, and destruction, taking into account the risks associated with data processing and the nature of personal information. However, if we determine that your service data has been misused, exposed due to a security breach, or acquired incorrectly by a third party, we will immediately inform you about such security breach, appropriation, or unauthorized acquisition.


Many tools used on this website to manage data are contracted by third parties. To provide strictly necessary services for the development of activities, ALEGRÍA STORE shares data with the following providers under their corresponding privacy conditions:

External service providers (e.g., payment processing services, order processing, analysis, marketing campaign management, website management, email distribution, and other similar service providers) in order for them to perform business functions on behalf of ALEGRÍA STORE.

The web development and maintenance company, as well as the hosting company, may occasionally have access to this website. Both have signed a service provision contract obliging them to maintain the same level of privacy as applied to the processing carried out on this website.

Any international data transfers resulting from the use of tools or service providers will adhere to the Privacy Shield agreement, ensuring that American software companies comply with European data protection policies regarding privacy, confidentiality, and data security.

Specifically, this website uses the following tools:

    Email marketing tool:

    Invoicing tool:

    Analytics tools

    Online chat tool:

DATA CONFIDENTIALITY AND SECURITY is committed to using and treating user personal data while respecting their confidentiality and in accordance with the purpose thereof; as well as to comply with the obligation to keep them and adapt all measures to prevent alteration, loss, unauthorized access, disclosure, processing, or access, in accordance with current data protection regulations.

This website includes an SSL certificate. This is a security protocol that ensures your data is transmitted securely and completely; that is, data transmission between a server and the web user, and vice versa, is fully encrypted.) cannot guarantee the absolute invulnerability of the Internet network, and therefore, the violation of data through fraudulent access by third parties.

Regarding the confidentiality of processing, María Rosario Díaz Palacios will ensure that any person authorized by her to process customer data (including her staff, collaborators, and service providers) will be under appropriate confidentiality obligations (whether contractual or legal).

If any security incident is detected, the customer will be notified without undue delay and provided with timely information related to the Security Incident as known, or when reasonably requested by the customer.


As a user, you are solely responsible for the truthfulness and correctness of the data you submit to, releasing ALEGRÍA STORE from any liability in this regard. Users guarantee and respond, in any case, to the accuracy, currency, and authenticity of the provided personal data and commit to keep them duly updated. The user agrees to provide complete and correct information in the contact or subscription form.


The consent granted, both for the processing and transfer of data of the interested parties, is revocable at any time by notifying ALEGRÍA STORE as established in this Policy for the exercise of ARCO rights. This revocation will not have retroactive effect under any circumstances.


ALEGRÍA STORE reserves the right to modify this policy to adapt it to new legislative or jurisprudential developments, as well as to industry practices. In such cases, the changes introduced will be announced on this page with reasonable advance notice of their implementation.

Product added to wishlist
Cookie consent