Privacy policy

1. Who answers for your data

The data controller is Posterleku SL, tax number B00000000, registered at Donostia, Gipuzkoa.

For anything to do with your data, write to info@posterleku.com.

2. What data we handle

From an order: name, delivery and billing address, email, phone if you leave one, and what you bought. Card details are handled by the payment gateway; we neither see nor store them.

From a trade account: company name, tax number, contact person, registered address and the agreed terms (discount, payment days).

From the newsletter: the email address and the date you confirmed it. From browsing: the least we need for the basket, the favourites and the session to work.

3. What for, and on what basis

To handle the order, print it, ship it, invoice it and deal with anything after the sale: that is performing the contract made at checkout.

To keep the accounts, the invoicing and the tax obligations: that is a legal duty.

To send you the newsletter: your consent, which you can withdraw at any time from the unsubscribe link in any email.

To recommend products close to what you already buy and to prevent fraud: our legitimate interest in keeping the shop standing, always without automated decisions that affect you.

4. How long we keep it

Invoicing data for the six years commercial law requires, and longer where tax deadlines say so.

Newsletter data until you unsubscribe. Account data while the account stays open and for as long as outstanding obligations need it.

5. Who we share it with

Only with those needed to get the order to you: the payment gateway, the printer producing it, the carrier, the email provider and the host. All of them act as processors, under a signed contract.

Where one of those providers sits outside the European Economic Area, the transfer relies on the European Commission's standard contractual clauses.

We do not sell or hand data to anyone else, and never for third-party advertising.

6. What you can ask of us

To see your data, correct it, erase it, restrict or object to its processing, and take it elsewhere. An email to info@posterleku.com saying what you want is enough.

If you think we have got it wrong, you can complain to the Spanish Data Protection Agency (aepd.es). We would rather hear it from you first.

7. Cookies

We use the technical cookies the session, the basket and the favourites need, plus one to remember that you closed a promotion notice so it does not come back. No third-party advertising cookies, no profiling.

You can delete or block them in your browser; if you do, the basket and the session will stop remembering you.

8. Changes to this policy

If anything material changes, it is published here with the update date, and if it affects you directly we email you.