Privacy Policy

Last updated: 12 December 2025

1. Introduction

The Book Nooks respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your information in accordance with the EU General Data Protection Regulation (GDPR) and Spanish data protection law.

2. Data Controller

The Book Nooks
Askatasun Kalea, 14
01002 Vitoria-Gasteiz, Araba, Spain
Email: [email protected]
Phone: +34 647 919 247

3. Information We Collect

We collect the following types of personal data:

• Contact Information: Name, email address, phone number, postal address
• Order Information: Purchase history, payment information, delivery preferences
• Account Information: Username, password (encrypted), preferences
• Technical Information: IP address, browser type, device information, cookies
• Communication Information: Messages you send us, survey responses

4. How We Use Your Information

We use your personal data for the following purposes:

• Processing and fulfilling your orders
• Providing customer support and responding to enquiries
• Sending order confirmations and updates
• Improving our website and services
• Sending marketing communications (with your consent)
• Complying with legal obligations
• Preventing fraud and ensuring website security

5. Legal Basis for Processing

We process your personal data based on:

• Contract performance: To fulfill our obligations under purchase agreements
• Consent: For marketing communications and optional services
• Legitimate interests: To improve our services and prevent fraud
• Legal obligation: To comply with tax and accounting requirements

6. Data Sharing

We do not sell your personal data. We may share your information with:

• Delivery service providers to ship your orders
• Payment processors to handle transactions securely
• Email service providers for newsletters (with your consent)
• Legal authorities when required by law

All third parties are required to protect your data and use it only for specified purposes.

7. Data Retention

We retain your personal data only as long as necessary:

• Order information: 6 years for accounting and tax purposes
• Marketing consent: Until you unsubscribe
• Account information: Until you request deletion
• Website cookies: As specified in our Cookie Policy

8. Your Rights

Under GDPR, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal requirements)
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured format
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Unsubscribe from marketing at any time

To exercise these rights, contact us at [email protected]

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption, secure servers, and access controls. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

10. International Transfers

Your data is primarily stored within the European Economic Area. If we transfer data outside the EEA, we ensure adequate protection through appropriate safeguards.

11. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this privacy policy to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting an update on our website.

13. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos).

14. Contact Us

For questions about this privacy policy or your personal data, please contact:
Email: [email protected]
Phone: +34 647 919 247