Data Protection Policy
Last updated: 24 September 2026
This is a summary of how we process your personal data, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD). You will find all the information in our Privacy and Cookies Policy.
Basic data protection information
- Controller: BOXNOX, S.L. (ABANUC), Tax ID (NIF) B84084474, C/ Guzmán el Bueno, 127, 28003 Madrid (Spain). Email: abanuc@abanuc.com.
- Purposes: managing your orders, your customer account and your enquiries; sending you our newsletter and marketing communications if you authorise it; analysing the use of the website and measuring our campaigns if you accept the corresponding cookies; preventing fraud and complying with our legal obligations.
- Legal basis: performance of the purchase contract, your consent, our legitimate interest and compliance with legal obligations.
- Recipients: providers who render services to us (Shopify, payment providers, GLS and Sendcloud, Klaviyo and Google, among others) and public authorities where required by law. We do not sell your data.
- International transfers: some providers, such as Shopify, Klaviyo and Google, process data in the United States or Canada, with the safeguards provided for in the GDPR (adequacy decisions, including the EU-U.S. Data Privacy Framework, and standard contractual clauses).
- Rights: access, rectification, erasure, objection, restriction of processing and data portability, and withdrawal of consent at any time.
Our principles
- Transparency: we always explain why we ask for each piece of data.
- Data minimisation: we only ask for the data we need.
- Storage limitation: we keep data only for as long as necessary and for the periods required by law.
- Integrity and confidentiality: we apply technical and organisational security measures and work with providers that offer appropriate safeguards.
How to exercise your rights
Write to us at abanuc@abanuc.com or use our privacy requests page, where you can request a copy of your data, correct it or ask for it to be erased. We will reply within one month. If you have subscribed to our newsletter, you can unsubscribe at any time using the link at the bottom of every email.
If you consider that we have not properly handled your rights, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) or with the supervisory authority of your country of residence.