Privacy Policy

Privacy Policy

Last updated: 11 July 2026

GstaadHouse ("we", "us") operates the online store gstaadhouse and is committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Spanish data protection law (LOPDGDD).

1. Data Controller

GstaadHouse
Contact: soporte.casenza@gmail.com

2. Data We Collect

  • Order data: name, shipping and billing address, email address, phone number, items purchased
  • Payment data: processed securely by our payment providers (Shopify Payments, PayPal, Klarna). We never store your full card details
  • Technical data: IP address, browser type, device information, pages visited
  • Marketing data: email address and preferences, if you subscribe to our newsletter or abandon a checkout

3. Why We Process Your Data

  • To fulfil and deliver your orders (contractual necessity)
  • To process payments and prevent fraud (contractual necessity / legitimate interest)
  • To answer your support requests (legitimate interest)
  • To send order updates and, with your consent, marketing communications (consent — you can unsubscribe at any time)
  • To improve our store through analytics and advertising measurement (consent, via cookie banner)

4. Third Parties We Share Data With

  • Shopify Inc. — e-commerce platform hosting this store
  • Payment processors — Shopify Payments, PayPal, Klarna
  • Shipping carriers — to deliver your order
  • Marketing & analytics platforms — e.g. Meta (Facebook/Instagram) and Google, for advertising measurement, only with your cookie consent

Some providers may process data outside the EEA. Where this occurs, transfers are protected by EU Standard Contractual Clauses or an adequacy decision.

5. Data Retention

Order and invoice data is kept for the periods required by tax and commercial law. Marketing data is kept until you withdraw consent. Technical data is kept for a maximum of 26 months.

6. Your Rights

Under the GDPR you have the right to access, rectify, erase, restrict, object to processing, and port your personal data, as well as to withdraw consent at any time. To exercise any right, email soporte.casenza@gmail.com. You also have the right to lodge a complaint with your local supervisory authority (in Spain, the AEPD — www.aepd.es).

7. Cookies

We use essential cookies to run the store, and analytics/marketing cookies only with your consent, which you can manage through the cookie banner at any time.

8. Security

All data is transmitted over encrypted SSL/TLS connections. Payments are PCI-DSS compliant.

9. Changes

We may update this policy from time to time. The latest version will always be published on this page.