LIBRERIA ESTRELLA

Privacy Policy

Effective Date: September 9, 2026

Welcome to the privacy policy of LIBRERIA LA ESTRELLA DEL SUR SL, operating the e-commerce website www.libreriaestrella.com. At LIBRERIA ESTRELLA, we specialize in curating thoughtfully tested stationery and office supplies that blend minimal design with reliable performance, designed to turn ordinary desks into cozy, functional spaces for work, study and creative routines. This Privacy Policy is created to transparently explain how we collect, use, store, protect and process your personal information when you visit our website, browse our product catalogs, place orders, interact with our customer support team, or participate in any of our platform services. We are fully committed to upholding the highest standards of data privacy compliance, respecting the privacy rights of every visitor and customer, and ensuring that all your personal data is handled with the utmost care, security and respect throughout your experience with our store.

1. Data Controller Identification

For the purposes of applicable data protection regulations including the General Data Protection Regulation (GDPR) and relevant Spanish local data protection laws, the data controller responsible for your personal information is:
‌Full Company Name‌: LIBRERIA LA ESTRELLA DEL SUR SL
‌Registered Physical Address‌: Carretera General TF-66 Guaza a Las Galletas, Km 27, 38640 Arona, Santa Cruz de Tenerife, Spain
‌Official Contact Email‌: bzntqr@libreriaestrella.com
‌Contact Telephone Number‌: +34 661 614 021‌
If you have any questions, concerns or requests related to your personal data processing activities outlined in this policy, you can reach out to our dedicated data protection team at any time through the contact channels listed above, and we will respond to your inquiry promptly within 24 hours as per our standard service commitment.

2. Categories of Personal Information We Collect

We only collect personal information that is directly relevant to providing you with a seamless, secure and satisfying shopping experience on our website. The types of data we may gather include, but are not limited to, the following categories:

  • ‌Account and Registration Data‌: When you create a user account on our platform, we collect your full name, valid email address, chosen account password, and optional contact preferences that you voluntarily submit during the sign-up process. This data helps you access your order history, save preferred shipping addresses, and manage your personalized shopping preferences easily on return visits.
  • ‌Transaction and Order Data‌: When you place an order for our stationery products including hanging file folders, desk pads, cable organizers, desktop storage boxes and other office essentials, we collect full billing and shipping addresses, telephone contact number, order item details, purchase amount, payment method information (we do not store full credit card details on our own servers, all payment processing is handled through certified secure third-party payment gateways), and order status records. This information is critical for us to process your payment accurately, fulfill your order correctly, arrange fast shipping, and resolve any post-delivery issues that may arise.
  • ‌Website Usage and Technical Data‌: As you browse www.libreriaestrella.com, our server automatically collects standard technical information including your IP address, browser type and version, device operating system, referring website URLs, pages you viewed on our site, time spent on each product page, click paths, and other anonymous navigation data. We also use first-party functional cookies to remember items added to your cart, maintain your logged-in session, and save your display preferences to optimize your browsing speed and overall website usability.
  • ‌Customer Support and Communication Data‌: When you submit an inquiry through our online contact form, send us an email, or contact our team for order updates, product questions, return and refund requests, or other after-sales support, we collect the content of your messages, your provided contact information, and our response records. This data allows us to resolve your issues efficiently, track service quality, and provide consistent follow-up support for all your concerns.
  • ‌Voluntarily Submitted User Content‌: If you choose to leave product reviews, participate in our user feedback surveys, or submit any other voluntary content to our platform, we collect the content of these submissions along with your associated username or display name. This content helps other customers make informed purchasing decisions and also allows us to continuously improve our product curation and service offerings.

We will never collect sensitive special category personal data including racial origin, religious beliefs, political opinions, health information, or biometric data through our website, and we explicitly request that you do not submit any such sensitive information to us through any of our communication channels.

3. Legal Bases for Processing Your Personal Data

All our personal data processing activities strictly adhere to legal requirements, and we rely on the following legal bases as applicable:

  • ‌Performance of Contract‌: Most of our processing activities related to order fulfillment, payment processing, product delivery, and after-sales return services are necessary to execute the sales contract we enter into with you when you place an order on our website. Without the required order and shipping data, we will not be able to deliver your purchased stationery items to the designated address or process your return requests in line with our published Refund and Returns Policy.
  • ‌Legitimate Interests‌: We process limited website usage data and anonymized shopping behavior data for our legitimate business interests, including optimizing our website functionality, improving our product selection based on customer browsing trends, preventing fraudulent transaction activities, and ensuring the security of our e-commerce platform. All these processing activities are carried out in a way that does not override your fundamental privacy rights and freedoms, and we always take appropriate measures to minimize the impact on your personal privacy.
  • ‌Your Explicit Consent‌: For processing activities that are not covered by contract performance or legitimate interest grounds, such as sending you optional marketing newsletters about new stationery drops, exclusive promotional offers, and new product launches, we will only conduct such processing after you provide your clear, explicit, freely given consent. You retain the full right to withdraw your marketing consent at any time, with no negative impact on your ability to shop on our website or access our core product and service offerings.
  • ‌Legal Compliance‌: We may process your personal data when it is necessary for us to comply with our legal obligations under applicable Spanish tax regulations, consumer protection laws, and other mandatory legal requirements that we are bound to follow as a registered business operating in Spain.

4. Purposes for Which We Use Your Personal Information

We utilize the personal information we collect only for specified, transparent, legitimate purposes that are directly related to operating our e-commerce platform and delivering the high-quality shopping experience our customers expect. These purposes include:

  1. ‌Order Processing and Fulfillment‌: We use your order, shipping and payment data to validate your transaction, arrange for the dispatch of your selected stationery and office supply products, track delivery progress, and notify you about order status updates from the moment you complete checkout until your package is successfully delivered to your specified address. For local Spanish addresses, this process supports our standard service of delivering most orders within 2 to 5 working days after the 24-hour internal processing period, as stated in our Shipping Policy.
  2. ‌Platform Functionality Optimization‌: Your website navigation data and preference settings help us identify and fix technical bugs on our website, improve page loading speed, optimize product recommendation logic, and ensure that all visitors can smoothly browse our 260+ curated stationery products, add items to their shopping cart, and complete checkout without unnecessary interruptions.
  3. ‌Customer Support Delivery‌: The contact information and inquiry content you submit to our support team allow us to respond to your product questions, order update requests, shipping queries, and return and refund applications promptly within our promised 24-hour response window, ensuring all your issues are resolved in a timely, professional and friendly manner.
  4. ‌Platform Security and Fraud Prevention‌: We process technical usage data and transaction records to detect unauthorized access attempts, identify potentially fraudulent payment activities, prevent account hijacking, and protect both your personal data and our business operations from malicious cyber threats. This helps maintain a safe, trustworthy shopping environment for every user of our website.
  5. ‌Service and Product Improvement‌: Anonymized, aggregated shopping behavior data is analyzed by our team to understand which product categories and specific stationery items our customers are most interested in, so that we can continue to curate our product catalog to add more high-quality, well-made office and study supplies that align with our brand philosophy of bringing quiet warmth to daily desk routines.
  6. ‌Marketing Communications (With Your Consent)‌: If you opt in to receive our marketing communications, we will use your email address to send you occasional updates about new stationery drops, limited-time promotional campaigns, exclusive member offers, and useful office organization tips that we believe you may find valuable. You can unsubscribe from all marketing emails at any time by clicking the dedicated unsubscribe link included at the bottom of every marketing message we send.
  7. ‌Legal and Regulatory Compliance‌: We retain necessary transaction records, billing data and customer information for the legally required duration as stipulated by Spanish commercial and tax laws, to fulfill our statutory reporting and record-keeping obligations as a registered operating business.

5. Sharing and Disclosure of Your Personal Information

We will never sell, rent, or lease your personal information to any unrelated third parties for their own marketing purposes without your explicit written consent. We may only share your personal data with trusted third-party service providers under strictly limited circumstances as outlined below, and all these third parties are bound by strict data protection agreements that require them to protect your personal data to the same high standards we maintain ourselves:

  • ‌Logistics and Shipping Partners‌: We share only the necessary shipping information including your full name, delivery address, and contact telephone number with our contracted courier partners, for the sole purpose of arranging the physical delivery of your ordered products to the correct location efficiently.
  • ‌Certified Payment Processors‌: We transmit required transaction and payment information to our PCI DSS compliant payment service providers, who handle all payment authentication, processing, and fund settlement activities on our behalf. These providers are strictly prohibited from using your payment data for any other unauthorized purposes.
  • ‌Trusted IT Service Providers‌: We may share limited anonymized or pseudonymized website usage data with our authorized website hosting providers, cybersecurity service vendors, and analytics platform partners, who assist us in maintaining the stable operation of our website, carrying out cybersecurity audits, and generating aggregated anonymous usage reports to guide our service improvement efforts.
  • ‌Legal Authorities‌: We may only disclose your personal information to government regulatory bodies, law enforcement agencies, or judicial institutions when we are legally compelled to do so through a valid court order, legally binding administrative request, or other mandatory legal procedure that we are required to comply with under Spanish national law.

Under no circumstances will we transfer your personal data to third parties located outside of the European Economic Area (EEA) unless we have confirmed that adequate data protection safeguards are in place in full compliance with applicable GDPR requirements, to ensure the safety and integrity of your personal information during any such transfer.

6. Data Retention Period

We will only retain your personal information for as long as it is strictly necessary to fulfill the specific legitimate purposes for which the data was originally collected. The exact retention period varies depending on the type of data and the relevant processing purpose:

  • For order transaction data, we retain the related records for the full duration required by applicable Spanish tax and commercial laws, which is typically 10 years for official accounting and transaction documentation.
  • For registered user account data, we will retain your account information for as long as you maintain an active account on our platform, and we will permanently delete all your personal account data within 30 days after you submit a valid account deletion request to our support team.
  • For customer support communication records, we retain these records for a maximum of 3 years after your last interaction with our support team, for the purpose of tracking service quality and resolving any potential follow-up inquiries related to your past orders or requests.
  • For marketing consent records, we retain this information until you choose to withdraw your marketing opt-in consent, after which we will immediately remove your contact information from all our marketing distribution lists.
    Once the original purpose for processing your personal data is fulfilled and there are no remaining legal obligations that require us to retain the data, we will either permanently delete the data or fully anonymize it so that it can no longer be associated back to your specific identity.

7. Your Data Protection Rights

Under applicable data protection laws, you hold a comprehensive set of rights over your personal information that we fully respect and guarantee to uphold. You can exercise any of the following rights at any time free of charge, by sending us a request through any of our listed contact channels:

  • ‌Right of Access‌: You have the right to request a free copy of all the personal information we hold about you, along with a detailed explanation of how we have processed that data.
  • ‌Right to Rectification‌: If you find that any of the personal information we hold about you is inaccurate, incomplete, or out of date, you have the right to request immediate correction and updating of that data. You can also edit most of your personal profile information directly by logging into your user account on our website.
  • ‌Right to Erasure‌: You have the right to request that we permanently delete all your personal data from our systems, under circumstances including when the data is no longer necessary for the original purposes for which it was collected, when you withdraw your consent for the relevant processing, or when you object to the processing and there are no overriding legitimate legal grounds for us to continue holding your data. We will process your erasure request in line with legal requirements, unless we are obligated to retain certain records for ongoing legal disputes or mandatory regulatory compliance purposes.
  • ‌Right to Restriction of Processing‌: You have the right to request that we temporarily suspend the processing of your personal data, in scenarios where you contest the accuracy of the data, the processing is unlawful but you do not wish us to fully delete the data, or when we no longer need the data for our original processing purposes but you require the data to establish, exercise or defend a legal claim.
  • ‌Right to Data Portability‌: You have the right to receive all the personal data you have provided to us, in a structured, commonly used, machine-readable format, and you have the right to request that we transmit this data directly to another data controller of your choice, where technically feasible.
  • ‌Right to Object‌: You have the right to object at any time to our processing of your personal data that is based on our legitimate interests, including anonymized data analysis for business improvement purposes. We will cease processing your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your privacy rights, or the processing is necessary for the establishment, exercise or defense of legal claims. You also have the absolute right to object to marketing communications at any time, with no conditions attached.
  • ‌Right to Withdraw Consent‌: For any processing activity that you previously provided explicit consent to, you can withdraw that consent at any time. The withdrawal of consent will not affect the lawfulness of any processing activities that we conducted on your data before the date of your consent withdrawal.

When you submit a rights request, we will first verify your identity to ensure that the request is submitted by the actual data subject to prevent unauthorized access or modification of other users’ personal data. We will respond to your valid request within one month of receipt, in line with legal requirements. If for any reason we are unable to fully fulfill your request within that timeframe, we will notify you in advance and explain the reason for the maximum one-month permitted extension period allowed under applicable regulations. If you are not satisfied with our handling of your request, you retain the right to submit a formal complaint to the local Spanish data protection supervisory authority.

8. Data Security Measures

At LIBRERIA LA ESTRELLA DEL SUR SL, we take the security of your personal data extremely seriously, and we have implemented a comprehensive set of technical and organizational security measures to protect your personal information against unauthorized access, accidental loss, alteration, destruction, or unlawful disclosure:

  • All sensitive personal data transmitted between your browser and our website is encrypted using industry standard TLS 1.3 encryption protocols, ensuring that your information cannot be intercepted during transmission over the public internet.
  • All our back-end servers that store personal data are hosted in certified secure data centers located within the European Economic Area, with 24/7 physical security monitoring, strict access control policies, and regular security patch updates.
  • Only a very limited number of authorized staff members from our team who need to access your personal data to fulfill order processing or customer support tasks are granted access to your personal information, and all access activities are logged and audited on a regular basis.
  • We conduct regular cybersecurity vulnerability assessments and penetration testing of our e-commerce platform, and maintain a detailed data breach response plan that allows us to identify, contain, and remediate any potential data security incidents in the fastest possible time frame. In the unlikely event that a personal data breach occurs that poses a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority in full compliance with applicable legal notification timelines.

We rigorously test all our services and processing systems to ensure that your personal data is protected at all times, matching our brand commitment to delivering reliably tested, daily-ready stationery products to every desk.

9. Use of Cookies and Similar Tracking Technologies

Our website www.libreriaestrella.com uses functional first-party cookies to enhance your browsing experience. These cookies are small text files stored on your local device, and they serve purposes including remembering items in your shopping cart when you navigate between pages, maintaining your logged-in session, saving your language and region preferences, and helping us understand which parts of our website are performing best so we can continuously improve your shopping experience.

We do not use any non-essential third-party advertising or tracking cookies on our website without your prior explicit consent. When you first visit our website, you will be presented with a clear cookie consent banner that allows you to customize your cookie preferences, accept all non-essential cookies, or continue browsing with only strictly necessary functional cookies enabled. You can also modify your cookie settings at any time through the privacy configuration page on our website, or adjust your local browser settings to block or delete cookies entirely, though please note that disabling strictly necessary cookies may impact the normal functionality of your shopping cart and prevent you from completing your checkout process smoothly.

10. Minor Privacy Protection

Our e-commerce website and its related services are targeted for general use by adult consumers purchasing stationery, office supplies, and study products for personal, professional, or household use. We do not intentionally collect personal information from children under the age of 14. If you are a parent or legal guardian and you become aware that your child under 14 has submitted personal information to our website without your prior explicit consent, please contact us immediately through our official contact channels, and we will take immediate steps to permanently delete all such information from our servers as quickly as possible.

11. Links to Third-Party Websites

Our website may occasionally include hyperlinks to external third-party websites, such as links to our authorized payment partners, shipping courier trackers, or related stationery resource pages that we believe may be of interest to our customers. Please be aware that when you click on these external links and navigate away from our website, this Privacy Policy no longer applies to those external third-party platforms. We have no control over the privacy practices, data processing policies, or content of these third-party websites, and we cannot take any responsibility for the protection of your personal information once you submit data to those external sites. We strongly recommend that you review the full privacy policy of every third-party website you visit, before you provide any of your personal information on those platforms.

12. Updates to This Privacy Policy

We may occasionally update and revise this Privacy Policy in response to changes in our business operations, new regulatory requirements, or feedback from our valued customers. When we make material changes to this policy, we will update the “Effective Date” posted at the top of this page, and we will also place a prominent notification on the homepage of www.libreriaestrella.com to inform you about the upcoming revisions before they officially take effect. We encourage you to review this Privacy Policy periodically on a regular basis to stay informed about how we are protecting your personal data. By continuing to browse our website and place orders after the revised policy comes into effect, you acknowledge and agree to the terms outlined in the updated version of this Privacy Policy.

13. Contact Information for Privacy Inquiries

If you have any questions, comments, concerns, or requests related to this Privacy Policy, or any aspect of how we handle and process your personal information, you can contact our dedicated data protection team at any time using the following details:

  • ‌Postal Address‌: LIBRERIA LA ESTRELLA DEL SUR SL, Carretera General TF-66 Guaza a Las Galletas, Km 27, 38640 Arona, Santa Cruz de Tenerife, Spain
  • ‌Email Address‌: bzntqr@libreriaestrella.com
  • ‌Telephone Number‌: +34 661 614 021‌