Privacy Policy – DEPORTES J SANCHEZ

Effective Date: October 21, 2026

1. Introduction

DEPORTES J SANCHEZ SA (“we”, “us”, “our”) operates the e-commerce website www.deportesjsanchez.com, a specialized small fitness equipment store dedicated to curating compact, high-quality fitness gear that helps users turn any limited space into a functional home gym. This Privacy Policy is designed to fully inform you (“you”, “your”, “user”, “customer”) about how we collect, process, store, protect, and share your personal data when you interact with our website, purchase our products, use our related services, or communicate with our team, in full compliance with the EU General Data Protection Regulation (GDPR, EU 2016/679) and the Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights (LOPDGDD), the local legal framework that adapts GDPR to the Spanish regulatory system.

We take your personal data protection extremely seriously, as privacy is recognized as a fundamental right under the EU legal system. All our data processing activities follow the core principles of legality, fairness, transparency, data minimization, storage limitation, integrity, and accountability, to ensure your personal information is always handled with the highest level of care. This policy applies to all visitors, registered users, and customers of www.deportesjsanchez.com, regardless of whether you browse our product catalog, create an account, place an order, subscribe to our notifications, or contact our customer support team. If you have any questions, concerns, or requests related to your personal data at any time, you can reach out to our dedicated data protection contact using the details provided below, and we will respond to your inquiry within the legally required timeframe.

2. Information About Our Organization

For the purposes of applicable data protection regulations, the data controller for all personal data processing activities conducted through www.deportesjsanchez.com is:

Full company name: DEPORTES J SANCHEZ SA
Website: www.deportesjsanchez.com
Registered physical address: Calle Duque de Alba, 8, 05001 Ávila, Spain
Official contact email: pixelr@deportesjsanchez.com
Contact telephone number: +34 920 223 646

Our core business activity is the sale of premium compact fitness equipment, including resistance bands, massage balls, skipping ropes, yoga blocks, and related home gym accessories, developed by a team of dedicated fitness enthusiasts who understand the challenges of maintaining consistent workouts in busy modern lifestyles. All our operations are based in Spain, and we ensure that every step of our data processing workflow adheres to both national and European data protection legal requirements.

3. Types of Personal Data We Collect

We only collect personal data that is directly relevant, necessary, and limited to the specific purposes for which it is processed, in strict adherence to the data minimization principle outlined in GDPR. The categories of personal data we may collect from you include the following:

‌Account and identity information‌: When you create a user account on our website, we collect your full name, email address, chosen username, and password (stored in encrypted form to prevent unauthorized access).
‌Transaction and order information‌: When you place a purchase on our store, we collect your billing address, shipping delivery address, selected payment method details, order history, product preferences, purchase amount, and related transaction records. We do not store full sensitive credit or debit card data on our own servers, all payment processing is handled through certified, PCI DSS compliant payment service providers to ensure maximum security for your payment information.
‌Communication information‌: If you contact us via email, telephone, or the website contact form, we may collect your name, contact details, and the full content of your messages, including your inquiries, feedback, complaints, or special requests related to your orders or our products.
‌Technical and usage data‌: When you browse our website, we automatically collect limited technical information including your IP address, browser type and version, device operating system, referring website, pages you visit on our store, time spent on each page, click paths, and other anonymous analytics data that helps us understand how users interact with our platform to optimize website performance and user experience.
‌Preference and notification data‌: If you opt in to receive our product updates, new arrival announcements, promotional notifications, or fitness tips, we collect your email address and your content preferences to send you relevant, personalized information that matches your interests.
‌Public user content‌: If you choose to leave a product review, submit a user testimonial, or post other public content on our website, we collect the content of your submission alongside your displayed name that you consent to be published alongside your feedback.

We will never collect special categories of sensitive personal data (such as information related to your racial origin, religious beliefs, health status, or biometric data) without your explicit, freely given, specific consent, unless we are legally required to do so under applicable laws.

4. Purposes and Legal Bases for Data Processing

We process your personal data only for clearly defined, legitimate purposes permitted by applicable data protection laws, with a documented legal basis for every processing activity as outlined below:

‌Processing to fulfill our contractual obligations to you‌: This is the legal basis for all processing activities required to perform our sales contract with you, including managing your purchase order, processing your payment, arranging product shipping, handling delivery confirmations, processing returns and refunds per our published Refund and Returns Policy, and providing after-sales customer support related to your purchased products. Without processing the necessary personal data for these purposes, we will not be able to complete your order and deliver the products you have purchased from our store.
‌Processing based on our legitimate interests‌: Where it does not override your fundamental data protection rights, we process your personal data for our legitimate business interests that include: optimizing the functionality, performance, and security of www.deportesjsanchez.com; detecting and preventing fraudulent transactions, unauthorized access, cyber security threats, and abusive activities on our platform; conducting anonymous statistical analysis of user behavior to improve our product catalog, website design, and overall shopping experience for all customers; and sending you service-related administrative notifications that are necessary for the normal operation of your account and order process, such as updates to our terms of service, shipping alerts, or critical security announcements.
‌Processing based on your explicit consent‌: For activities that require your prior, freely given opt-in consent, we process your data only after you have provided clear, affirmative permission, including: sending you optional marketing newsletters, new product launch announcements, exclusive promotional offers, and free fitness guidance content; using non-essential cookies to personalize your website browsing experience and show you tailored product recommendations; and publishing your user-generated product reviews and testimonials on our public website. You have the full right to withdraw your consent for these processing activities at any time, easily and without any negative consequences to your ability to shop on our website, by accessing the settings page in your user account or sending us a notification via our contact email.
‌Processing to comply with our legal obligations‌: We may process your personal data when it is necessary to comply with our legal responsibilities under applicable Spanish and EU laws, including retaining order and transaction records for tax and accounting compliance purposes; responding to valid, lawful requests from competent public authorities such as the Spanish Data Protection Agency (AEPD) or other relevant government bodies; and fulfilling our obligations under consumer protection and e-commerce regulations outlined in Spanish Law 34/2002 (LSSI-CE) on Information Society Services.

All our processing activities fully respect the GDPR requirements for granular consent, data minimization, and lawful justification for all secondary uses of personal data, to ensure we never process your information in ways that are incompatible with the purposes you were originally informed of.

5. Cookie Policy and Online Tracking

Our website uses cookies and similar tracking technologies to improve your browsing experience. For full transparency, we categorize the cookies we use as follows:

Strictly Necessary Cookies: These cookies are essential for the basic functionality of www.deportesjsanchez.com to work properly, including features that remember your cart contents, keep you logged in to your account as you navigate between pages, and ensure the checkout process runs smoothly. You cannot disable these cookies through our website’s consent banner, as they are required to deliver the e-commerce service you have requested.
Performance Cookies: These anonymous cookies collect aggregated statistical information about how visitors use our website, to help us measure website performance, identify which pages load slowly, and fix technical errors to make your shopping experience faster and more reliable.
Functional Cookies: These cookies remember your personal preferences when using our site, such as your preferred language, your selected currency, and saved login details, to make your future visits to our website more convenient.
Marketing and Targeting Cookies: These cookies are only activated if you give us explicit opt-in consent, to help us show you relevant product advertisements and promotional content on third party platforms, tailored to your fitness product interests.

When you first visit our website, you will see a clear, easy to understand cookie consent banner that asks you to select your preferred cookie settings, with the ability to accept, reject, or customize your consent for non-essential cookies. You can update your cookie preferences at any time by accessing the cookie settings page on our website footer. We do not conduct any secret, non-transparent tracking of your activities across other external websites without your explicit separate consent.

6. Your Rights Under Applicable Data Protection Laws

As a data subject under GDPR and LOPDGDD, you hold a comprehensive set of enforceable rights over your personal data. We have put in place simple, free processes for you to exercise any of these rights at any time:

‌Right of Access‌: You have the right to request a complete copy of all personal data that we hold about you, as well as clear information about how we process that data, what recipients we share it with, and how long we store it. We will provide you with a full, structured copy of your data free of charge within one month of receiving your request.
‌Right to Rectification‌: If you find that any of your personal data stored on our systems is inaccurate, incomplete, or out of date, you have the right to request that we correct that information immediately. You can also update most of your personal details directly through the profile settings page when you are logged in to your user account.
‌Right to Erasure (“Right to be Forgotten”)‌: Under specific circumstances, such as when your personal data is no longer necessary for the original purposes we collected it for, you withdraw your consent, or our processing of your data is no longer based on a valid legal basis, you have the right to request that we permanently delete all of your personal data from our systems. We will fulfill this request without excessive delay, except for data we are legally required to retain to meet our tax, accounting, or regulatory compliance obligations.
‌Right to Restriction of Processing‌: You have the right to request that we temporarily pause the processing of your personal data in situations where you contest the accuracy of your data, our processing activities are unlawful, we no longer need the data but you require it for legal claims, or you have objected to our legitimate interest based processing while we verify whether our legitimate grounds override your rights.
‌Right to Data Portability‌: For all personal data that you have directly provided to us based on your consent or for the performance of our contract with you, you have the right to receive that data in a structured, commonly used, machine-readable format, or request us to transmit that data directly to another data controller of your choice, where it is technically feasible.
‌Right to Object‌: You have the full right to object at any time to any processing of your personal data that is based on our legitimate interests, including direct marketing activities. After you submit an objection to marketing communications, we will immediately stop sending you all promotional related messages.
‌Right to Lodge a Complaint‌: If you believe that our processing of your personal data violates applicable data protection regulations, you have the right to submit a formal complaint to the Spanish Data Protection Authority (AEPD), the national supervisory authority for data protection in Spain located at Calle Jorge Juan, 6, 28001 Madrid.

To exercise any of these rights, you only need to send us a clear request via our contact email pixelr@deportesjsanchez.com, with a simple verification of your identity to prevent unauthorized third parties from accessing your personal data. We will respond to your request without delay, no later than 30 calendar days from the date we receive it, and we will never charge you any fee for processing legitimate, reasonable data subject requests.

7. Data Sharing and Third Party Recipients

We will never sell, rent, or trade your personal data to unrelated third parties for their own marketing purposes without your explicit separate, written consent. We only share your personal data with carefully selected third party service providers who are necessary for us to operate our e-commerce store and fulfill our contractual obligations to you, and all these third parties are required to sign strict data processing agreements that ensure the same level of personal data protection required by GDPR:

Shipping and logistics partners: We share your full name, shipping address, and contact phone number with trusted courier services we work with, solely for the purpose of delivering your purchased fitness products to the delivery location you specified when placing your order.
Payment service providers: We share necessary transaction related information with our certified, PCI compliant payment processors, to process your payment securely, verify your transaction, and handle refunds when required.
Cloud service providers: Our website and data storage systems are hosted on GDPR compliant cloud infrastructure providers that are located within the European Economic Area (EEA), to ensure your personal data never leaves the jurisdiction protected by EU data protection laws without appropriate safeguards in place.
Professional service providers: We may share limited necessary information with our legal advisors, tax consultants, and accounting professionals, only when it is required for us to comply with our legal and regulatory obligations.
Lawful public authorities: We may disclose your personal data to competent government bodies, courts, or law enforcement agencies, only when we are legally compelled to do so via a valid, lawful official request, court order, or legal mandate that applies to our operations.

If any third party service provider we work with is based outside of the European Economic Area, we will ensure that adequate, legally approved safeguards are implemented to protect your personal data, such as using the European Commission approved Standard Contractual Clauses (SCCs), to guarantee that your data protection rights remain fully protected even after cross-border transfer.

8. Data Security and Data Breach Notification

We implement a comprehensive set of industry-standard technical, organizational, and physical security measures to protect your personal data against unauthorized access, accidental loss, alteration, destruction, misuse, or any other unlawful form of processing. These security measures include end-to-end SSL encryption for all data transmitted between your browser and our website, encrypted password storage, regular security updates and penetration testing of our website systems, restricted access controls to our data servers that only authorized, specially trained staff can access, regular staff data protection training, and off-site encrypted backup of all our data records.

In the very unlikely event that a personal data breach occurs that poses a high risk to your rights and freedoms as a data subject, we have internal documented procedures in place to immediately assess the situation, notify the Spanish Data Protection Agency (AEPD) within 72 hours after we become aware of the breach as required by GDPR, and directly notify all affected individual users without undue delay, with clear information about the nature of the breach, the potential impacts, and the protective measures we have already implemented to mitigate any possible harm.

9. Data Retention Periods

We do not store your personal data for any longer than is strictly necessary to fulfill the specific purposes for which we originally collected it, in full adherence to the GDPR storage limitation principle. The different categories of your personal data are retained for the following periods:

Order and transaction related data: We retain your purchase order, payment, and shipping records for a minimum of 10 years, to comply with Spanish tax laws, accounting regulations, and commercial legal requirements.
User account data: If you create an account on our website, we will retain your profile data for as long as you keep your account active, or until you submit a valid request for us to delete your account and erase your personal data.
Marketing communication contact details: We will keep your email address on our marketing subscriber list only for as long as you remain opted in to receive our communications, and we will immediately remove your contact information from our mailing list if you unsubscribe or withdraw your consent.
Customer support communication records: We retain the content of your support inquiries and related correspondence for up to 3 years after your interaction is resolved, to help us track customer satisfaction and address any follow-up questions you may have about previous requests.
Anonymous website analytics data: We delete or fully anonymize all website usage tracking data after 24 months, so that it can no longer be linked back to any individual identifiable user.

After the applicable retention period expires, we will securely, irreversibly delete or anonymize your personal data permanently from all our storage systems and backup archives.

10. Updates to This Privacy Policy

We may occasionally make necessary updates or revisions to this Privacy Policy to reflect changes to our business operations, new legal regulatory requirements, new website features, or changes to applicable data protection laws. When we make material changes to this policy that impact your rights, we will clearly notify you via a prominent announcement on our website homepage, and send an email notification to all registered users of our platform at least 15 days before the new revised policy comes into effect.

The updated version of the policy will have a new clearly marked “Effective Date” posted at the top of the page. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data. Your continued use and access to www.deportesjsanchez.com after the effective date of the revised policy will be considered as your acknowledgment and agreement to the updated terms of this Privacy Policy.

11. Contact Information

If you have any questions, comments, concerns, or formal requests related to this Privacy Policy, our data processing practices, or your personal data protection rights, you can contact us directly at any time via:

Email: pixelr@deportesjsanchez.com
Postal address: DEPORTES J SANCHEZ SA, Calle Duque de Alba, 8, 05001 Ávila, Spain
Telephone: +34 920 223 646

We will make every effort to respond to your inquiry as quickly as possible, resolve any concerns you may have regarding your data privacy, and ensure that your experience shopping with DEPORTES J SANCHEZ SA remains secure, transparent, and fully compliant with all your data protection rights.