Privacy policy

Last updated: 25 September 2026

Here is a plain explanation of what data I collect, why, and what you can do about it. Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD) apply.

Data controller

What data I collect and why

1. Contact form. Name, email address and the message you write.

• Purpose: to reply to you and, if you ask, send you a quote.
• Legal basis: steps taken at your request prior to entering into a contract (art. 6.1.b GDPR).
• Retention: if you do not buy, your data is deleted within one year of the last contact.

2. Orders. Name, email, phone number, delivery address, the furniture configuration and, for businesses, invoicing details (tax or VAT number).

• Purpose: to build and ship your order, confirm the configuration, take payment, invoice and handle the warranty.
• Legal basis: the purchase contract (art. 6.1.b GDPR) and tax and accounting obligations (art. 6.1.c GDPR).
• Retention: for the warranty period and then for the periods required by law (six years for accounting records and four for tax records).

3. Card payments. You enter your card details on Stripe's payment page and they never pass through modek.es. MÖDEK only receives the payment confirmation and the amount.

Who receives your data

I do not sell or share your data. It is only accessed by those needed to fulfil your order:

• Stripe Payments Europe, Ltd. (Ireland), which processes card, Apple Pay and Google Pay payments.
• The carrier delivering the order: delivery name, address and phone number.
• The workshop that builds the furniture: only the configuration, without your contact details.
• Netlify, Inc., which hosts the website and receives the forms. It is based in the United States and certified under the EU-US Data Privacy Framework, recognised by the European Commission as an adequate safeguard.
• My accountant and the Spanish Tax Agency, only invoicing data and because the law requires it.

Your rights

You can ask at any time to access, rectify or erase your data, restrict processing, request portability or object to processing. Just write to info@modek.es saying what you want. I will reply within one month.

If you think your data has not been handled properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to the authority in your country.

Security

The website always uses an encrypted connection (HTTPS), and payments are made on Stripe's PCI DSS certified platform.

Cookies

This website does not use cookies. See the cookie policy.