Controller
The data controller for this website is Itamonte, operating from Barcelona, Spain. Contact: ana@itamonte.es. The final legal entity, tax number and registered address should be added when the commercial registration is finalized.
Data we process
- Website preferences, including language selection and cookie choices stored in the visitor's browser.
- Technical data, such as browser, device, approximate location from network data, pages visited, button clicks, session recordings and timestamps, only where needed for security, operation, consented analytics or consented marketing measurement.
- Communications sent by email, WhatsApp, Instagram or Substack, depending on the channel chosen by the visitor.
- Order and payment data entered in Stripe checkout. Stripe processes payment details directly; Itamonte receives the information needed to prepare and support the order.
Purposes and legal bases
- To operate the website and remember essential preferences.
- To process orders, payments, invoices, delivery and customer support.
- To send newsletters or marketing communications only when the visitor subscribes or otherwise consents.
- To measure website performance, button clicks and session replays through analytics only when configured and accepted.
- To measure advertising campaign performance and retarget visitors through marketing tools only when configured and accepted.
- To comply with legal, accounting, tax and consumer obligations.
Cookies and local storage
The website uses essential storage for language and consent preferences. Optional analytics, session recording or marketing tools remain disabled unless they are configured and accepted through the cookie banner. Visitors can change preferences through the cookie settings link.
Recipients and processors
Itamonte may use hosting, analytics, email, payment, newsletter, courier and communication providers, including Google Cloud, Stripe, Substack, WhatsApp/Meta, Meta Pixel, Google Analytics and PostHog where configured. These providers may process data under their own terms and data-processing arrangements.
International transfers
Some providers may process data outside the European Economic Area. Where this happens, Itamonte relies on the safeguards offered by the provider, such as standard contractual clauses or other lawful transfer mechanisms.
Retention
Preference data is kept until it is changed, expires or is deleted from the browser. Order and accounting information is kept for the periods required by tax, accounting and consumer rules. Messages are kept for as long as needed to manage the request and any related obligations.
Your rights
You may request access, rectification, erasure, restriction, portability and objection, and you may withdraw consent at any time where processing is based on consent. Contact ana@itamonte.es. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).
Security
Itamonte applies reasonable organizational and technical measures to protect website and order information, including the use of reputable third-party processors for payments and hosting.
Updates
This policy may be updated when services, providers or legal details change. Last updated: 14 May 2026.