Privacy policy

At BookLab we respect your privacy and protect your personal data under Regulation (EU) 2016/679 (GDPR) and Spanish law.

Data controller

Kseniia Volska (BookLab — booklabtienda.es) · NIF Y9433350Y · Av. Donostiarra, 13, Cdad. Lineal, 28027 Madrid · Email: admin@booklabtienda.es.

What we collect

What you give us when you register or place an order: name, delivery address, email and phone number.

Browsing the shop also records technical data: your IP address, your browser and the pages you open. What happens to that depends on your cookie choice, explained below.

What we use it for

Processing, preparing and shipping your orders.
Answering your questions and supporting you.
Telling you about the status of your order.
Understanding which pages of the shop get visited and, if you agree, measuring and targeting our advertising.
Sending you marketing email — new arrivals, offers and reminders about books left in your basket — only if you subscribe. The legal basis is your consent; you can withdraw it at any time with the unsubscribe link in every email or from your account.

Cookies

Necessary. They hold your session, your basket, your chosen language and your answer to the cookie notice. The shop does not work without them, so they are always used and need no consent.

Advertising — only if you agree. These switch on the Meta pixel (Meta Platforms Ireland Limited, Dublin). The pixel tells Meta — that is, Facebook and Instagram — which pages you view and what you do in the shop (open a book, add it to the basket, complete an order), together with your IP address and browser details, so that we can measure how our ads perform and show them to people with similar interests. Meta may process that data outside the European Economic Area, relying on the EU–US Data Privacy Framework and the European Commission's standard contractual clauses. If you choose "Only essential", the pixel is not loaded and nothing is sent to Meta. See Meta's privacy policy.

Campaign analytics — only if you agree. These switch on the R7K12 counter (r7k12.com): it stores a visit identifier in your browser and records which ad, social network or search engine you arrived from and which pages you open, together with your IP address and browser details. We use it to see which campaigns actually bring orders. If you choose "Only essential", the counter is not loaded. When you place an order we send R7K12 its number, its amount and the books in it — never your name, email, phone or address — whether or not you accept cookies; what your consent decides is whether that order can be tied back to the visit that produced it. This data may be processed outside the European Economic Area.

Visit measurement. We use Umami, hosted on our own server. It sets no cookies, identifies nobody and does not follow visitors from one website to another: it only counts how often each page is opened. That is why it runs whether or not you consent.

You can change your choice at any time from Cookie preferences in the footer.

The shop assistant

The conversational search sends your question to Google (Gemini API, Google Ireland Limited) to write the answer. We do not send it your name, your email or your orders — only the text you type and the matching books from the catalogue. Please do not type personal data into that chat.

Retention and disclosure

We keep your data for as long as we need it to run the business relationship and meet our legal obligations, including tax and accounting periods.

We do not sell your data and do not pass it on for anything unrelated to the shop. We share it only with those who let us provide the service:

Correos, to deliver your order.
Redsys and your bank, to take the payment. We never see or store your card number.
Brevo (Sendinblue SAS, France), which sends the shop's email: about your orders and, if you subscribe, marketing email.
Telegram, which alerts us to each new order in our internal channel.
Hetzner Online GmbH (Germany), where the server is hosted.
Google, for whatever you type into the shop assistant.
Meta, only if you accept advertising cookies.
R7K12 (r7k12.com), our campaign analytics tool: the order number, its amount and the books in it.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to admin@booklabtienda.es. You can also withdraw your consent to advertising cookies at any time, without affecting the lawfulness of processing before that, and lodge a complaint with the Spanish Data Protection Agency (aepd.es).