Controller and contact

MOLINK is responsible for personal data processed through mol-ink.com. Privacy requests can be submitted through the contact form, clearly indicating the right you wish to exercise.

Data categories

We may process identification and contact details, billing and delivery information, order history, account details, messages sent to support and technical information required for security, sessions and cookies.

Payment providers process the payment credentials needed to authorise the transaction. MOLINK does not receive or store the full card number.

Purposes and legal bases

• Contract: managing the cart, payment, order, delivery, returns and customer account.
• Legal obligation: invoicing, accounting, tax duties and responding to competent authorities.
• Consent: non-essential cookies or optional communications when expressly accepted.
• Legitimate interest: fraud prevention, service security and handling claims, always balancing user rights.

Recipients and international transfers

Data may be shared with providers needed for payment, shipping, hosting, email, maintenance and customer support. Each receives only the information required for its role. If a provider processes data outside the European Economic Area, the applicable safeguards must be used.

Retention

Order and invoice information is kept for the periods required by commercial, tax and consumer law. Account data is kept while the account remains active; enquiries and incidents are kept only as long as needed to answer them and handle possible responsibilities. Consent data is retained until it is withdrawn or no longer needed.

Your rights

You may request access, correction, deletion, objection, restriction and portability, and withdraw consent at any time. Requests are free and are normally answered within one month. We may ask for information needed to verify identity.

If you believe your request has not been properly handled, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).

Security and updates

We use reasonable technical and organisational measures to protect data. No online system is completely risk-free, so we continuously review access and service security. This policy may be updated when services or legal requirements change.