**Costa Box Co. - GDPR Compliance Policy**

**Introduction**

Costa Box Co. is committed to protecting your privacy. This policy outlines how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR). By using our services, you agree to the terms of this policy.

**Data Controller**

Costa Box Co., located at Avenida del Mar, 1, Costa del Sol, Spain, is the data controller. For any questions, contact us at info@costaboxco.com or +34 123 456 789.

**Personal Data We Collect**

- **Contact Information**: Name, email, phone, and address.
- **Payment Information**: Processed securely by third-party providers.
- **Order Details**: Products and delivery information.
- **Website Usage**: IP address, browser type, and cookies.

**How We Use Your Data**

- **Order Fulfillment**: To process and deliver orders.
- **Customer Support**: To respond to inquiries and handle issues.
- **Marketing**: To send promotions (with your consent).
- **Service Improvement**: To analyze and improve our services.
- **Legal Compliance**: To meet legal obligations.

**Legal Basis for Processing**

- **Contractual Necessity**: To fulfill orders.
- **Legitimate Interests**: To improve services.
- **Consent**: For marketing communications.
- **Legal Obligation**: To comply with the law.

**Data Sharing**

- **Service Providers**: For payment processing, delivery, and IT support.
- **Legal Authorities**: If required by law.
- **Business Transfers**: If the business is sold or merged.

**Data Security**

We use SSL encryption and limit access to your data to protect it from unauthorized access.

**Data Retention**

We retain your data only as long as necessary for the purposes it was collected, or as required by law.

**Your Rights**

- **Access**: Request a copy of your data.
- **Rectification**: Correct inaccurate data.
- **Erasure**: Request deletion of your data.
- **Restriction**: Limit how we process your data.
- **Portability**: Request your data in a portable format.
- **Objection**: Object to processing for legitimate interests or marketing.
- **Withdraw Consent**: At any time.

To exercise these rights, contact us at info@costaboxco.com.

**Cookies**

We use cookies to improve your experience. You can manage cookies through your browser settings.

**Changes to This Policy**

We may update this policy. Changes will be posted on our website.

**Contact Us**

For any questions or complaints, contact us at info@costaboxco.com. If you’re unsatisfied with our response, you can contact the Spanish Data Protection Agency (AEPD).

Thank you for trusting Costa Box Co. with your data.