Privacy policy
PRIVACY POLICY
1. DATA CONTROLLER
The controller responsible for processing personal data collected through this website is:
MEGPUBLI CAPITAL, S.L. (Single-Member Company)
Tax ID (NIF): B23996507
Registered office: Calle Uruguay, No. 5, 4th Floor, Door 1, 28822 Coslada, Madrid, Spain
Email: megpublicompany@gmail.com
Telephone: +34 601 453 751
Website: megpubli.com
MEGPUBLI CAPITAL, S.L. processes personal data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), and all other applicable legislation.
2. PERSONAL DATA WE MAY PROCESS
Depending on the user’s relationship with MEGPUBLI CAPITAL, S.L., we may process the following categories of personal data:
Identification data, such as first name and surname.
Contact information, such as postal address, email address and telephone number.
Billing and tax information, including NIF, VAT number or other information necessary to issue invoices.
Information relating to orders, purchases, returns, warranties and customer service.
Payment and transaction information, without prejudice to the fact that certain banking or card information may be processed directly by payment service providers.
Professional or business information where the customer acts as a company, professional, distributor or retailer.
Technical and browsing information, such as IP address, device type, browser, identifiers and information obtained through cookies or similar technologies, where applicable.
Information voluntarily provided by the user when contacting us.
We do not request special categories of personal data unless strictly necessary and supported by an appropriate lawful basis.
3. PURPOSES OF PROCESSING AND LAWFUL BASES
ORDER MANAGEMENT AND CONTRACTUAL RELATIONSHIP
We process the data necessary to manage orders, purchases, payments, invoicing, product delivery, returns, warranties, incidents and after-sales service.
Lawful basis: performance of a contract or implementation of pre-contractual measures requested by the data subject.
HANDLING ENQUIRIES
We process information provided when the user contacts us by email, telephone, forms or other available means.
Lawful basis: implementation of pre-contractual measures, performance of the contractual relationship and, where appropriate, our legitimate interest in properly managing communications received.
COMPLIANCE WITH LEGAL OBLIGATIONS
We may process and retain certain information in order to comply with tax, accounting, commercial, consumer protection, fraud prevention and other legal obligations.
Lawful basis: compliance with legal obligations applicable to MEGPUBLI CAPITAL, S.L.
MARKETING COMMUNICATIONS
Where the user has given consent, we may send marketing communications relating to our products, news, promotions or services.
Where a previous contractual relationship exists, marketing communications concerning our own similar products or services may be sent where permitted by applicable law.
Users may unsubscribe at any time using the mechanism included in the communication or by writing to:
megpublicompany@gmail.com
Lawful basis: consent of the data subject or, where legally applicable, legitimate interest arising from a prior contractual relationship.
SECURITY AND FRAUD PREVENTION
We may process certain information in order to protect the website, prevent fraudulent transactions, abusive use, unauthorised access and ensure the security of our systems and transactions.
Lawful basis: the legitimate interest of MEGPUBLI CAPITAL, S.L. in protecting its business, customers, systems and transactions.
COOKIES AND SIMILAR TECHNOLOGIES
Where cookies or similar technologies are not strictly necessary for the operation of the store, they will be used in accordance with the user’s preferences and consent.
Users may manage their preferences through the cookie settings system available on the website.
4. DATA REQUIRED TO MAKE A PURCHASE
Information identified as mandatory during the purchase process is necessary to process the order correctly.
If the customer does not provide this information, it may not be possible to complete the purchase, issue the relevant invoice, deliver the order or provide certain services associated with the purchase.
The user guarantees that the information provided is accurate, complete and up to date.
5. RECIPIENTS OF PERSONAL DATA
MEGPUBLI CAPITAL, S.L. does not sell its customers’ personal data.
Personal data may be disclosed or made available to third parties only where necessary to provide contracted services, manage our business or comply with legal obligations.
Such recipients may include:
Transport, courier and logistics companies.
Banks and payment service providers.
Technology and hosting providers.
E-commerce platform providers.
Billing, accounting, advisory, management or other professional service providers.
Marketing, communications or analytics providers where an appropriate lawful basis exists.
Public authorities, courts, tribunals and other authorities where legally required.
Such third parties will receive only the information necessary to perform their respective functions.
6. SHOPIFY
The megpubli.com online store uses Shopify technology to provide the infrastructure necessary to operate the e-commerce platform.
As a result, certain personal data may be processed by Shopify and its service providers in order to provide the technological services necessary for store management, orders, security, infrastructure and related functionality.
Shopify applies its own terms, privacy policies and data protection mechanisms in accordance with applicable legislation.
MEGPUBLI CAPITAL, S.L. will take the necessary measures to ensure that data processing carried out through its service providers is subject to the safeguards required by law.
7. INTERNATIONAL DATA TRANSFERS
Some technology providers used to manage the store or provide certain services may be located outside the European Economic Area or use infrastructure located in third countries.
Where international transfers of personal data occur, the safeguards provided for under data protection legislation will be applied, including European Commission adequacy decisions, Standard Contractual Clauses or other legally recognised mechanisms.
8. DATA RETENTION
Personal data will be retained for as long as necessary to fulfil the purpose for which it was collected.
Information relating to purchases, invoicing and contractual relationships may be retained for the periods required under tax, commercial, accounting, consumer protection and other applicable legislation.
Data used for marketing communications will be retained until the data subject withdraws consent or requests to stop receiving such communications.
Once the relevant periods have expired, data will be deleted or, where legally necessary, appropriately restricted for the period during which liability may arise.
9. DATA SUBJECT RIGHTS
Users may exercise, where applicable, the following data protection rights:
Access: to know what personal data we process.
Rectification: to request correction of inaccurate or incomplete data.
Erasure: to request deletion of personal data where applicable.
Objection: to object to certain types of processing.
Restriction: to request restriction of processing in the circumstances provided by law.
Data portability: to receive personal data in a structured format and transmit it to another controller where applicable.
Withdrawal of consent: to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise these rights, users may send a request to:
megpublicompany@gmail.com
or in writing to:
MEGPUBLI CAPITAL, S.L.
Calle Uruguay, No. 5, 4th Floor, Door 1
28822 Coslada, Madrid
Spain
The request must contain sufficient information to identify the data subject and determine the right they wish to exercise.
Where necessary to verify the identity of the applicant, additional appropriate and proportionate information may be requested.
10. COMPLAINTS TO THE SUPERVISORY AUTHORITY
If the data subject considers that the processing of their personal data infringes applicable legislation, they have the right to lodge a complaint with the competent data protection authority.
In Spain, the supervisory authority is:
Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD)
Lodging a complaint with the AEPD does not prevent the data subject from first contacting MEGPUBLI CAPITAL, S.L. in an attempt to resolve any matter relating to the processing of their data.
11. INFORMATION SECURITY
MEGPUBLI CAPITAL, S.L. implements reasonable technical and organisational measures designed to protect personal data against loss, alteration, unauthorised access, disclosure or unlawful processing.
However, no system connected to the Internet can guarantee absolute security.
12. DATA PROVIDED ABOUT THIRD PARTIES
Where a user provides personal data relating to another person, for example to arrange delivery or designate a contact person, the user must ensure that they are authorised to provide such data.
The information will be used exclusively for the purpose associated with its communication.
13. MINORS
The purchasing services offered through the website are intended for persons with sufficient legal capacity to enter into contracts.
MEGPUBLI CAPITAL, S.L. does not knowingly seek to collect personal data from minors who are not legally authorised to use the corresponding services.
If it is discovered that personal data relating to a minor has been provided contrary to applicable legislation, appropriate measures will be taken to delete it.
14. CHANGES TO THE PRIVACY POLICY
MEGPUBLI CAPITAL, S.L. may amend this Privacy Policy where necessary to reflect legal, technical, commercial or service-related changes.
The version in force will be the version published on megpubli.com at any given time.
Where changes are significant, reasonable means may be used to inform affected users.
Last updated: August 2026.