UrbaMapa

Last updated: March 2026

Who is responsible for processing your data?
The data controller is the owner of the UrbaMapa shop (hereinafter "we" or "us"), based in Spain. You can contact us at any time through Etsy's messaging system.

What data do we collect and where does it come from?
When you make a purchase in our Etsy shop, we have access to the information Etsy shares with us as sellers in order to fulfil your order. This may include your name, email address, country of residence and the transaction history associated with your order.
We do not collect payment data. All banking and card information is handled exclusively by Etsy and its payment processors, to which we have no access.
If you contact us through Etsy messages, we retain that conversation in order to follow up on your enquiry.

Why do we use your data and what is the legal basis?
Managing and delivering your order - Performance of a contract (Art. 6.1.b GDPR)
Responding to enquiries or issues - Legitimate interest (Art. 6.1.f GDPR)
Complying with tax and accounting obligations - Legal obligation (Art. 6.1.c GDPR)
We do not use your data to build commercial profiles, we do not share it with third parties for marketing purposes, and we do not make automated decisions that affect you.

How long do we keep your data?
Data associated with a transaction is retained for as long as necessary to comply with the legal and tax obligations applicable in Spain, which is generally 5 years from the date of the transaction. Messaging conversations are retained for as long as the Etsy account remains active, or for whatever period Etsy determines under its own policies.

Etsy's role as a platform
Etsy acts as an intermediary platform and has its own obligations as a data controller or processor. We recommend reviewing Etsy's Privacy Policy to understand how they handle your data independently from us.

Your rights
As a resident of the European Union, you have the right to:

Access: request a copy of the data we hold about you.
Rectification: ask us to correct inaccurate or incomplete data.
Erasure: request that we delete your data when it is no longer necessary.
Restriction: ask us to restrict processing under certain circumstances.
Portability: receive your data in a structured, commonly used format.
Objection: object to processing based on legitimate interest.

To exercise any of these rights, contact us through Etsy messages. We will respond within a maximum of 30 days.

Changes to this policy

We may update this policy from time to time. Any significant changes will be communicated through the Etsy shop. The date of the last update will always be visible at the top of this document.