Private policy

Bass Lab Hub respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and the Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).

1. Data Controller

2. Personal Data We Collect

When you visit https://basslabhub.com/, register an account, place an order or interact with us, we may collect the following categories of personal data:

• Identification and Contact Data: full name, email address, telephone number, postal address
• Account and Order Information: username, order history, purchased products, payment details and delivery preferences
• Technical and Usage Data: IP address, browser type and version, device information, operating system, cookies and browsing behaviour
• Marketing and Communication Data: your preferences and consent for receiving promotional communications

3. Purposes and Legal Basis for Processing

Purpose	Legal Basis (GDPR)
Managing your user account and registration	Performance of a contract (Art. 6.1(b) GDPR)
Processing and fulfilling your orders, payments and deliveries	Performance of a contract + Legal obligation (Art. 6.1(b) & (c) GDPR)
Providing customer service, support and handling warranty/returns	Performance of a contract + Legitimate interest (Art. 6.1(b) & (f) GDPR)
Sending newsletters, special offers and marketing communications about car audio products	Consent (Art. 6.1(a) GDPR) or Legitimate interest where permitted by law
Improving our website, analysing usage and preventing fraud	Legitimate interest (Art. 6.1(f) GDPR)
Complying with legal, tax and accounting obligations	Legal obligation (Art. 6.1(c) GDPR)

4. Sharing Your Personal Data

We may disclose your personal data to the following recipients:

• Payment service providers and financial institutions
• Courier and shipping companies (SEUR, MRW, DHL, Correos and others)
• IT service providers, hosting providers and email marketing platforms (as data processors)
• Competent public authorities when required by applicable law

We do not sell your personal data to any third parties.

5. International Data Transfers

Some of our service providers are located outside the European Economic Area. In these cases we ensure that appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses.

6. Data Retention Period

We will retain your personal data only for as long as necessary to achieve the purposes for which it was collected or as required by Spanish and EU law (typically up to 6 years for contractual, fiscal and accounting purposes).

7. Your Rights

Under the GDPR and LOPDGDD you have the following rights:

• Right of access to your personal data
• Right to rectification or erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos – AEPD) at www.aepd.es

To exercise any of these rights, please contact us at danevrado@gmail.com.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies. For detailed information, please refer to our Cookie Policy.

9. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy at any time. The updated version will be published on this page with a new “Last updated” date.