Privacy policy
Last updated: 16 September 2026
This Privacy Policy explains how Boehme Concept collects, uses, stores and shares personal data when someone visits boehme.com.es, makes a purchase, creates an account, subscribes to marketing communications or contacts us. It also explains the rights granted by data protection law.
This policy applies to the services offered through boehme.com.es and should be read together with the Cookie Policy, the Legal Notice and the Terms of Service.
Data controller
The controller of personal data is:
Controller: José Andrés Morales Boehme
Trading name: Boehme Concept
NIF or NIE: Y6678594Y
Business address: Carrer de Francisco Giner, 45, local, 08012 Barcelona, Spain
Email: info@boehme.com.es
Website: https://boehme.com.es
Personal data we collect
The data we process depends on how each person uses our services.
Data you provide directly
-
Identification and contact details: first name, surname, postal address, email address and phone number.
-
Purchase and billing details: products purchased, amount, billing and shipping address, information needed for invoicing and payment status.
-
Account details: information linked to the customer account and its authentication.
-
Communications: information included in enquiries, requests, returns, complaints or messages sent to Boehme Concept.
-
Marketing preferences: newsletter subscription, consent given and communication preferences.
Boehme Concept does not receive or store full details of the cards used for payment. This data is processed directly by the relevant payment providers.
Data collected automatically
When someone uses the website, we may collect technical and usage information through cookies and similar technologies. This may include IP address, device and browser type, operating system, pages visited, interactions with the site, date and time of access, and approximate location derived from the IP address.
Non-essential cookies will only be used after obtaining the relevant consent. Detailed information is available in the Cookie Policy, and your choice can be changed through the Cookie preferences link on the website.
Data received from third parties
We may receive data from providers involved in delivering the service, such as Shopify, payment providers, shipping companies, marketing services, advertising platforms and measurement tools. The information received is limited to what is necessary to manage purchases, payments, shipments, communications, security and authorised analytics.
Purposes and legal bases
We only process personal data when there is a valid legal basis. The main purposes are as follows:
Purpose |
Use of the data |
Legal basis |
Orders |
Process payments, prepare orders, manage deliveries, exchanges, returns and related communications. |
Performance of the contract |
Accounts |
Create, maintain and manage the customer account and provide access to its features. |
Performance of the contract |
Customer service |
Respond to enquiries, requests, issues and complaints. |
Performance of the contract or legitimate interest |
Legal obligations |
Comply with tax, accounting and consumer obligations and requests from authorities. |
Legal obligation |
Security |
Prevent, detect and investigate fraud, abuse and unauthorised access. |
Legitimate interest and legal obligation |
Newsletter |
Send news, products, events, promotions and offers you have requested. |
Consent |
Existing customers |
Send communications about our own products or services similar to those purchased, with an unsubscribe option in every message. |
Legitimate interest and article 21.2 of the LSSI (Spanish e-commerce law) |
Analytics and advertising |
Measure site usage, attribute conversions and personalise advertising through pixels and similar technologies. |
Consent; legitimate interest for limited technical signals where applicable |
Improvement |
Analyse aggregated information to improve products, services and how the site works. |
Legitimate interest or consent, depending on the technology used |
Where processing is based on consent, it can be withdrawn at any time without affecting the lawfulness of processing carried out beforehand.
Marketing communications
We will send promotional emails when the person has subscribed or given consent. Subscribing may include a confirmation email. Every communication will include a simple, free way to unsubscribe.
Where there is a previous contractual relationship, we may inform you about our own products or services similar to those purchased, as permitted by Spanish law. You may object at any time.
Cookies and similar technologies
The site uses technical cookies necessary for it to work and may use analytics, personalisation or advertising cookies. Non-essential cookies will not be set until the person accepts them through the settings panel.
The panel allows you to accept, reject or configure cookies with clearly presented options. The Cookie Policy identifies the cookies used, their owner, purpose and duration, and how to withdraw consent.
Advertising measurement and consent mode
The site uses advanced consent mode to tell advertising platforms the choice made in the banner. Before the person accepts, advertising tags remain with storage denied and may send limited cookieless technical signals for aggregated measurement and conversion modelling. Full measurement and personalisation data is only sent after obtaining the relevant consent.
To keep campaign attribution when storage is denied, certain technical click, customer or session identifiers may be passed between pages using URL parameters. These signals are used to measure campaign performance and do not in themselves authorise advertising cookies to be set.
Recipients and providers
We may disclose personal data, or allow access to it, to providers acting on behalf of Boehme Concept or who need to process it to provide their own services. These may include:
-
E-commerce platform: Shopify, including Shop, Shopify POS, Shopify Collective, Shopify Forms, Shopify Messaging and Shopify Network Intelligence.
-
Payments and financing: Shopify Payments, Klarna and the financial institutions linked to the chosen payment method.
-
Shipping and delivery: DHL and other carriers selected to complete the order.
-
Marketing and newsletter: Mailchimp, when the person has asked to receive communications.
-
Analytics and advertising: Google and YouTube, Meta Platforms through Facebook and Instagram, Mailchimp and Simprosys through web and server pixels and other measurement technologies.
-
Sales and communication channels: Faire and WhatsApp, when used to handle enquiries, business relationships or orders.
-
Administration: Holded and tax or accounting advisers, when necessary for invoicing, accounting and legal obligations.
-
Professional services: IT support, legal advice and fraud prevention services, when necessary.
Shopify Network Intelligence is enabled. Under this framework, Shopify may use customer data together with other data from its network to improve the store's services, personalisation and advertising targeting, respecting the consent choices communicated through Shopify's privacy tools.
We may also disclose data when there is a legal obligation, a valid request from an authority, or a need to bring, exercise or defend claims. We do not sell personal data.
International transfers
Some providers may process data outside the European Economic Area. When an international transfer takes place, an adequacy decision, standard contractual clauses approved by the European Commission or another valid safeguard under the General Data Protection Regulation will be used.
You can request more information about the applicable safeguards by writing to info@boehme.com.es.
Data retention
We will keep data only for as long as necessary for each purpose and, afterwards, for the periods required to meet legal obligations or deal with possible liabilities.
-
Orders, invoicing and payments: during the contractual relationship and the applicable tax, accounting and commercial periods.
-
Customer account: while it remains active and, afterwards, for the period needed to deal with liabilities.
-
Enquiries and customer service: for the time needed to respond to and manage the request, and afterwards for the applicable liability periods.
-
Marketing communications: until the person withdraws consent or objects to receiving them.
-
Cookie preferences: for the periods stated in the Cookie Policy.