Privacy Policy

1. Controller

The controller for this website is Auerswald Marketing S.L., Ctra. del Cap de la Nau Pla, 126-1-18, 03730 Xàbia, Spain, VAT number ESB09946799. Email: business(at)burstlikes.com (replace “(at)” with “@”). Please note that we do not offer customer support at the postal address. See also our imprint.

2. Data we process and why

Visiting the website

When you open a page, our web server records technical data: IP address, date and time, requested page, browser and device information. We use this to deliver the site, keep it secure and find errors. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a working and secure website).

Cart and order

To process an order we use: the product, quantity and price you choose, the link or username you enter, your email address, your IP address and the country derived from it, the order number and the status of the order. While you are in the checkout, your selection is saved in a cart that is linked to your IP address. Name, billing address and, where applicable, company and tax details are collected by our payment provider during payment and passed to us for the invoice and for accounting. Legal basis: Art. 6(1)(b) GDPR (performance of the contract) and Art. 6(1)(c) GDPR (legal obligations such as accounting and tax law).

Contact

If you write to us through the contact form or by email, we process your name, email address, the order number if you give one and your message to answer you. Legal basis: Art. 6(1)(b) or (f) GDPR.

Fraud prevention and security

We use IP address and order data to detect misuse such as repeated fraudulent payments or chargebacks. Legal basis: Art. 6(1)(f) GDPR.

3. Who receives data

• Payment: Payments are processed on our secure payment page by an external payment provider (currently Revolut). The provider receives the data needed for payment and acts as an independent controller for its own purposes, such as fraud checks. See its privacy notice.
• Delivery: To deliver your order, the public link or username and the quantity are passed to the technical partner that carries out the order. We do not pass on your email address or payment data for this.
• Hosting and email: Our hosting provider and email service process data on our behalf under data processing agreements.
• Authorities and advisers: Where required by law, for example for tax audits, and to our tax advisers.

Where a recipient is located outside the European Economic Area, the transfer is based on an adequacy decision or on standard contractual clauses.

4. Cookies and similar technologies

We use cookies and storage that are necessary for the site to work, for example the session and security cookie that protects forms, and the storage of your language and of your cookie choice. These do not need consent. Your choice in the cookie banner is stored in your browser (local storage). You can delete this data at any time in your browser.

5. Content from other servers

To display icons and flags our pages load files from the content delivery networks jsDelivr (cdn.jsdelivr.net), cdnjs by Cloudflare (cdnjs.cloudflare.com) and flagcdn.com. When these files are loaded, your IP address is transmitted to the provider. Legal basis: Art. 6(1)(f) GDPR (efficient and attractive presentation of the site). Fonts are hosted on our own servers.

6. Messaging link

The site shows a link to start a chat with us on WhatsApp. Nothing is transmitted to WhatsApp until you click it. After a click, WhatsApp’s own privacy rules apply.

7. How long we keep data

Order and invoice data is kept for as long as commercial and tax law require. Contact messages are deleted once your request has been dealt with, unless legal retention duties apply. Server logs are deleted after a short period. Carts that are not completed are deleted regularly.

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests. Where processing is based on consent, you can withdraw it at any time with effect for the future. Write to [email protected]. You also have the right to lodge a complaint with a supervisory authority, in Spain the Agencia Española de Protección de Datos (aepd.es), or with the authority of your place of residence.

9. Changes

We update this notice when our services or the law change. The current version is always available on this page.