Last updated: June 2026.

1. Data controller

Controller: Monasterio del Sancti Spíritus el Real – MM. Dominicas
Tax ID (NIF): R4900016I
Registered address: C/ Canto, 27 – 49800 Toro (Zamora), Spain
Email: info@dominicastoro.es
Telephone: 980 690 304

2. What data do we process and for what purpose?

We process the personal data you provide for the following purposes:

Order management and sale of products: to process, prepare and dispatch your orders, manage payment and invoicing and provide after-sales service (first name, surname, address, tax ID for invoicing purposes, email, telephone and order details).
Handling enquiries: to reply to requests you make through the contact form or by email (name, email, telephone and content of the message).
Commercial communications: where applicable, and only if you have consented, to send you information about our products and news.
Browsing analysis: to compile usage statistics and improve the website by means of cookies and analytics tools, in accordance with the Cookie Policy.

3. Legal basis for processing

Performance of the contract of sale, for order management.
The consent of the user, for sending commercial communications and for the installation of non-essential cookies.
Legitimate interest, to deal with your enquiries and ensure the security of the website.
Compliance with legal obligations (tax and accounting).

4. Data retention

We keep the data for as long as necessary for the purpose for which it was collected and, thereafter, for the periods required by law (for example, those laid down in tax and commercial legislation). Data processed on the basis of consent will be kept until you withdraw it.

5. Recipients of the data

We do not transfer your data to third parties, except where legally required. It may be accessed by the providers that supply services to us (for example, the transport company that delivers your order, the web hosting provider Webempresa and providers of analytics tools, such as Google), acting as data processors with the safeguards required by law.

6. International transfers

Some providers (such as Google) may process data outside the European Economic Area. In such cases, those transfers are covered by the appropriate safeguards provided for in the GDPR, such as the standard contractual clauses approved by the European Commission.

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to info@dominicastoro.es or by post to the address given in section 1, providing proof of your identity. If you consider that the processing does not comply with the applicable rules, you may lodge a complaint with the Spanish Data Protection Agency (https://www.aepd.es).

8. Security

We apply appropriate technical and organisational measures to ensure the security of personal data and to prevent its alteration, loss, unauthorised processing or access.

9. Cookies

This site uses its own and third-party cookies. You can see the details and manage your preferences in our Cookie Policy.

10. Minors

The services of this website are aimed at adults. We do not knowingly collect data from minors without the consent of their legal representatives.

11. Changes to this policy

We may update this Privacy Policy to adapt it to legislative developments or to changes in our processing activities. We recommend that you review it periodically.