Privacy Policy

Identification and contact details of the person in charge of the treatment

MAHUPA 1941, SL, a company domiciled at Calle Cáceres, 2, 28223 Pozuelo de Alarcón (Madrid), with CIF B88452693 (hereinafter MAHUPA), is responsible for the processing of personal data processed through this website (the Web"). This means that we have regulated and we take charge of treating and protecting the personal data of consumers.

Likewise, this Privacy Policy is intended to provide information on the rights of the Web user under Regulation (EU) 2016/679, of April 27, 2016 (RGPD) and Organic Law 3/2018, of December 5, Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

If you have any questions regarding the processing of your personal data, contact the Company at the following address:

Purpose with which we process personal data

Depending on the products, services or functionalities that you want to enjoy at all times, we will need to process some data or others, which in general will be: (i) identifying data; (ii) economic and transactional information; (iii) connection, geolocation and navigation data; (iv) commercial information; (v) data about your tastes and preferences.

The personal data requested is mandatory, so that the refusal to supply them will make it impossible to carry out the provision of the contracted services.

In certain cases, a third party may have provided us with information about you when using a functionality or service on the Website, for example if they send an order to your address. In such cases, we will only process your data in relation to that functionality or service, in accordance with the provisions of this Privacy Policy.

For what purpose and for how long will we process your personal data?

Depending on how you interact on our Platform, we will process your personal data for the following purposes:

To manage your registration as a user of the Platform: to identify you as a user of the same and give you access to its different functionalities, products and services that are available to you as a registered user. We will process your data for as long as you are a registered user.

For the development, fulfillment and execution of the contract of sale or services: including contacting you, managing the payment of the products you buy, activating mechanisms to prevent and detect improper use of the Platform, managing the request for invoices, their collection and / or their issuance and remittance by electronic means whenever the request It is carried out by the interested party or person delegated by him, in which case he must have the corresponding authorization, and the owner of the data may revoke said consent at any time. We will process your data for the time necessary to manage the purchase of products or services that you have purchased, as well as for subsequent purchases until such time as you decide.

To send (via email, post, WhatsApp and / or SMS) electronic communications with offers, promotions and news related to our online platform, Unless indicated otherwise or the user objects.

To send commercial and / or promotional information, as well as assessment surveys or degrees of satisfaction related to the sector of products and services contracted through the Platform, unless otherwise indicated or the user objects.

To prepare a commercial profile of the user and carry out commercial actions adjusted to it, using your data derived from the management of products purchased, unless otherwise indicated or the user opposes or revokes their consent.

To attend the requests or requests that are made through the Customer Service channels: treating the personal data that are necessary to manage or resolve your request.

For marketing purposes: personalizing the services we offer you, including sending personalized information about our services and products, showing you advertising on the internet that you can see when you browse websites, enriching data, carrying out promotional actions and posting photographs on the Platform or images that you have shared publicly, as long as you give us consent to do so. We will show you advertising until you configure your mobile device or browser to revoke your consent.

To comply with the legally established obligations, as well as verifying compliance with contractual obligations, including fraud prevention.

Analysis of usability and quality to improve our services: we will treat your browsing data for analytical and statistical purposes to understand the way in which users interact with our Platform, we will carry out quality surveys aimed at knowing the degree of satisfaction of our customers. We will treat your data promptly during the time in which we proceed to carry out the action or survey.

How long do we keep your data?

We will keep the personal data of the users only for the time necessary to carry out the purposes for which they were collected, as long as it does not revoke the consents granted. Subsequently, if necessary, it will keep the information blocked for the legally established periods, in any case, the period of 5 years, or the period established by law for any action that may result from the treatment.

What security measures do we implement to take care of your data?

To protect the different types of data reflected in this privacy policy, this part will carry out the necessary technical security measures to prevent their loss, manipulation, dissemination or alteration, or other measures that prevent access to user data by part from third parties.

Legitimation for handling your data

The legal basis that allows us to process your personal data depends on the purpose for which we process them:

Manage your registration as a user of the Platform: the processing of your data is necessary for the execution of the terms that regulate the use of the Platform.

Development, fulfillment and execution of the contract of sale or services: it is necessary for the execution of the contract of sale or provision of services, being it possible that some data is only activated because you request or authorize it, such as payment data, in which the basis on which we treat your data is your own consent .

Customer service: we have a legitimate interest to attend to the requests or queries that you make to us through the different means of contact that exist in order to be able to serve you properly and resolve the queries raised.

The treatment is necessary for the execution of the sales contract when the query is related to any incident of the order.
When the query is related to the exercise of the rights about which we inform you below, it entitles us to process your data in compliance with legal obligations on our part.

Marketing: the legal basis for sending commercial communications of the company by any means, even after the relationship between both parties is terminated, will be the legitimate interest of MAHUPA, without prejudice to the User's right of opposition, as well as their consent, in the event that we do so. Have given.

To offer you personalized services or show you personalized information, as well as to carry out data enrichment, we consider that we have a legitimate interest in profiling the information we have about you because it allows you to improve your user experience.

Usability and quality analysis: we have a legitimate interest to analyze the usability of the Platform and the degree of user satisfaction in order to improve the user experience and offer a higher quality service.

Likewise, we consider that we have a legitimate interest to carry out the necessary checks to detect or prevent fraud or fraudulent use of the Platform to protect you against fraud attempts made by third parties.

Recipients (assignments and transfers of data)

We inform you that we do not sell, transfer, or lease in any way information or personal data of our Clients / Users to third parties, except legal obligation or because they are in charge of treatment (which have committed to compliance with the regulatory provisions, applicable in data protection matter).

On the other hand, those in charge of the treatment of the Company, who are dedicated to the information, technology and call center sectors, may have access to your personal data, as well as:

  • Financial entities;
  • Fraud detection and prevention entities;
  • Technology and analytics service providers;
  • Suppliers and collaborators of logistics, transport and delivery services.

Exercise of your rights

We inform you that you can exercise your rights of access, rectification, deletion, opposition and other rights in accordance with the provisions of the Personal Data Protection Regulations, by sending an email to, indicating in the subject "LOPD" accompanied by a copy of your identity document, passport and another valid document that identifies you. You can also make use of the models and forms that for the exercise of these rights put at your disposal the portal of the Spanish Agency for Data Protection, being able to file a claim with it.

Your rights are as follows:

  • Right of access to your personal data to know which are being treated and the treatment operations carried out with them;
  • Right to rectify any inaccurate personal data;
  • Right to delete your personal data, when this is possible;
  • Right to request the limitation of the processing of your personal data while the challenge to the accuracy of the data is being verified; when the treatment is lawful but you oppose the deletion of your data; if the person in charge does not need to process their data but the user needs them for the exercise or defense of claims or when they have opposed the processing of their data for the fulfillment of the legitimate interest by the person in charge, while verifying if the legitimate reasons for the treatment prevail over yours; in which case we will only keep them for the exercise or defense of claims.
  • Right to object to the processing of your personal data. Our company will stop processing the data, except for compelling legitimate reasons, or the exercise for the defense of possible imperative claims or for the formulation, exercise or defense of claims.
  • Right to the portability of your personal data, when the legal basis that enables us to process it is consent.
  • Right to revoke the consent of one or all of the purposes at any time, without affecting the legality of the treatment based on the consent prior to its withdrawal.

Confidentiality and security of your data

MAHUPA has adopted the necessary measures to avoid the alteration, loss, treatment or unauthorized access of personal data, taking into account at all times the state of technology, however, the User must be aware that Internet security measures they are not impregnable.

The data obtained through the website and / or any other means will be treated by the Responsible with absolute confidentiality, committing to keep them secret.

That, in accordance with the provisions of current regulations on Personal Data Protection, the Responsible Party is complying with all the provisions of the GDPR and LOPDGDD regulations for the treatment of personal data under its responsibility, and manifestly with the principles described in the Article 5 of the GDPR and Title II of the LOPDGDD, by which they are treated in a lawful, loyal and transparent manner in relation to the interested party and adequate, pertinent and limited to what is necessary in relation to the purposes for which they are treated.

The Responsible Party guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of Users and has communicated the appropriate information so that they can exercise them.

The legislation on data protection may be modified, so we strongly recommend that you regularly consult our Data Protection Policy.

We inform that the MAHUPA website does not support encryption and we inform that the information sent over the internet without encryption can be seen by other people, by sending our forms you accept the sending of information without encryption.

Veracity of the data and updating them

The User guarantees that the Personal Data provided to MAHUPA are true and is responsible for communicating any changes in them. The user will be solely responsible for any loss or damage, direct or indirect, that may be caused to MAHUPA or to any third party due to the completion of the forms with false, inaccurate, incomplete or outdated information. The User must not include personal data of third parties without their prior informed consent of the provisions of this data protection policy, being solely responsible for their inclusion. All the data requested through the website are mandatory, as they are necessary for the provision of an optimal service. In the event that not all the data is provided, it is not guaranteed that the information and services provided will be completely tailored to your needs.


Minors under 18 years of age may not use the services available through the Web. In this sense, and to the extent that MAHUPA does not have the ability to control whether or not the interested parties are minors, it is advised that parents and guardians must enable the necessary mechanisms to prevent minors from accessing the Web. and / or provide personal data without their supervision, not admitting MAHUPA any responsibility in this regard.

Social Media

MAHUPA will use social networks as a means of communication and promotion of its services. In no case will we use the data for non-permitted purposes. This company is not responsible for the content, comments, opinions or information, its own or that of third parties, that users publish in our accounts created on Facebook, Instagram etc. You can use our content for lawful purposes, as long as you mention its origin or author. The purpose of the data collected will be the database of users and contacts of the company's social network accounts. Keep in mind that the use of social networks is subject to the privacy policies of each of them.

Privacy policy update

MAHUPA reserves the right to modify its data protection policy according to its criteria, or due to a change in legislation, jurisprudence or business practice. If MAHUPA introduces any modification, the new text will be published on this same website, where the User may be aware of MAHUPA's current data protection policy. In any case, the relationship with users will be governed by the rules provided at the precise moment the website is accessed.