Política de Privacidad

Last updated: 3 July 2026

MAKMARK BUSINESS COMPANY, S.L., the company that manages the STARING brand, informs you of its Privacy Policy regarding the processing and protection of the personal data of users and customers that may be collected through browsing or purchasing services via the site https://www.staring.es. In this regard, the Data Controller guarantees compliance with current data protection regulations, as set out in Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), as well as Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR). Use of the website implies acceptance of this Privacy Policy, as well as the conditions set out in the Legal Notice.

1. Identity of the data controller

  • Data Controller: MAKMARK BUSINESS COMPANY, S.L., the company that manages the STARING brand (hereinafter, “STARING” or the “Data Controller”).
  • Tax ID (CIF): B66609231
  • Registered address: C/ Muntaner 265, 08021 Barcelona, Spain
  • Email: [email protected]
  • Website: https://www.staring.es

The Data Controller is not required to appoint a Data Protection Officer (DPO), as the circumstances set out in Article 37 of the GDPR do not apply.

2. Principles applied to the processing of data

In processing your personal data, the Data Controller will apply the following principles, in line with the requirements of the European data protection Regulation:

  • Lawfulness, fairness and transparency: the Data Controller will always seek your consent to process your personal data, which may be for one or more specific purposes about which you will be informed in advance, with full transparency.
  • Data minimisation: the Data Controller will only request the data strictly necessary for the purpose(s) for which it is requested.
  • Storage limitation: data will be kept for as long as strictly necessary for the purpose(s) of processing, as detailed in section 7.
  • Integrity and confidentiality: your data will be processed in a manner that ensures its security, confidentiality and integrity, taking the necessary precautions to prevent unauthorised access or misuse by third parties.

3. Collection of personal data

You do not need to provide any personal data to browse https://www.staring.es. The cases in which you do provide personal data are as follows:

  • When contacting us through the contact forms or by sending an email.
  • When posting a comment on an article or page.
  • When signing up to a subscription form or newsletter, which the Data Controller manages using Mailchimp.
  • When registering on the website in order to make (or not make) an online purchase.

4. Categories of personal data processed

The categories of personal data processed by the Data Controller are as follows:

  • Identification and contact data: name, surname, email address, telephone number and postal address.
  • Browsing data: IP address, approximate geolocation and information about the use of the website, collected through cookies as detailed in the Cookie Policy.
  • Purchase-related data: order history and, where applicable, the data necessary to process payment, which is handled directly by the relevant payment gateway or financial institution (the Data Controller does not store full payment card details).

The Data Controller does not process special categories of data (Article 9 GDPR), unless the user themselves voluntarily and manifestly makes such data public.

5. Purpose of the processing of personal data

When you connect to the website to send an email to the Data Controller, subscribe to its newsletter, or make a purchase, you are providing personal data for which the Data Controller is responsible. This information may include data such as your IP address, name and surname, physical address, email address, telephone number, and other information. By providing it, you consent to it being collected, used, managed and stored by STARING, only as described in the Legal Notice and this Privacy Policy. The personal data collected and the purpose of its processing differ depending on how the information is captured:

  • Contact forms: the Data Controller requests data such as name and surname, email address, telephone number and your website address, in order to respond to your queries, doubts, complaints, comments or concerns relating to the website, the services provided, the processing of your data, or any other matter not covered by the website's or the purchase terms.
  • Content subscription forms: the Data Controller requests your name and surname, email address, telephone number and website address in order to manage the subscriber list and send newsletters, promotions and special offers. The data you provide will be stored on the servers of The Rocket Science Group LLC d/b/a Mailchimp, based in the USA.

There are other purposes for which the Data Controller processes your personal data:

  • To ensure compliance with the conditions set out in the Legal Notice and applicable law.
  • To support and improve the services offered by this website.
  • To analyse browsing activity, through cookies whose characteristics and purpose are detailed in the Cookie Policy.
  • To manage the Data Controller's presence on social media: if you follow the Data Controller's social media profiles, the processing of your data will be governed by this section as well as by the terms of use and privacy policies of the relevant social network, which you have previously accepted. Under no circumstances will the Data Controller use follower profiles on social media to send individualised advertising.

6. Legal basis for processing

The legal basis for processing your personal data depends on the purpose for which it is collected:

  • Consent of the data subject (Art. 6(1)(a) GDPR): for sending newsletters, marketing communications, and responding to contact forms.
  • Performance of a contract (Art. 6(1)(b) GDPR): for managing your order, payment, delivery and guarantees when you make a purchase on the website.
  • Compliance with a legal obligation (Art. 6(1)(c) GDPR): for compliance with tax, accounting and invoicing obligations.
  • Legitimate interest of the controller (Art. 6(1)(f) GDPR): for improving the website and statistically analysing browsing activity, without prejudice to your right to object at any time.

7. Data retention period

Personal data will be kept for as long as a contractual relationship exists or until the data subject requests its deletion. However, the Data Controller may retain data necessary to comply with applicable legal obligations, in particular:

  • Data relating to invoicing and accounting will be kept for the period required by tax and commercial law (generally, 4 years for tax purposes and 6 years for commercial purposes under Spanish law).
  • Newsletter subscription data will be kept until the user requests to unsubscribe.

Once these periods have elapsed, the data will be deleted or anonymised, unless it must be kept blocked due to potential liabilities arising from its processing, for the applicable statute-of-limitations period.

8. Recipients of personal data and international transfers

  • Mailchimp (The Rocket Science Group LLC d/b/a Mailchimp), based in the USA. More information at https://mailchimp.com. Processes data in order to provide its email marketing services to the Data Controller.
  • Google Analytics, a web analytics service provided by Google LLC, based at 1600 Amphitheatre Parkway, Mountain View, California, CA 94043, USA. More information at https://analytics.google.com. It uses cookies to help the Data Controller analyse how users use the website; the information generated (including your IP address) is transmitted to and stored on Google's servers in the United States.
  • Google Ads / Google Marketing Platform (formerly DoubleClick by Google), a suite of advertising services provided by Google LLC. More information is available in Google's Privacy Policy. It uses cookies to make ads related to your recent searches more relevant.
  • Microsoft Clarity, which uses cookies to help the Data Controller analyse how users use the website.
  • Aplazame: if you choose this payment method, you agree that your personal data will be transferred in full to Aplazame from the moment you begin contracting its deferred payment service. This acceptance extends to any third parties that need to access the relevant files for the proper performance of the contract.

Some of these providers process data in the United States. These international transfers are carried out under an adequacy decision of the European Commission (such as the EU-U.S. Data Privacy Framework), where the provider is certified under it, or by means of standard contractual clauses approved by the European Commission where it is not.

9. Security of personal data

To protect your personal data, the Data Controller takes all reasonable precautions and follows industry best practices to prevent its loss, misuse, unauthorised access, disclosure, alteration or destruction. The website is hosted on clouding.io, which applies the security measures necessary to safeguard your data; you can consult its privacy policy for more information.

10. Content from other websites

Pages on this website may include embedded content (for example, videos, images or articles). Embedded content from other websites behaves in exactly the same way as if you had visited that other website: such sites may collect data about you, use cookies, embed additional third-party tracking code, and monitor your interaction using that code.

11. Cookie policy

For this website to function correctly, it needs to use cookies, which are pieces of information stored in your browser. You can consult all the information regarding their collection, purpose and processing in the Cookie Policy.

12. Web browsing

When browsing https://www.staring.es, certain non-identifying data may be collected, which may include your IP address, approximate geolocation, a record of how you use the services and the site, browsing habits, and other data that cannot be used to identify you. The website uses the following third-party analytics services: Google Analytics, Google Ads/Google Marketing Platform, and Microsoft Clarity. The Data Controller uses the information obtained to produce statistics, analyse trends, administer the site, study browsing patterns, and gather demographic information.

13. Your rights

The Data Controller informs you that, in relation to your personal data, you have the right to:

  • Request access to the data held about you.
  • Request rectification if it is inaccurate.
  • Request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
  • Request restriction of its processing.
  • Object to its processing.
  • Request the portability of your data.
  • Withdraw your consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.

The Data Controller does not carry out any processing based on automated decision-making, including profiling, that produces legal effects on the user or significantly affects them in a similar way.

The exercise of these rights is personal and must be exercised directly by the data subject, by making the request to the Data Controller: any customer, subscriber or contributor who has provided their data may ask the Data Controller for information about the data held and how it was obtained, request its rectification, portability, objection, restriction or erasure. To do so, you must send an email to [email protected] together with valid legal proof of identity, such as a photocopy of your ID card or equivalent document. The exercise of your rights does not include any data that the Data Controller is legally required to retain for administrative, legal or security purposes.

You have the right to effective judicial protection and to lodge a complaint with the supervisory authority — in this case, the Spanish Data Protection Agency (Agencia Española de Protección de Datos) — if you consider that the processing of your personal data infringes the Regulation.

14. Accuracy and truthfulness of personal data

You agree that the data you provide to the Data Controller is correct, complete, accurate and up to date, and you undertake to keep it duly updated. As a user of the website, you are solely responsible for the truthfulness and accuracy of the data you submit, and you release the Data Controller from any liability in this regard.

15. Acceptance and consent

As a user of the website, you declare that you have been informed of the conditions regarding the protection of personal data, and you accept and consent to its processing by the Data Controller in the manner and for the purposes set out in this Privacy Policy.

16. Minors

This website is not directed at minors under the age of 14. The Data Controller does not knowingly collect personal data from minors of that age. If it becomes aware that data has been collected from a minor without the consent of their parents or legal guardians, the Data Controller will delete it as soon as possible.

17. Changes to this Privacy Policy

The Data Controller reserves the right to modify this Privacy Policy in order to adapt it to legislative or case-law developments, as well as industry practices. This policy shall remain in force until amended by another duly published version.