In compliance with the provisions of the General Data Protection Regulation (GDPR) (EU) 2016/679 of May 25, 2016, Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, Law 34/2002, of July 11, on Information Society Services and Electronic Commerce, and its implementing regulations, Users are informed of the following aspects regarding the processing of their personal data:

The personal data provided by the User when using the website www.gospelestudios.es (hereinafter, the "Website" or the "Platform") will be processed by Gospel Collective S.L., identified with B-10590115, with registered office at Carrer de Zamora 46-48, 6º-1ª, 08005, Barcelona, Spain, and email info@gospelestudios.es, operating under the trade name "Gospel Estudios" (hereinafter, "Gospel Estudios"), as the owner of the Website and data controller. Gospel Estudios is also responsible for and owns the secondary domain www.gospelestudios.com, which is redirected to the main Website: www.gospelestudios.es.

Users’ personal data are collected when using the website in the following cases:

• Registration as a User of the Website by creating a personal user profile.
• Purchase of products offered on the Website.
• Registration as a subscriber to communications sent by Gospel Estudios through an electronic communications management platform, such as MailChimp.
• Submission of inquiries and communications through the form available on the website, or any other communication via email or contact phone number indicated on the website.

Through the described procedures and forms, the User expressly consents to the processing of such personal data by Gospel Estudios, as the data controller, for the purposes detailed both in this "Privacy Policy" and in the "Terms and Conditions" sections that apply to the case, depending on the specific use and services requested/contracted by the User.

Data collected through browser cookies are used in accordance with current regulations, as explained in the "Cookies Policy" section, for statistical and web performance analysis purposes.

The collection and processing of personal data by Gospel Estudios aim to:

• Fulfill contractual obligations arising from the sales processes carried out by Users, which involve creating a user profile on the platform, managing payments, and issuing invoices.
• Respond to inquiries submitted by Users through the forms available on the website, various instant messaging platforms, or the contact email and phone number indicated on the Website.
• Address requests, inquiries, and complaints submitted by Users through the customer service and after-sales service email info@gospelestudios.es.
• Send communications to Users and the possibility of sending commercial information and/or newsletters about new publications, content, and services that may be of interest to Users.

Gospel Estudios will retain these personal data as long as the user does not express their interest in deleting them or as long as there is a legal obligation to preserve them. However, Gospel Estudios may review the User's data if a continuous period of inactivity is detected and will seek the User's prior consent to delete them.

The data request will be limited to those strictly necessary for the proper provision of the requested and/or contracted uses and products, as well as those whose requirement and custody are mandated by current regulations to comply with verification and identity check procedures or the ownership of assets and goods. Under no circumstances do they correspond to sensitive or specially protected personal data.

The personal data requested from the User are:

• Full name (first name and last names)
• DNI / Identification document
• Date of birth
• Address
• Email
• Contact phone number

The User is responsible for providing real, truthful, and accurate data of which they are the owner. Gospel Estudios is exonerated from all responsibility for damages that may be caused to the User or third parties by the provision of erroneous, false, simulated, or manipulated data and information, including altering the real age to simulate having the minimum age and capacity to contract.

The processing of personal data by Gospel Estudios is based on the consent expressly provided by the data subject when subscribing to the communications system, requesting information, and/or creating a user profile on the Website, even if they do not necessarily result in the conclusion of a contract. Additionally, the processing of data is based on the execution of sales contracts that Users can carry out through the Website, whose fulfillment, as a contracting party, requires Users to give their express consent beforehand by providing their data.

Gospel Estudios is the primary recipient of the personal data provided by Users and will not transfer them to third parties except in cases where it is strictly necessary to fulfill contractual obligations assumed with the User or when there is a legal obligation to do so.

Users are informed that the Website is an e-commerce built with Shopify (https://www.shopify.com), maintaining its web operating architectures. For this reason, Users' personal data are shared with this platform solely to ensure that the e-commerce functionalities operate correctly (creating a personal User profile, adding products to the shopping cart, "checkout" process, secure payment gateway, order history consultation). For more information on the product acquisition process, see the "Terms and Conditions" section on this same Website.

For communications and the management of payments and shipments, Gospel Estudios uses platforms and services provided by third parties with which it is necessary to share Users' personal data to complete transactions through the Website and adequately fulfill contractual obligations arising from the sales operations carried out by the User.

Therefore, Gospel Estudios shares Users' personal data with logistics companies responsible for transporting and delivering orders, as well as with third-party virtual payment service providers integrated into the Website, such as credit or debit card payment gateways, PayPal, Wechat Pay, UnionPay and ApplePay.

Gospel Estudios also shares data with digital communication management platforms (MailChimp) and instant messaging services (WhatsApp, Discord, Telegram) through professional business profile accounts. These third-party communication service providers adhere to security protocols that ensure the encryption of communications between sender and receiver without storing message copies, to prevent unauthorized access to the contents and guarantee the complete safeguard of the exchanged data.

All services and platforms with third-party providers, including those located outside the European Union, have a data processing system in accordance with this "Privacy Policy" and current regulations, within the framework of the European data transfer regulations signed with the different recipient countries of such data, and always without commercial transfer to third parties.

The User can exercise their rights of Access, Deletion, Rectification, Opposition, Portability, and Limitation to the processing of their data by contacting the data controller at the following email address: info@gospelestudios.es. To exercise these rights, the User must identify themselves by providing a sufficient identification document (DNI, Passport) and clearly indicate in the email which right they wish to exercise in relation to the processing of their data by Gospel Estudios.

The User can file a complaint with the Spanish Data Protection Agency (https://www.aepd.es) if they believe that the exercise of the above rights has not been satisfied.

Gospel Estudios guarantees the security and confidentiality of the provided data. The company has adopted the appropriate levels of security for the protection of personal data according to the quality of the data provided by Users, such as SSL certification, and strives to install all means and technical protection measures at its disposal to prevent their alteration, loss, unauthorized processing, or use. Specifically, the following measures have been established:

• Encryption of communications between the user's device and Gospel Estudios servers.
• Periodic backups of the content of Gospel Estudios servers.
• Other measures to prevent third parties from accessing user data.