Last updated: July 14, 2026
At MOLOWI (hereinafter, "we," "our," or "the Controller"), we are committed to protecting your privacy and handling your personal data transparently and in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and the Spanish Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD). This policy explains how we collect, use, and protect your information.
1. IDENTITY OF THE DATA CONTROLLER
Controller: GOOD MUSIC EXPERIENCE SL
Tax ID (NIF): B75687566
Address: Calle Rebite, 36, 18198, Huétor Vega (Granada), Spain
Contact Email: [email protected]
2. PURPOSES FOR WHICH WE PROCESS YOUR PERSONAL DATA
We process the information you provide us for the following purposes, depending on your relationship with us:
Account and Purchase Management: To process your orders, manage payments, arrange shipping, and provide after-sales service (returns, exchanges, warranties) for our products (eyewear and accessories) and holiday rental experiences (Surf and Snow) in Tarifa and Sierra Nevada.
Experience Booking Management: To manage your booking for Surf and Snow activities, including confirmations, changes, cancellations, and sending pre-experience instructions.
Customer Service and Inquiries: To respond to your questions, manage your requests for information about our products and services, and handle any claims through our contact form or email.
Commercial Communications: To keep you informed about our news, offers, promotions, and events related to our eyewear, accessories, and adventure experiences. We will only send these if you have given us your explicit consent (e.g., by subscribing to our newsletter).
Website Analysis and Improvement: To analyze the use of our website and user preferences, allowing us to improve our services and offer you a better experience. This activity is based on our legitimate interest in optimizing our online store.
Fraud Prevention: To verify your identity and prevent potential fraud in transactions.
3. LEGAL BASIS FOR PROCESSING YOUR DATA
The processing of your data is based on the following legal grounds:
Performance of a Contract (Art. 6.1.b GDPR): To manage your purchase, your experience booking, or the provision of any service you have contracted with us.
Consent of the Data Subject (Art. 6.1.a GDPR): For sending commercial communications and, where applicable, for installing non-essential cookies.
Legitimate Interest (Art. 6.1.f GDPR): To analyze browsing activity on our website and for fraud prevention, provided these interests do not override your fundamental rights and freedoms.
Compliance with a Legal Obligation (Art. 6.1.c GDPR): To fulfill our fiscal, accounting, and legal obligations.
4. RECIPIENTS OF YOUR PERSONAL DATA
Your data will not be transferred to third parties, except as necessary for the provision of the service or when required by law. We work with the following types of data processors:
Technology Service Providers: Web hosting, e-commerce platform (Shofy / Laravel), and email marketing services. Your data may be stored on their servers, which comply with data protection regulations.
Payment Gateways: For managing and processing credit/debit card, Bizum, and other payment methods, ensuring transaction security.
Logistics and Courier Companies: For preparing and shipping your orders of eyewear and accessories.
Experience Providers: For managing and delivering the holiday rental activities (Surf and Snow) in Tarifa and Sierra Nevada.
5. DATA RETENTION PERIODS
We will retain your personal data for as long as necessary to fulfill the purpose for which it was collected and to determine any potential liabilities arising from that purpose.
As a general rule:
Purchase and Billing Data: Retained for the legal period established by tax and commercial regulations (generally, 6 years according to the Spanish Commercial Code).
User Account Data: Retained as long as your account is active. If you request its deletion, we will proceed to cancel it, unless retention is required by law.
Data for Commercial Communications: Retained until you withdraw your consent or object to processing.
Browsing and Analytics Data: Retained for the time necessary to fulfill the analytical purpose and will then be anonymized or deleted.
6. YOUR DATA PROTECTION RIGHTS
You have the right to exercise, at any time, the following rights regarding your personal data:
Access: To know what personal data we process about you.
Rectification: To modify inaccurate or incomplete data.
Erasure (Right to be forgotten): To request the deletion of your data when it is no longer necessary.
Restriction of Processing: To request that we stop processing your data in certain circumstances.
Objection: To object to your data being processed for certain purposes, such as sending advertising.
Data Portability: To receive the data you have provided to us in a structured, commonly used, and machine-readable format.
You can exercise these rights free of charge by sending a written request to our email address [email protected], indicating the right you wish to exercise and attaching a copy of your ID or equivalent document to verify your identity.
Furthermore, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you consider that we have not processed your data in accordance with the law (www.aepd.es).
7. DATA ORIGIN
The personal data we process comes from the data subject themselves through the forms on our website, during the purchase process, account registration, or subscription to our newsletter. We may also automatically collect data through your browsing (e.g., IP address, cookies).
8. SECURITY
GOOD MUSIC EXPERIENCE SL adopts all necessary technical and organizational measures to guarantee the security, integrity, and confidentiality of your data, as well as to prevent its alteration, loss, or unauthorized access. For example, we use HTTPS/SSL protocols to encrypt communication on our website.
