Privacy Policy
Last updated: 2026
1. Data controller
- Controller: Berta Garzón Soto — Spanish Tax ID (NIF) 05313194X
- Address: Cea Bermúdez 54, 28003 Madrid, Spain
- Contact: maca@macamundi.com
2. What data we collect
Only your name and email address, and only when you provide them voluntarily by subscribing to Club Macamundi.
We do not ask for or store the name, age, or any data belonging to children. We do not request a postal address, phone number, or payment details, because we do not sell anything directly from this site.
3. What we use it for
- To send you the free welcome activity pack.
- To send you news about the books, new activities, and Macamundi content.
We do not use your data to build profiles or to make automated decisions about you.
4. Legal basis
Your express consent (Article 6.1(a) of the GDPR), which you give by checking the box on the form and then confirming it from the verification email we send you. We keep a record of that confirmation as proof of consent. You can withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.
5. How long we keep it
For as long as you remain subscribed. If you unsubscribe, your data is deleted or blocked for the period legally required to address any potential liability.
6. Who else has access to your data
We work with providers acting as data processors, under contracts that comply with Article 28 of the GDPR:
| Provider | Purpose | Location |
|---|---|---|
| Brevo | Sending emails and managing the subscriber list | European Union (France) |
| Lovable | Building and hosting the website | EU/EEA and other countries, including the US, with transfers safeguarded by Standard Contractual Clauses |
| Umami Cloud | Website usage analytics, cookieless and without identifying visitors | European Union (Germany) |
We do not share your data with third parties for their own commercial purposes.
Brevo and Umami Cloud process data entirely within the European Union. Lovable, our hosting provider, may also process data outside the European Economic Area (including the US) as part of its infrastructure. This transfer is covered by the Standard Contractual Clauses approved by the European Commission (Decision 2021/914) — the standard safeguard the GDPR requires for this kind of transfer, and the same one used by the vast majority of everyday technology services. You can request a copy of the applicable clauses by writing to maca@macamundi.com.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing, and portability at any time, as well as withdraw your consent, by writing to maca@macamundi.com. Every email we send you also includes a direct unsubscribe link.
If you believe we have not properly handled your request, you can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), C/ Jorge Juan 6, 28001 Madrid, Spain — www.aepd.es.
8. Minors
Although Macamundi's books are aimed at children, this site and Club Macamundi are intended exclusively for adults: mothers, fathers, family members, and educators. Subscriptions from anyone under 14 are not accepted without the consent of their legal guardian.
9. Security
We apply reasonable technical and organizational measures to protect your data against loss, misuse, or unauthorized access.
10. Changes to this policy
If we update this policy, we will publish the new version on this page with its new date.