Política de Privacidad
- PRIVACY POLICY – FREEMENSECRETS.COM
- Introduction
This Privacy Policy informs users (the “Users”) about how their personal data are processed when using freemensecrets.com (the “Site”).
Accessing, browsing, and using the Site implies full acceptance of this Policy, together with the Legal Notice, Terms & Conditions, and Cookie Policy.- Data Controller
- GRUPO MACHIO Y FAMILIA, SOCIEDAD LIMITADA (the “Controller”)
- Tax ID: B21890496
- Address: Calle Ricardo Sepúlveda, 13, 28017 Madrid (Spain)
- Contact / privacy email: freemensecrets@freemensecrets.com
- Purposes and Legal Bases (Art. 6 GDPR)
Personal data you provide or that are generated through your use of the Site may be processed for:
- a) Enquiries & support
- Purpose: Handling requests, incidents, or communications.
- Legal basis: Consent (Art. 6(1)(a) GDPR) and/or legitimate interest in responding to requests (Art. 6(1)(f) GDPR).
- b) Account & contracting (merchandise and digital content)
- Purpose: Registering and authenticating Users, processing orders, shipping/returns/warranties, granting access to digital content (one-off and/or subscriptions), invoicing, and after-sales.
- Legal basis: Performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR).
- c) Commercial communications
- Purpose: Sending promotional communications about Site products/services by electronic means.
- Legal basis: Consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time.
- d) Analytics & improvement (cookies/measurement)
- Purpose: Aggregate statistics to improve content and functionality (e.g., via analytics cookies, where consented).
- Legal basis: Consent via the cookie preference panel (CMP) (Art. 6(1)(a) GDPR).
- e) Security & fraud prevention
- Purpose: Maintaining Site security, preventing unlawful use/abuse or fraud, ensuring technical traceability.
- Legal basis: Legitimate interest (Art. 6(1)(f) GDPR), balanced against Users’ rights.
- f) Legal compliance
- Purpose: Fulfilling tax, accounting, consumer, e-commerce (LSSI), and data-protection obligations; responding to lawful requests from authorities/courts.
- Legal basis: Legal obligation (Art. 6(1)(c) GDPR).
Note for performers/creators (if applicable): where the Controller produces audiovisual content featuring persons in depictions of sexually explicit conduct, it may process data for age verification and record-keeping in accordance with 18 U.S.C. § 2257 / 28 C.F.R. Part 75 (when applicable) and EU/Spanish law, on the basis of legal obligation and/or contract performance. This processing is separate from ordinary Site Users.
- Categories of Data
- Identification & contact: name, surname, email, phone (if provided).
- Account data: credentials (hashed password), preferences.
- Transactional: orders, shipping/returns, warranties, payment tokens from gateways (no full card data stored).
- Access/technical: IP address, device/browser identifiers, logs, usage events (via cookies/CMP where consented).
- Communications: enquiries/support, complaints.
Special categories of data (Art. 9 GDPR) are not requested. If you voluntarily provide such data (e.g., in a message), they will be used only to handle your request and, where necessary, we will seek explicit consent.
- Retention
- Enquiries/support: for the time needed to handle the request and subsequent limitation periods.
- Account/contracting: while the account is active and/or the contractual relationship continues; thereafter for statutory periods (e.g., tax/accounting).
- Billing/accounting: for legally required periods (generally 6–10 years).
- Marketing: until consent is withdrawn or you object.
- Security logs & cookies: per data-minimisation and necessity; see the Cookie Policy.
After these periods, data are deleted or anonymised, or blocked where required for legal claims.
- Recipients, Processors, and International Transfers
Access to data may be given to processors providing services to the Controller (hosting/CDN, payment gateways, customer support, analytics, anti-fraud tools, CMP/cookies) under Art. 28 GDPR agreements.
Data may be disclosed to administrative or judicial authorities where legally required.
If any provider is located outside the EEA, appropriate safeguards will be implemented (e.g., Standard Contractual Clauses and, where applicable, supplementary measures) per Arts. 44 et seq. GDPR.- Data Subject Rights
You may exercise access, rectification, erasure, restriction, portability, and objection, and withdraw consent without retroactive effect.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.
To exercise rights:
- Email: freemensecrets@freemensecrets.com
- Postal: Calle Ricardo Sepúlveda, 13, 28017 Madrid (Spain)
We may request information necessary to verify your identity.
- Accuracy and Updates
You guarantee that the data provided are accurate, current, and truthful, and agree to keep them up to date. You must not provide third-party data without their informed consent or another valid legal basis.
- Minimum Age & Adult Content
The Site is intended for users aged 18 or older. The Controller may implement reasonable age-verification measures and deny access or cancel accounts where there are indications of minority.
- Information Security
The Controller implements appropriate technical and organisational measures (e.g., encryption, access controls, environment segregation, backups, access logging), taking into account the state of the art, implementation costs, and the nature, scope, context, and purposes of processing, as well as the risks to individuals’ rights and freedoms.
- Cookies and Similar Technologies
Non-essential cookies are installed/used based on the User’s consent, managed through the cookie preference panel (CMP). For details on types, purposes, providers, retention, and how to configure or withdraw consent, see the Cookie Policy.
- Changes to this Policy
We may update this Policy due to legal, technical, or service changes. Where changes are material, Users will be informed (e.g., Site notice, banner, or direct communication) and, where appropriate, renewed consent will be requested.
