Privacy Policy

This privacy policy establishes the way in which personal data will be managed on this website. It is essential that you read and accept it before continuing to navigate.

ByPEPPAS whose corporate name is By Peppas E-commerce S.L.; CIF: B88301940.

Among the values with which we identify ourselves is the transparency, for that reason we want you to know from the beginning, that the privacy of your data is very important for us. This privacy statement explains what personal information we collect from our users and how we use them. We invite you to read these terms carefully before providing your personal data on this website. Those over the age of thirteen may register in ByPEPPAS as users without the prior consent of their parents or guardians.

In the case of children under the age of thirteen, the consent of the parents or guardians is required for the processing of their personal data.

In any case the minor’s professional, economic situation or the privacy of the other members of the family data will be collected, without their consent.

If you are under the age of thirteen and have accessed this website without notifying your parents, you must not register as a user.

On this website, the personal data of the users are respected and taken care of. As a user you should know that your rights are guaranteed.

We have strived to create a safe and reliable space and that is why we want to share our principles regarding your privacy:

• We never ask for personal information unless it is really necessary to provide the services you require.

• We never share personal information about our users with anyone, except to comply with the law or if we have your express authorization.

• We will never use your personal data for a purpose other than that expressed in this privacy policy.

It should be noted that this Privacy Policy might vary depending on legislative requirements or self-regulation, so users are advised to visit it periodically. It will be applicable in case the users decide to fill out any form of any of their contact forms where personal data is collected.

ByPEPPAS has adapted this website to the requirements of the Organic Law 15/1999, from December 13, of Personal Data Protection (PDO), and Royal Decree 1720/2007, from December 21, known as the Regulation of development of the PDP. It also complies with Regulation (EU) 2016/679 of the European Parliament and the Council from 27 April 2016 on the protection of natural persons (GDPR), as well as with Law 34/2002, from July 11, of Services of the Information Society and Electronic Commerce (LSSICE or LSSI). 

Responsible for the processing of your personal data

  • Responsible Identity: By Peppas E-commerce S.L.
    • Commercial name: ByPEPPAS
    • NIF / CIF: B88301940
    • Address: Avenida de Lazarejo 29, 28232, Las Rozas de Madrid, Madrid, España
    • Email:
    • Registered in the Mercantile Registry of Madrid,T 38736, F 57, S 8, H M688740, I/A 1 (2019)

For the purposes of the provisions of the General Data Protection Regulation cited above, the personal data that you send us through the web forms will receive the data treatment of "Users of the web and subscribers".

For the treatment of data of our users, we implement all the technical and organizational security measures established in the current legislation.

Principles that we will apply to your personal information

In the processing of your personal data, we will apply the following principles that meet the requirements of the new European data protection regulation:

  • Principle of legality, loyalty and transparency: We will always require your consent for the processing of your personal data for one or several specific purposes that we will inform you in advance with absolute transparency.
  • Principle of data minimization: We will only request data strictly necessary in relation to the purposes for which we require them. The minimum possible.
  • Principle of limitation of the conservation period: data will be kept for no longer than necessary for the purposes of the treatment, depending on the purpose, we will inform you of the corresponding conservation period, in the case of subscriptions, we will periodically review our lists and we will eliminate those inactive records for a considerable time.
  • Principle of integrity and confidentiality: Your data will be treated in such a way that an adequate security of the personal data is guaranteed and confidentiality is guaranteed. You should know that we take all necessary precautions to prevent unauthorized access or improper use of the data of our users by third parties.

How have we obtained your data?

Personal data treated in ByPEPPAS comes from:

•Contact Form
•Subscription form
•Blog comments
•Registration form as a client
•Sales form


What are your rights when you provide us with your personal data?

Anyone has the right to obtain confirmation on whether or not at ByPEPPAS we are treating personal data concerning you.

Interested persons have the right to:

• Request access to personal data concerning the interested party
• Request rectification or deletion
• Request treatment limitation
• Oppose the treatment
• Request data portability

Interested parties may access their personal data, as well as request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes that were collected. In certain circumstances, the interested parties may request the limitation of the processing of their data, in which case I will only keep them for the exercise or defense of claims.

In certain circumstances and for reasons related to their particular situation, the interested parties may object to the processing of their data. ByPEPPAS Designers Group S.L. will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims. As interested, you have the right to receive the personal data that concern you, that you have given us and in a structured format, of common use and mechanical reading, and to transmit them to another person responsible for the treatment when:

• Treatment is based on consent
• Data has been provided by the person concerned.
• The treatment is carried out by automated means.

By exercising your right to data portability, you will have the right to have personal data transmitted directly from responsible to responsible when technically possible.

Interested parties will also have the right to effective judicial protection and submit a claim to the supervisory authority, in this case, the Spanish Agency for Data Protection, if they consider that the processing of personal data that concerns them violates the Regulation.


For what purpose do we treat your personal data?

When a user connects with this website for example to comment on a post, send an email to the owner, subscribe or make a contract, is providing personal information for which ByPEPPAS is responsible. This information may include personal data such as your IP address, name, physical address, email address, telephone number, and other information. By providing this information, the user gives his consent for his information to be collected, used, managed and stored by ByPEPPAS, only as described in the Legal Notice and in this Privacy Policy.

At ByPEPPAS, there are different systems for capturing personal information and treating it, the information provided by interested persons with the following purpose for each capture system (forms):

  • Contact form: We request the following personal information: Name, Email, to respond to the requirements of ByPEPPAS users. For example, we can use these data to respond to your request and respond to any doubts, complaints, comments or concerns you may have regarding the information included in the web, the services provided through the web, the treatment of your personal data, questions referring to the legal texts included in the web, as well as any other queries that you may have that are not subject to the contracting conditions. I inform you that the data you provide us will be located in the servers of UNITED INTERNET (provider of ByPEPPAS Designers Group S.L.) within the EU.
  • Content subscription form: In this case, we request the following personal information: Name, Email, to manage the list of subscriptions, send newsletters, promotions and special offers, provided by the user when making the subscription. Within the web, there are several forms to activate the subscription. The electronic bulletins or newsletter are managed by ACUMBAMAIL. I inform you that the data you provide us will be located in the servers of ACUMBAMAIL (provider of ByPEPPAS Designers Group S.L.) within the EU.
  • Registration form for blog comments: To comment on the posts of ByPEPPAS blog, the user is required to register using this form. In this case, we request the following personal information: Name, Email, Website. Once registered, the user will be able to make as many comments as he / she wishes and give an answer about the previous ones. I inform you that the data you provide us will be located in the servers of UNITED INTERNET (provider of ByPEPPAS Designers Group S.L.) within the EU.
  • Registration form as a customer: To sign up for our ByPEPPAS online store. For this, the user is required to register using this form. In this case, we request the following personal information: Name, Email, Telephone, Address. The user has a registration form, subject to the contracting conditions specified in our particular contract conditions of the affiliation program. Where it will refer the products and / or services collected in it, requiring tax and contact data. I inform you that the data you provide us will be located in the servers of UNITED INTERNET (provider of ByPEPPAS Designers Group S.L.) within the EU.
  • Sales form: The user has different purchase forms subject to the contracting conditions specified in each product or service where contact and payment data will be required such as: Name, surnames, ID, email, telephone, address complete Payment data will be collected and managed by the payment gateway used by the website.

There are other purposes for which we treat your personal data:

• To guarantee compliance with the conditions of use and the applicable law. This may include the development of tools and algorithms that help this website to guarantee the confidentiality of the personal data it collects.

• To support and improve the services offered by this website.

• Other non-identifying data obtained through some cookies that are downloaded to the user's computer when browsing this website, which I detail in the cookie policy, are also collected.

• To manage social networks. ByPEPPAS can be shared in social networks. The treatment of the data that is carried out of the people who become followers in the social networks of the official pages of ByPEPPAS, will be governed by this section. As well as for those conditions of use, privacy policies and access regulations that belong to the social network that may be applicable in each case and previously accepted by the user of ByPEPPAS Designers Group SL It will process your data with the purpose of correctly managing your presence in the social network, reporting ByPEPPAS activities, products or services. As for any other purpose that the regulations of social networks allow. In no case we will use the profiles of followers in social networks to send advertising individually.

In accordance with the provisions of the European Data Protection General Regulation (GDPR) 2016/679, ByPEPPAS Designers Group S.L. (ByPEPPAS) with address at Avenida de Lazarejo 29, 28232, Las Rozas de Madrid, Madrid, España will be responsible for the processing of data corresponding to users of the website and subscribers.

ByPEPPAS, does not sell, rent or give personal data that can identify the user, nor will it in the future, to third parties without prior consent. However, in some cases collaborations can be made with other professionals, in those cases, consent will be required from users informing about the identity of the collaborator and the purpose of the collaboration. It will always be done with the strictest safety standards.



The remarketing feature allows us to reach people who have visited ByPEPPAS before and associate a specific audience with a specific message. Remarketing is a method to get users who have visited our site to do it again.

As a user of ByPEPPAS I inform you that I am collecting information for this remarketing feature in ByPEPPAS.

The information we collect through this feature is collected by Facebook cookies. You can know the data that these cookies collect in the following privacy policies of each service:


If you do not want your information to be collected by these cookies, you can disable the use of Google cookies through the Google Ads Settings. You can also disable the use of cookies from a third party provider through the disabling page of the Network Advertising Initiative.

This type of services allows you to interact with social networks or other external platforms directly from the pages of this website. The interactions and information obtained by this website will always be subject to the privacy settings of the user in each social network. In the event that a service is installed that allows interaction with social networks, it is possible that, although users do not use the service, it collects data from web traffic related to the pages in which they are installed.

Facebook ADS

At ByPEPPAS we use Facebook ADS, Facebook's advertising platform, which allows us to create campaigns and announcements. When generating an ad, you can segment the audience by:

•Demographic data (age, sex, etc.)
•Interests (activities, hobbies, etc.)
•What they buy online and through other channels

The data obtained through Facebook ADS are subject to this privacy policy from the moment the user leaves their data in the form of this website to join the subscription newsletter. In no case will the information from Facebook be used for a different purpose.


Legitimation for the treatment of your data

The legal basis for the treatment of your data is: consent.

To contact or make comments on this website, consent is required with this privacy policy.

The prospective or commercial offer of products and services is based on the consent that is requested, without in any case the withdrawal of this consent conditions the execution of the subscription contract.

Also the contracting of products and services according to the terms and conditions that appear in the commercial policy.

Data category

The categories of data that are treated are identifying data.

Specially protected data categories are not treated. 

How long will we keep your data?

The personal data provided will be preserved:

• While the mercantile relationship is maintained.
• Until the deletion is requested by the interested party.
• Period from the last confirmation of interest: 5 years.

To which recipients will your data be communicated?

Many tools that we use to manage your data are contracted by third parties.

To provide services strictly necessary for the development of the activity, ByPEPPAS, shares data with the following providers under their corresponding privacy conditions:

Google Analytics: a web analytics service provided by Google, Inc., a Delaware company whose head office is at 1600 Amphitheater Parkway, Mountain View (California), CA 94043, United States ("Google"). Google Analytics uses "cookies", which are text files located on your computer, to help ByPEPPAS analyze the use made by website users. The information generated by the cookie about your use of ByPEPPAS (including your IP address) will be directly transmitted and stored by Google on servers in the United States.

Hosting: 1 & 1 INTERNET S.L., with address in Spain. More information at:, 1 & 1 INTERNET S.L. treats the data in order to perform its hosting services to ByPEPPAS Designers Group S.L.

Email marketing: ACUMBAMAIL, S.L., with address at Avenida Rey Santo 3D, floor 3, office 2 - 13001 CIUDAD REAL. More information at: ACUMBAMAIL treats the data in order to carry out its email marketing services to ByPEPPAS Designers Group S.L.


When browsing ByPEPPAS you can collect unidentifiable data, which may include, IP addresses, geographic location (approximately), a record of how services and sites are used, and other data that can not be used to identify the user. Among the non-identifying data are also those related to your browsing habits through third-party services. This website uses the following third-party analysis services:

• Google analytics
• Facebook inside

We use this information to analyze trends, administer the site, track the movements of users around the site and to gather demographic information about our user base as a whole.


Data security and protection

ByPEPPAS is committed to the use and treatment of personal data included by users, respecting their confidentiality and using them in accordance with the purpose of the same, as well as to comply with their obligation to save them and adapt all measures to avoid alteration, loss, treatment or unauthorized access, in accordance with the provisions of current data protection regulations.

This website includes an SSL certificate. It is a security protocol that makes your data travel in an integral and secure way, that is, the transmission of data between a server and web user, and in feedback, is fully encrypted or encrypted.

ByPEPPAS cannot guarantee the absolute impregnability of the Internet network and therefore the violation of the data through fraudulent access to them by third parties.

With respect to the confidentiality of the processing, ByPEPPAS Group Designers S.L. will ensure that any person who is authorized by ByPEPPAS to process customer data (including its staff, collaborators and lenders), will be under an appropriate obligation of confidentiality (either a contractual or legal duty).

When a security incident occurs, upon noticing ByPEPPAS, the Customer shall be notified without undue delay and shall provide timely information related to the Security Incident as it is known or when reasonably requested by the Client.

Data accuracy and veracity

As a user, you are solely responsible for the accuracy and correctness of the data you send to ByPEPPAS, exonerating ByPEPPAS Designers Group S.L. (ByPEPPAS), of any responsibility in this regard.

Users guarantee and respond, in any case, the accuracy, validity and authenticity of the personal data provided, and undertake to keep them properly updated. The user agrees to provide complete and correct information in the contact or subscription form.

Acceptance and consent

The user declares to have been informed of the conditions on protection of personal data, accepting and consenting to the treatment thereof by ByPEPPAS Designers Group S.L. (ByPEPPAS) in the form and for the purposes indicated in this privacy policy.


The consent given, both for the treatment and for the transfer of data of the interested parties, is revocable at any time by communicating it to ByPEPPAS Designers Group S.L. (ByPEPPAS) in the terms established in this Policy for the exercise of ARCO rights. This revocation will not be retroactive in any case.

Changes in the privacy policy

ByPEPPAS Designers Group S.L. reserves the right to modify this policy to adapt it to new legislation or jurisprudence, as well as to industry practices. In these cases, ByPEPPAS Designers Group S.L. will announce on this page the changes introduced with reasonable anticipation to its implementation.

Commercial post office

According to the LSSICE, ByPEPPAS does not perform SPAM practices, so it does not send commercial e-mails that have not been previously requested or authorized by the user. Consequently, in each of the forms available on the web, the user has the possibility of giving his express consent to receive the newsletter, regardless of the commercial information promptly requested.

In accordance with the provisions of Law 34/2002 on Services of the Information Society and electronic commerce, ByPEPPAS undertakes not to send communications of a commercial nature without properly identifying them.

Document revised on 24-12-2020.