Skip to content
SLM

Privacy policy

1. Data controller

The controller for personal data processed on this site is Second Legion Market, tax ID B00000000, registered at secondlegionmarket.es, reachable at secondlegionmarket@gmail.com.

2. Data processed and purposes

  • Contact details (name, email, phone) for order management.
  • Shipping and billing addresses to fulfil purchases.
  • Browsing data and cookies (see cookie policy).
  • Payment data processed by the payment provider (SumUp); cards are never stored on our systems.

3. Legal basis

Processing is based on the performance of the sales contract (Art. 6.1.b GDPR), explicit consent for marketing communications and non-essential cookies (Art. 6.1.a GDPR), and compliance with tax and accounting obligations.

4. Rights

As a registered user you can exercise the following rights directly from your account. If you don't have an account or prefer email, write to secondlegionmarket@gmail.com.

  • Access (Art. 15 GDPR): download a ZIP with all of your personal data from /en/account/privacy. It includes profile, addresses, wishlist, reviews, order summary and PDF invoices. The link is delivered by email, valid for 24 hours, and the archive is deleted from the server after 7 days.
  • Erasure (Art. 17 GDPR): delete your account from /en/account/privacy. Requires re-authentication and a typed confirmation. After deletion your personal data is anonymised; approved reviews are kept signed as "Verified customer"; past orders are kept anonymised (without name, email or address) for tax and accounting compliance.
  • Rectification (Art. 16 GDPR): edit your data from /en/account/profile. Changing email requires confirmation at the new address before it becomes effective.
  • Objection to marketing (Art. 21 GDPR): manage your newsletter subscription from /en/account/newsletter or via the one-click List-Unsubscribe link (RFC 8058) present in every marketing email.
  • Restriction and portability: the access ZIP is directly portable (structured JSON + PDF). For restriction, contact us by email.

You may also lodge a complaint with the competent supervisory authority.

5. Retention

Order data is retained for as long as required by tax and accounting law (6 years). Newsletter data until you unsubscribe.

Last revised: 13 May 2026.