Online Store Korean Wonder (ECSC SL)

1. Who is responsible for processing your data?

In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, hereinafter — GDPR) and Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), we inform you that personal data provided through this website is processed by:

Company name: ECSC SL

NIF (CIF): B13736954

Registered address: Urbanización Buenavista 344, 03140 Guardamar del Segura, Alicante, Spain

Contact email for data protection matters: info@koreanwonder.com

Main activity: Retail sale of cosmetic and hygiene products (including Korean cosmetics) via the internet

2. What data do we collect and for what purpose?

We may process the following categories of personal data:

A) For order processing and fulfillment (performance of a sales contract)

Data: First name, last name, delivery address, billing address (if different), phone number, email address.

Purpose: Processing your order, shipping goods via delivery services, issuing invoices, and informing you about the order status.

Legal basis: Performance of a sales contract to which you are a party.

B) For account creation

Data: First name, last name, email, password (encrypted), phone number.

Purpose: To allow you to make purchases without re-entering your data, view order history, and manage your information.

Legal basis: Your consent given during registration.

C) For payment processing

Data: We DO NOT STORE your bank card details on our servers. Payments are processed through secure third-party payment gateways.

Payment systems used: Bizum, PayPal, bank transfer.

Purpose: Receiving payment for goods.

Legal basis: Performance of a sales contract.

D) For customer communication (contact forms)

Data: Name, email, message content.

Purpose: To respond to your inquiries, complaints, or suggestions regarding the store or products.

Legal basis: Your consent expressed by submitting the form.

E) For marketing (email newsletters)

Data: Email address.

Purpose: Sending commercial information about new arrivals of Korean cosmetics, discounts, and promotions.

Legal basis: Your explicit consent (e.g., ticking the “Subscribe to news” checkbox). You may unsubscribe at any time via the link in the email or by contacting us.

We do not share your data with third parties for their marketing purposes.

3. How long do we retain your data?

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations.

Marketing data: Stored until you withdraw your consent (unsubscribe).

Order and accounting data: Stored for the period required by Spanish tax law (usually 4–5 years) for possible audits by tax authorities (Agencia Tributaria).

4. Who do we share your data with?

To fulfill our obligations, we may share your data with the following categories of recipients:

Public authorities: We are required to provide your data to Spanish tax authorities (Hacienda), law enforcement, and courts when required by law.

Delivery services: Your name, address, and phone number are shared with Correos (and/or other courier services, if used) to deliver your order.

Payment providers: Payment information is shared with payment service providers (PayPal, Bizum, your bank) to process transactions. Their own privacy policies apply to such processing.

IT providers and hosting: Companies providing technical support and hosting for our website and databases (all located within the EU or compliant with GDPR requirements).

Your data is not shared with third parties for their commercial purposes without your explicit consent.

5. Cookies

Our online store uses cookies and similar technologies to ensure website functionality, collect statistics (e.g., Google Analytics), and configure advertising (e.g., Meta Pixel).

When you first visit the website, you are asked to configure cookie settings. More detailed information is available in our [Cookie Policy].

6. Your rights

You have the right at any time to:

Access: Request information about what personal data we process about you.

Rectification: Request correction of inaccurate or incomplete data.

Erasure (“right to be forgotten”): Request deletion of your data if it is no longer necessary for the purposes for which it was collected or if you withdraw consent. Note: we may delete your account and marketing data, but we are legally required to retain order and payment data for the period established by tax law (up to 5 years).

Restriction of processing: Request limitation of data processing in cases предусмотренных законом.

Objection: Object to the processing of your data for marketing purposes (including unsubscribing).

Data portability: Receive your data in a structured, commonly used format for transfer to another controller.

How to exercise your rights:

To exercise these rights, send an email to info@koreanwonder.com with the subject “ARCO Request / Data Protection” or a written request to our registered address. We will respond within the legally established period (maximum 1 month).

If you believe your rights have been violated, you have the right to file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD).

7. Security

We are committed to implementing appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. All data is transmitted via secure HTTPS protocol.

8. Changes to the Privacy Policy

We reserve the right to update this Privacy Policy due to changes in legislation or our processes. In case of significant changes, we will notify you via the website or by email. We recommend reviewing this page periodically.

Effective date: March 14, 2026.