Data Protection & GDPR Compliance
Data Protection Overview
Last updated: October 2025
1. Legal Basis for Processing
ICEBOX NETWORK SL processes personal data in compliance with the General Data Protection Regulation (GDPR) and Spanish data protection laws. Our legal bases for processing include:
- Contract Performance: To fulfill orders and provide services
- Legal Obligation: To comply with applicable laws and regulations
- Legitimate Interest: To improve our services and prevent fraud
- Consent: For marketing communications and cookies
2. Data Categories We Process
Identity Data
- • Name and contact information
- • Email address and phone number
- • Billing and shipping addresses
Transaction Data
- • Purchase history and preferences
- • Payment information (encrypted)
- • Delivery and tracking data
Security Measures
Encryption
All data transmission uses TLS 1.3 encryption
Secure Storage
Data stored in EU-certified data centers
Access Control
Role-based access with audit trails
Your Rights & Contact Information
GDPR Rights
Access & Portability
Request your data or transfer it
Rectification & Erasure
Correct or delete your data
Restriction & Objection
Limit processing or object
Withdraw Consent
Opt out anytime
Contact Information
Data Controller: ICEBOX NETWORK SL
Address: Getafe, Resurrección street, number 3, Spain
Email: privacy@codpal.com
DPO: dpo@codpal.com
Supervisory Authority: Spanish Data Protection Agency (AEPD)