ComparaModacomparaModa.com

Privacy Policy

Last updated: 1 April 2026

At ComparaModa.com we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect the personal information you provide when using our website, in accordance with Regulation (EU) 2016/679 (GDPR), the Spanish Organic Law 3/2018 (LOPDGDD), and the EU ePrivacy Directive.

1. Data controller

The data controller for your personal data is ComparaModa.com, based in Spain. ComparaModa operates the comparamoda.com website and its international subdomains (fr, de, it, uk). For any data protection inquiry, contact us at [email protected]. We have not appointed a Data Protection Officer (DPO) as we do not meet the criteria of Article 37 GDPR, but any communication to the above address will be handled by our privacy team.

2. Data we collect

We collect only the data strictly necessary to operate the service and improve your experience. We do not sell your personal data to third parties. The data we process falls into the following categories:

  • Browsing data: IP address (anonymised by Google Analytics), browser type and version, operating system, language, pages visited, time spent, referrer and access time.
  • Search data: search terms entered, filters applied (brand, category, color, size, price) and products viewed.
  • Interaction data: clicks on products recorded to measure affiliate store performance and attribute commissions.
  • Contact data: only if you decide to email us, we receive your email address and the content of your message.
  • Technical data: screen resolution, unique browser identifier, device type (mobile/desktop).

3. Purpose and legal basis of processing

We process your personal data on the following legal bases, under Article 6 GDPR:

  • Legitimate interest (art. 6.1.f GDPR): operating and improving the price comparison service, protecting the site against abuse and fraud, and measuring business performance.
  • Consent (art. 6.1.a GDPR): analytics cookies (Google Analytics) and affiliate cookies, activated only if you accept them in the consent banner.
  • Legal obligation (art. 6.1.c GDPR): complying with requirements from authorities, court orders, and tax or accounting obligations.
  • Contract performance (art. 6.1.b GDPR): when you contact us and we need your data to respond.

4. Retention period

We retain your personal data only as long as necessary for the purposes described and to comply with our legal obligations. Google Analytics data is kept for 14 months. Affiliate click logs are kept for 12 months. Email communications are kept for a maximum of 2 years from the last interaction. Tax and accounting records are kept for 6 years under Spanish law. Once these periods have elapsed, data is securely deleted or anonymised.

5. Recipients and processors

We share data with the following processors, all of which have appropriate contractual safeguards:

  • Google LLC (United States): Google Analytics 4 and Google Tag Manager for usage analytics. International transfer covered by the EU–US Data Privacy Framework.
  • Cloudflare, Inc. (United States): CDN, attack protection and performance optimization. Transfer covered by EU Standard Contractual Clauses.
  • Affiliate networks (Awin, CJ Affiliate, Admitad, AliExpress Portals): receive aggregated click data to attribute commissions. They do not receive identifiable personal data.
  • Hosting provider: website instances are hosted on servers located within the European Economic Area (EEA).
  • Public authorities: only when a legal obligation requires it.

6. User rights (GDPR)

At any time, you can exercise the following rights over your personal data, free of charge:

  • Right of access: obtain confirmation of whether we process your data and a copy of it.
  • Right to rectification: correct inaccurate or incomplete data.
  • Right to erasure (right to be forgotten): request deletion of your data when it is no longer necessary.
  • Right to restriction of processing: restrict the use of your data in certain circumstances.
  • Right to data portability: receive your data in a structured, commonly used format.
  • Right to object: object to processing based on legitimate interest or for marketing purposes.
  • Right to withdraw consent: at any time, without retroactive effect.
  • Right to lodge a complaint with the supervisory authority: in Spain, the Spanish Data Protection Agency (www.aepd.es); in the UK, the ICO (www.ico.org.uk).

To exercise these rights, send an email to [email protected] identifying yourself properly. We will respond within a maximum of 30 days.

7. Data security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration or disclosure. These measures include TLS/HTTPS encryption on all communications, access controls restricted to authorized personnel, encrypted backups, and continuous security monitoring via Cloudflare. However, no internet transmission is 100% secure and we cannot guarantee absolute data security.

8. Minors

Our service is not intended for children under 13 years of age. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided us with personal data, contact us at [email protected] and we will delete it without delay.

9. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices, in applicable law, or in third-party services. The current version is always available on this page with the last updated date. We recommend reviewing it periodically. In the event of substantial changes, we will publish a prominent notice on the site.

[email protected]