Privacy Policy

1. Data controller

Illia Bondarenko, trading as "SportCity"
Tax ID (NIF): Y4554843Y
Address: Calle Dalias 9, 03189 Orihuela, Alicante, Spain
Email: support@scity.es

No Data Protection Officer (DPO) has been appointed, as this is not required given the scale and nature of the data processed.

2. What data we collect

Identification and contact details: name, delivery/billing address, email, phone.
Order data: products purchased, order history, returns and support requests.
Payment data: card payments are processed directly by Stripe, our payment provider — SportCity never stores your full card details.
Browsing data: IP address, browser type, pages visited and cookies, as detailed in our Cookie Policy.
Newsletter data: your email address, only if you subscribe voluntarily.

3. Purpose and legal basis

Order fulfilment: processing your purchase, shipping, returns and support. Legal basis: performance of a contract.
Customer service: responding to your enquiries. Legal basis: performance of a contract / legitimate interest.
Fraud prevention and security: protecting the site and our customers. Legal basis: legitimate interest.
Marketing emails: only if you opt in to our newsletter. Legal basis: consent, withdrawable at any time.
Web analytics (Google Analytics 4): understanding site usage to improve it. Legal basis: your consent, given via the cookie banner.
Legal and tax obligations: keeping invoices and accounting records as required by Spanish commercial law. Legal basis: legal obligation.

4. Who receives your data

Stripe — card payment processing, under Stripe's own privacy policy.
Couriers responsible for delivering your order.
Google LLC, via Google Analytics 4, for web analytics — Google may transfer some data outside the EEA under the European Commission's Standard Contractual Clauses.
Public authorities, where legally required.

SportCity does not sell or share your personal data with third parties for their own commercial purposes.

5. Retention period

Order-related data is kept for as long as required by applicable tax and commercial-law obligations (generally 6 years under the Spanish Commercial Code). Data processed on the basis of your consent (newsletter, analytics) is kept until you withdraw that consent.

6. Your rights

You have the right to access your personal data, request correction of inaccurate data, and request its erasure where it is no longer necessary for the purposes it was collected for. You may also request restriction of processing, data portability, or object to processing. To exercise these rights, email support@scity.es with proof of your identity.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) if you believe your data has not been processed in accordance with the law.

7. Security

SportCity applies technical and organisational measures appropriate to the risk of processing, to prevent unauthorised access, loss or alteration of your data.