"Cardstation" is deeply committed to complying with Spanish and European regulations for the protection of personal data, and guarantees full compliance with the obligations set forth, as well such as the implementation of the security measures provided in the General Data Protection Regulation (RGPD) (EU) 2016/679, of April 27, and in Organic Law 3/2018, of December 5, on Data Protection Personal and digital rights guarantee (LOPD and GDD, hereinafter LOPD).

In accordance with these regulations, we inform that the use of our website may require that certain personal data be provided through registration or contact forms, or by sending emails, and that these will be processed by "Cardstation", Responsible for the treatment, whose data are:

  • Company Name: Wingstowin Solutions S.L.
  • CIF: B05553714
  • Registered Office: Av. Fuente Alamo Nº4 Pta 24 - 30510, Yecla, Murcia
  • Telephone: 639 638 861
  • eMail: info@cardstation.net

Collection and Processing of Personal Data

personal data is any information related to a person: name, email, address, telephone, NIF / NIE ... Additionally, when a User visits our website, determined Information is automatically stored for technical reasons, such as the IP address assigned by your Internet access provider.

“Cardstation”, as Data Controller, has the duty to inform the Users of its website about the collection of personal data that may be carried out , either by sending email or by filling in the forms included on the website.

Only the precise data will be obtained to be able to carry out the contracted service, or to be able to respond adequately to the request for information made by the User. The data collected is identifying and corresponds to a reasonable minimum to be able to carry out the activity carried out. In particular, no specially protected data is collected at any time. In no case will the data be used differently than the purpose for which they have been collected.

Contact / email forms

Purpose: To reply to your request for information made through our contact form (s).

Legitimation: The legal basis that legitimizes this treatment is the User's consent, which may be revoked at any time.

Data transfer: Personal data will be processed through servers managed by OVH , which will be considered as Processor.

Registration forms in the mailing list (newsletter)

Purpose: Sending communications, some of them commercial, of interest to the Users according to the blog's theme. As established by the LSSICE, "Cardstation" undertakes not to send commercial communications without identifying them as such. For these purposes, the information sent to clients for the maintenance of the existing contractual relationship, if any, will not be considered as commercial communication.

Legitimation: The legal basis that legitimizes this treatment is the User's consent, which may be revoked at any time.

Data transfer: Personal data will be processed through servers managed by OVH , which will be considered as Processor.

Registration / customer registration / hiring forms


  • Manage your User registration on our website.
  • Manage purchases made.
  • Provide iInformation about the processing and status of purchases.
  • Historical record of purchases made on our website.
  • Comments and content management.
  • Sending communications via email and / or telephone, in order to inform the User of possible incidents, errors, problems and / or order status.

Legitimation: The legal basis that legitimizes this treatment is the execution of a contract.

Data transfer: “Cardstation” will not transfer or communicate your data to any third party, except in the cases provided by law or when strictly necessary for the provision of a service. Specifically, the data may be transferred to:

  • Technology service providers.
  • Payment service providers.
  • Courier and parcel companies.
  • Third parties or intermediaries, as service providers, operating on our own behalf (agency, consultancy ...).

Data transfers will be produced respecting the strictest confidentiality, using the necessary measures, such as signing confidentiality contracts, or adhering to their established privacy policies on their respective web pages. The User may refuse to transfer their data to the Treatment Managers, by written request, by any of the aforementioned means.

In addition, in those cases where necessary, Customer data may be transferred to certain organizations, in compliance with a legal obligation: Spanish Tax Agency, banks, Labor Inspection, etc.

Feedback form

Purpose: make a comment or review for publication on the website.

Legitimation: The legal basis that legitimizes this treatment is the User's consent, which may be revoked at any time.

Data transfer: Personal data will be processed through the servers of this website, managed by OVH , which will be considered as Data Controller.


Personal data may only be provided on this website by persons over 14 years of age. As required by the LOPD and GDD, in the case of minors under 14 years of age, the consent of their parents or guardians will be a mandatory condition so that we can process their personal data.

On the other hand, only people over 18 years of age may contract our services. In the case of minors under 18 years of age, the consent of their parents or legal guardians will be a mandatory condition for us to provide the services offered, unless the minor is emancipated.

User Registry

When the User registers through the corresponding form, the information we collect includes:

  • Name and surname
  • Email and / or phone
  • IP
  • Username / password

In addition, the User must accept the Contract Conditions, set out in another section of the web.

The User must also provide a password, which must meet certain security requirements. They do not expire. To recover the password, the User must go to the specific recovery form and enter their email to continue with the process and be able to modify it, by clicking on the link that will be sent to the email address entered. The User is responsible for keeping his password confidential, as well as for all the uses he makes of it. You must notify "Cardstation" of any unauthorized use made of your account or password as soon as possible.

The User, once registered, has access to a private panel, in which he or she can see certain content, record of purchases, and carried out, etc. You can also manage your account options, such as password or User data.

The User may receive the following notifications:

  • When registering on the platform (account validation email).
  • When making purchases, such as proof of purchase, incidents, etc.
  • The User receives the newsletter of the store if he has registered in it, from which he can unsubscribe in his User panel and in the corresponding links included at the bottom of the newsletter. • For comments made, and responses to them.
  • By password recovery (specified in the previous field).
  • When unsubscribing or deleting the account.

Security Measures

Users of the “Cardstation” website are informed that the security, technical and organizational measures within our reach have been adopted to avoid loss, misuse , alteration, unauthorized access and theft of data, and thus guaranteeing the confidentiality, integrity and quality of the information contained therein, in accordance with the provisions of current regulations on data protection. The personal data that is collected in the forms are subject to treatment only by the personnel of "Cardstation" or the designated Treatment Managers.

The "Cardstation" Website also has SSL encryption, which allows the User to securely send their personal data through the contact or registration forms of the website.

Veracity of the data

The User declares that all the data provided by him are true and correct and undertakes to keep them updated. The User will be responsible for the veracity of their data and will be solely responsible for any conflicts or litigation that may result from their falsity. It is important that, so that we can keep the personal data updated, the User informs "Cardstation" whenever there has been any change in them.

Exercise of User Rights

The LOPD and GDD and the RGPD grant interested parties the possibility of exercising a series of rights related to the processing of their personal data. For this, the User must go, providing documentation that proves their identity (ID or passport), by email to info@cardstation.net, or by written communication to the address that appears in our Legal Notice. Said communication must reflect the following information: name and surname of the User, the object of the request, the address and the supporting data.

The exercise of rights must be carried out by the User himself. However, they may be executed by a person authorized as the User's legal representative, providing the documentation that proves said representation.

The User may request the exercise of the following rights:

  • Right to request access to personal data, which is the right to obtain information on whether their own personal data is being the object of treatment, the purpose of the treatment that, where appropriate, is being carried out, as well as the information available about the origin of said data and the communications made or planned thereof.
  • Right to request your rectification , in case the personal data is incorrect or inaccurate, or deletion of data that turns out to be inappropriate or excessive.
  • Right to request the limitation of your treatment, in which case only the data strictly necessary for the exercise or the defense of claims.
  • Right to oppose to the treatment: refers to the right of the interested party not to carry out the treatment of their personal data or to cease in the same in the cases in which your consent is not necessary for the treatment, in the case of commercial prospecting files or that have the purpose of adopting decisions regarding ies to the interested party and based solely on the automated processing of their data, unless for legitimate reasons or the exercise or defense of possible claims have to continue to be treated.
  • Right to portability of the data: in case you want your data to be processed by another company, "Cardstation" will facilitate the portability of your data in exportable format.

In the event that consent has been granted for any specific purpose, the User has the right to withdraw consent at any time, without affecting the legality of the treatment based on consent prior to withdrawal.

We promise to execute all these rights within the maximum legal term (1 month).

If a User considers that there is a problem with the way "Cardstation" is handling their data, they can direct their complaints to the Security Manager or the protection authority of corresponding data, being the Spanish Agency for Data Protection the one indicated in the case of Spain.

Preservation of data

The personal data of Users who use the contact form or who send us an email requesting information will be processed for the time strictly necessary to meet the request of information, or until the consent granted is revoked.

The Customer's personal data will be processed until the contractual relationship ends. The period of conservation of personal data will be the minimum necessary, and can be kept until:

  • 4 years: Law on Infractions and Sanctions in the Social Order (obligations regarding affiliation, registration, cancellation, contribution, payment of salaries ...); Arts. 66 and following General Tax Law (accounting books ...)
  • 5 years: Art. 1964 Civil Code (personal actions without special term)
  • 6 years: Art. 30 Commercial Code (accounting books, invoices ...)
  • 10 years: Art. 25 Law on Prevention of Money Laundering and Terrorism Financing.
  • No deadline: disaggregated and anonymized data.

For its part, the data of Users who register in the bulletin or newsletter will be kept indefinitely, until the consent granted is revoked.

Social Networks

"Cardstation" has a profile on some of the main social networks on the Internet (Facebook, Instagram), recognizing itself in all cases Responsible for the treatment of the data of its followers , fans, subscribers, commentators and other User profiles (hereinafter, followers) published by "Cardstation".

The purpose of data processing by "Cardstation", when the law does not prohibit it, will be to inform its followers about its activities and offers, by any Via that the social network allows, as well as providing personalized service to the User. The legal basis that legitimizes this treatment will be the consent of the interested party, which may be revoked at any time.

In no case will "Cardstation" extract data from social networks, unless the User's consent is specifically and expressly obtained for it (for example, to carry out a contest).

International Data Transfers

“Cardstation” uses the information analysis services of the company Clearsale LLC , which is located in the United States. No standard contractual clauses approved by the European Commission have been signed with this entity, therefore, as it is not located in a country cataloged by the control authority as a safe country (that is, its data protection legislation is not equivalent to the European) for the treatment of your personal data, it is not possible to ensure an adequate level of protection.

By accepting this privacy policy, the User expressly and unequivocally grants his consent for the international transfer of his data to this provider / company / s / s of services.


The information provided by the User will, in any case, be considered confidential, without it being used for purposes other than those described here. "Cardstation" undertakes not to disclose or reveal information about the User's claims, the reasons for the advice requested or the duration of their relationship with it.


This privacy and data protection policy has been drawn up by ExpertosLOPD®, an office specialized in data protection for online shops , as of August 16, 2021, and may vary depending on changes in regulations and jurisprudence that occur, being the responsibility of the owner of the data to read the updated document, in order to know their rights and obligations in this regard at all times.