Tell us your deepest desires... we will keep the secret.

Leading online erotic store for the Arab community

Privacy Policy

Below is the Privacy Policy for ASRAR (asrarsecrets.com), drafted in compliance with Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPDGDD), and Law 34/2002 on Information Society Services and Electronic Commerce (LSSI), as in force on 6 May 2025.

This Policy explains who we are, what personal data we collect, for which purposes and legal bases, how long we retain it, with whom we share it, the rights of data subjects, and the security measures we implement. It also covers the use of cookies and third-party links, and how we notify you of any updates.

1. Data Controller

Entity: ASRAR – NIF X2144949-S
Address: Calle Padre Vicent nº 12-5, Spain
Phone: (+34) 634 160 435
Email: info@asrarsecrets.com

ASRAR is the “Controller” of personal data gathered via asrarsecrets.com, determining the purposes and means of processing.

2. Data Collected and Purposes

2.1. Voluntarily Provided Data

  • Identification & Contact: name, surname, NIF/CIF, postal address, phone, email.

  • Billing Data: billing address, payment method, card details (when applicable).

Purposes:

  1. Processing orders and issuing invoices (execution of contract)

  2. Customer service and inquiries.

  3. Sending promotional communications, only with prior consent.

2.2. Technical & Analytics Data (Cookies)

  • Technical Cookies: required for site navigation and basic functions.

  • Preference Cookies: to remember choices and personalize the experience.

  • Analytical Cookies: to obtain usage statistics and improve the website (only after consent).

Use of non-essential cookies requires clear information and prior consent under Article 22 LSSI.

3. Legal Bases for Processing

  • Contract Performance (Art. 6.1 (b) GDPR): management of orders and billing.

  • Consent (Art. 6.1 (a) GDPR): for newsletters and non-essential cookies, freely given, specific, informed and unambiguous.

  • Legal Obligation (Art. 6.1 (c) GDPR): compliance with accounting and tax duties.

4. Data Retention

  • Contractual Data: retained for the duration of the contract plus 5 years for fiscal and accounting obligations.

  • Cookie & Analytics Consents: until withdrawal of consent.

5. Recipients of Data

  • Public Authorities: when legally required (e.g. tax inspections).

  • Logistics & IT Service Providers: as Processors bound by GDPR Art. 28.

  • Other Processors: e-mail marketing, payment gateways, etc., all under contractual confidentiality.

6. Rights of Data Subjects

Under Articles 15–22 GDPR and LOPDGDD, you have the right to:

  1. Access your personal data.

  2. Rectify inaccurate data.

  3. Erase data (“right to be forgotten”).

  4. Restrict or object to processing.

  5. Data portability.

  6. Withdraw consent at any time (without affecting prior lawful processing).

To exercise these rights, send a written request with a copy of your ID to ASRAR (Calle Padre Vicent nº 12-5) or to info@asrarsecrets.com

7. Security Measures

ASRAR implements appropriate technical and organizational measures to ensure confidentiality, integrity, availability and resilience of processing systems, in line with GDPR Art. 32 and Chapter IV LOPDGDD. Such measures include access control, encryption, regular vulnerability assessments, and employee training.

8. Third-Party Links

Our site may contain links to external websites whose privacy practices are outside our control. We recommend reviewing their policies before providing any personal data.

9. Policy Updates

We may update this Policy to reflect legal or operational changes. Any revision will include the “Last Updated” date below.
Last Updated: 6 May 2025.

If you have any questions about this Policy, please contact us at info@asrarsecrets.com.