La Nika

Privacy Policy

Last updated: March 2026

La Nika — Aurea Mediocritas (sole trader, Nikoletta Mezey, NIE: Z2520210J, Torrox Costa, Spain) respects your privacy and is committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR / Regulation 2016/679) and Spanish Organic Law 3/2018 (LOPDGDD). This policy explains how we collect, use, and safeguard your information when you visit our website or purchase services through La Nika Design Studio.

1. Data Controller

Data controller: Nikoletta Mezey (trading as La Nika — Aurea Mediocritas). Address: Pago Carlaja 1747, 29793 Torrox Costa, Málaga, Spain. NIE: Z2520210J. Contact: [email protected].

2. Personal Data We Collect

We collect: (a) Contact & newsletter data — name, email address, language preference, message content. (b) Order & billing data — full name, billing address (street, city, postal code, country), company name and tax number (if provided), email address, phone number (if provided), description of the project. (c) Transaction data — order number, date, purchased service(s), total amount, payment method. (d) Technical data — IP address, browser type, pages visited, session duration (collected via analytics cookies, anonymised where possible).

3. Purposes and Legal Basis of Processing

(a) Responding to contact form enquiries — legal basis: legitimate interest (Art. 6(1)(f) GDPR). (b) Sending newsletters — legal basis: consent (Art. 6(1)(a) GDPR); you may withdraw consent at any time. (c) Performing the design service contract — legal basis: performance of a contract (Art. 6(1)(b) GDPR). (d) Issuing invoices and fulfilling Spanish tax obligations (Autónomo) — legal basis: legal obligation (Art. 6(1)(c) GDPR). (e) Website analytics — legal basis: legitimate interest / consent via cookie banner.

4. Payment Processing — Stripe

Card payments are processed by Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Dublin 2, Ireland). We do not store card numbers, CVV codes, or any raw payment credentials. Stripe processes and stores payment data under its own Privacy Policy (stripe.com/privacy) and is certified to PCI DSS Level 1. Bank transfer payments are received via Revolut Bank UAB; no additional personal data is shared with Revolut beyond what is visible on a standard bank transfer.

5. Creative Questionnaire Data

When you complete the Creative Questionnaire as part of a Design Studio project, you may share information about your brand, vision, and business. This information is treated as strictly confidential and is used solely for the purpose of delivering your project. It is not shared with third parties, not used for marketing, and deleted upon project completion unless you request otherwise.

6. Data Retention

Contact form messages are retained for up to 2 years. Newsletter subscriber data is retained until you unsubscribe. Billing and transaction records are retained for a minimum of 5 years in accordance with Spanish tax law (Ley 58/2003 General Tributaria). Order data linked to an active project is retained for the duration of the project plus 1 year. You may request deletion of data that is not subject to a legal retention obligation.

7. Cookies

We use essential cookies for site functionality and analytics cookies to understand visitor behaviour. You can manage your cookie preferences through the cookie banner displayed on your first visit, or through your browser settings at any time.

8. Your Rights (GDPR)

Under GDPR you have the right to: access your personal data; rectify inaccurate data; request erasure (where no legal retention obligation applies); restrict or object to processing; data portability; and lodge a complaint with the Spanish Data Protection Authority (AEPD — aepd.es). To exercise any of these rights, contact: [email protected]. We will respond within 30 days.

9. Contact

For any privacy-related questions: [email protected] — La Nika, Torrox Costa, Málaga, Spain.