At PROMETEA we process your personal data to the bare minimum. This policy explains what data we collect, what we use it for and what your rights as a data subject are, in compliance with Regulation (EU) 2016/679 (GDPR).
What data we collect
When you interact with the website we may collect the following data:
- Purchase of a physical book: name, postal address, phone and email. Shipping data is kept on our server for up to 24 hours, then dispatched to the distributor in a single nightly batch and deleted from our database; we only keep your email for support.
- Purchase of a digital book: email to send you the download link.
- Newsletter subscription: email and, if you provide it, your name.
- Browsing: we do not use tracking cookies. We use privacy-respecting analytics (Plausible or similar) without personal identifiers.
We do not collect sensitive data (racial origin, political opinions, health data, etc.) nor do we carry out profiling.
Purpose of processing
- Process and ship your order (physical or digital books).
- Send you the purchase confirmation and shipment tracking.
- Send you the editorial newsletter if you have subscribed.
- Comply with our accounting and tax obligations.
Legal basis
- Performance of a contract (art. 6.1.b GDPR): data processing necessary to handle your order.
- Legal obligation (art. 6.1.c GDPR): retention of accounting and tax data for the legally required periods.
- Consent (art. 6.1.a GDPR): for sending the newsletter when you subscribe voluntarily.
- Legitimate interest (art. 6.1.f GDPR): for commercial communications about our own similar products to existing customers (soft opt-in, art. 13.2 of Directive 2002/58/EC), with the right to object in every communication.
Recipients and disclosures
- Distributor: receives your shipping address to prepare the parcel via a single nightly batch email at 23:50 CET. Once dispatched, shipping data is deleted from our servers.
- Stripe: processes card payments. We never see your card details.
- BTCPay Server (self-hosted): processes Bitcoin payments. Transactions are pseudonymous by design.
- SMTP provider: sends transactional emails (confirmation, download).
- MailerLite (or equivalent): manages the newsletter if you have subscribed.
We do not carry out international data transfers outside the European Economic Area except those unavoidable through the use of US services (Stripe), covered by the European Commission's Standard Contractual Clauses.
Retention periods
- Shipping data: kept for a maximum of 24 hours, then deleted after the nightly batch is sent to the distributor.
- Buyer's email: for the duration of the commercial relationship and a maximum of 3 years from the last purchase.
- Newsletter subscriber's email: until you unsubscribe.
- Accounting data (invoices, order records): six years, according to applicable tax law.
Your rights
At any time you may exercise the following rights:
- Access: to know what data we hold about you.
- Rectification: to correct inaccurate data.
- Erasure: to have your data deleted when it is no longer necessary.
- Objection: to object to processing based on legitimate interest (e.g. to stop receiving the newsletter).
- Restriction of processing and portability in the cases provided by law.
- Withdraw consent at any time.
To exercise them, write to us at hola@prometeabtc.com indicating the right you wish to exercise.
Cookies
This website does not use tracking or third-party cookies. We only use the browser's local storage (localStorage and sessionStorage) to keep your shopping cart between pages, and that never leaves your own device.
Changes to this policy
We may update this policy to reflect legal or operational changes. We will always publish the date of the last update at the end of the document.
// Last updated: May 2026