Privacy policy

This policy explains what personal data Mic-Mac processes when you visit micmac.es or write to us, what it uses it for and what rights you have. It is governed by Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).

Data controller

• Controller: Mic Mac Complementos, S.L.
• Tax ID (NIF): B75246298
• Registered address: C/ Ametlers, 35, 07560 Cala Millor (Son Servera), Balearic Islands, Spain
• Email: micmac@micmac.es

Mic-Mac has not appointed a data protection officer because it is not required to do so.

What data we process

• When you write to us through the contact form: your name, email address, phone number (if you give it) and your message. They come with the language and page you are writing from and the date you sent it. Name, email and message are required: without them we cannot reply. The phone number is optional.
• When you email or call us: the data you give us in that communication.
• When you browse the website: your IP address and the technical data your browser sends (browser and device type, language, screen size, referring page), the pages you visit and some actions, such as clicking «Request a quote», a phone number or an email address, or applying catalogue filters. We use them to serve the website, protect it from abuse and measure its audience in aggregate statistics, as explained below.

We do not ask for special categories of data. Please do not include them in your messages.

What we use it for and on what legal basis

Purpose	Legal basis
Answering your enquiry and, if you ask, preparing a quote and following it up	If you write on your own behalf (for example, as a sole trader), steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR). If you write on behalf of a company, our legitimate interest in maintaining the relationship with it, limited to your contact details and job title (Art. 6(1)(f) GDPR and Art. 19 LOPDGDD). For other enquiries, our legitimate interest in answering them (Art. 6(1)(f) GDPR)
Sending you commercial information by electronic means	Your consent (Art. 6(1)(a) GDPR) or, if you are a customer, our legitimate interest in telling you about products similar to those you have bought from us (Art. 21 of Spanish Law 34/2002, LSSI-CE)
Protecting the form and the website against spam and automated attacks	Our legitimate interest in the security of the website (Art. 6(1)(f) GDPR)
Measuring the website’s audience with aggregate statistics, without cookies, to learn which pages and products are of interest and improve it	Our legitimate interest in knowing how the website is used (Art. 6(1)(f) GDPR). You can object from the cookie policy
Showing you the interactive Google Maps map on the contact page, only if you ask for it	Your consent, given when you click «Show interactive map» (Art. 6(1)(a) GDPR)

The checkbox on the form is there to confirm that you have read this policy; it is not the legal basis for the processing.

If you receive commercial information from us, you can object at any time and in every message.

We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. The anti-spam system may block a submission that looks automated; if this happens to you, write to micmac@micmac.es.

How long we keep it

• Enquiries and quotes: for as long as needed to handle and follow them up. If you do not become a customer, we delete them no later than one year after our last communication. If you do, we keep them for as long as the business relationship lasts and then, blocked, for the legal periods: six years for business correspondence and documents (Art. 30 of the Spanish Commercial Code), four years for tax purposes (Art. 66 of the Spanish General Tax Law) and five years to deal with claims (Art. 1964 of the Spanish Civil Code).
• Audience measurement: your IP address is not stored. The browser identification is stored separately for up to three months, and the statistics for up to 25 months.
• Security: the counters that limit form submissions are deleted after 60 seconds, and the technical logs of requests to the server are kept for up to 7 days. Cloudflare keeps Turnstile signals according to its own policy.

Who receives it

We only disclose your data to third parties when the law requires it and in the cases listed below.

The following process data on Mic-Mac’s behalf, as processors and only to provide their service:

• 3idees (Martí Pascual Umbert), which develops and maintains the website and manages the hosting, email delivery and measurement services below for Mic-Mac.
• Cloudflare, Inc. (United States): website hosting, content delivery network and form protection (Cloudflare Turnstile).
• Plus Five Five, Inc., «Resend» (United States): delivery of form messages to our mailbox.
• Emvi Software GmbH, «Pirsch Analytics» (Germany): audience measurement.
• InfoArtà: Mic-Mac’s email service, where we receive and store your messages. It hosts it on servers of Liquid Web, L.L.C., in the United States.

In addition:

• Cloudflare, Inc. uses, as a controller, the technical signals that Turnstile collects when protecting the form to improve its bot detection, according to its Turnstile privacy policy.
• Google Ireland Limited, only if you load the interactive map. Mic-Mac and Google are joint controllers for the collection and transmission to Google, at that moment, of your IP address and browser data, based on your consent. What Google does with them afterwards is decided by Google alone, according to its privacy policy. You can exercise your rights against either of them.

International transfers

Cloudflare, Resend and Liquid Web (Mic-Mac’s mail server) process data in the United States. All three participate in the EU-U.S. Data Privacy Framework, which the European Commission recognised as providing an adequate level of protection in its Implementing Decision (EU) 2023/1795 of 10 July 2023.

Your rights

You can exercise your rights of access, rectification, erasure, restriction of processing and data portability at any time, and withdraw any consent you have given, without affecting the lawfulness of processing carried out before.

Right to object. You can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest, such as audience measurement, and always, without giving reasons, to receiving commercial information.

To exercise your rights, write to micmac@micmac.es or by post to our registered address, stating which right you wish to exercise. We will only ask you to prove your identity if we have reasonable doubts about it. We will reply within one month. If, because of the complexity or number of requests, we need up to two more months, we will tell you within the first month.

To object to audience measurement in your browser or stop the map from loading automatically, use the controls in the cookie policy.

Complaints to the supervisory authority

If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001 Madrid, Spain; www.aepd.es) or with the supervisory authority of the EU country where you live or work. We would appreciate it if you wrote to us first so we can try to resolve it.

Minors

This website is aimed at businesses. We do not knowingly collect data from children under 14. If we find out that we have, we will delete it.

Security

We apply technical and organisational measures appropriate to the risk to protect your data. For example, the website only works over an encrypted connection (HTTPS) and the form is protected against automated use.

Changes to this policy

We may update this policy when the processing or the law changes. The date of the last update is shown at the top of the page.

If the language versions of this policy differ, the Spanish version prevails.