Privacy policy

1. Who is responsible for your data?

The data controller responsible for the personal data collected through the website www.dalrit.com is:

DALRIT, S.L.
Tax ID No.: B07596174
Address: C/ Quatre Boques, 4, Polígono Industrial La Trotxa, 07730 Alaior, Illes Balears, Spain
Telephone: 971 371 155
Email: dalrit@dalrit.com

2.- Applicable regulations

DALRIT, S.L. processes personal data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights, and any other applicable data protection regulations.

3.- What personal data do we process?

Depending on how you use the website, DALRIT, S.L. may process the following categories of personal data:

Identification details, such as your name and surname.
Contact details, such as your postal address, telephone number and email address.
Data required creating and managing a user account.
Billing and delivery details.
Information related to orders, payments, returns, enquiries or complaints.
Preferences regarding commercial communications.
Technical and browsing data obtained through cookies or similar technologies, as explained in the Cookie Policy.

You should not provide specially protected personal data unless it is strictly necessary for the specific form or service you are using.

We collect personal data directly from you when you complete a form, create an account, place an order, contactDALRIT, S.L. or use the services available through the website.

4.- Why do we process your data and on what legal basis?

4.1. Enquiries and requests for information

We process the data you provide through the contact form, by email, by telephone or through other channels in order to respond to your enquiries, requests for information, incidents or communications.

The legal basis for this processing is your consent when you send us the enquiry. Where the request relates to a possible purchase or contract for products or services, the legal basis is the application of pre-contractual measures requested by you.

4.2. Creation and management of user accounts

When you create a user account, we process your data to register and identify you, allow you to access your private area, manage your details, view your orders and make future purchases easier.

The legal basis is the application of pre-contractual measures and the performance of the contractual or user relationship requested by you.

4.3. Orders and purchases

We process your personal data in order to:

Process and manage your orders.
Manage payment for the products.
Prepare, dispatch and deliver orders.
Send confirmations, invoices and shipping updates.
Manage exchanges, returns, incidents, warranties and complaints.
Provide customer support.

The legal basis is the performance of the purchase contract entered into with the customer.

Payment data may be processed directly by the bank or payment service provider used at any given time. DALRIT, S.L. does not process full bank card details when payment is made through a secure external payment gateway.

4.4. Compliance with legal obligations

We process customer data and transaction data in order to comply with accounting, tax, commercial, consumer protection, food safety and other legal obligations applicable to DALRIT, S.L.

The legal basis is compliance with a legal obligation.

4.5. Commercial communications

If you expressly authorise us to do so, DALRIT, S.L. may use your email address or other contact details to send you commercial information about its products, news, offers or promotions.

The legal basis is your consent.

Where there is a prior contractual relationship, DALRIT, S.L. may send you commercial communications about its own products that are similar to those you have previously purchased, provided that the requirements established by applicable law are met.

You may object to or withdraw your consent at any time by using the unsubscribe link included in each communication or by writing to dalrit@dalrit.com.

Refusing to receive commercial communications will not affect the handling of your enquiries, orders or contractual relationships.

DALRIT, S.L. will not disclose your personal data to other companies so that they can send you their own advertising, unless you are expressly informed and have given your specific prior consent.

4.6. Website security and fraud prevention

Technical data, access logs and other necessary information may be processed to ensure the security of the website, prevent unauthorised access, detect fraudulent activity and protect the rights, assets and legitimate interests ofDALRIT, S.L., its customers and third parties.

The legal basis isDALRIT, S.L.’s legitimate interest in protecting its systems, services and business operations, without prejudice to any applicable legal obligations.

4.7. Cookies and similar technologies

Necessary technical cookies are used to allow the website to function properly, manage sessions, keep the shopping cart and provide the services requested by the user.

Analytical, personalisation, advertising or third-party cookies will only be installed if the user has given consent through the cookie settings panel.

Further information is available in the Cookie Policy.

5.- Mandatory information

Fields marked as mandatory must be completed in order for us to deal with your request, create your account or process your order.

If you do not provide the necessary information, DALRIT, S.L. may be unable to provide the requested service or properly perform the contractual relationship.

You guarantee that the data you provide are true, accurate and up to date, and you must inform us of any changes.

If you provide personal data relating to third parties, you must ensure that you are authorised to do so and that you have informed those third parties about the processing of their data.

6.- Who may receive your data?

Where necessary, personal data may be disclosed to:

Banks and payment service providers, in order to manage and authorise payments.
Transport, courier and logistics companies, in order to prepare, carry out and track deliveries.
Public administrations, courts, law enforcement authorities or other competent authorities, where there is a legal obligation.
Advisers, auditors and external professionals, where necessary to comply with legal obligations or to file, exercise or defend claims.

DALRIT, S.L. may also allow access to personal data by providers of web hosting, IT maintenance, email services, online store management, backup services, customer support or other services necessary for the operation of the company.

These providers will act as data processors and will be subject to the corresponding contractual obligations regarding confidentiality, security and data protection.

Your data will not be sold or transferred to third parties for their own commercial purposes without your prior consent.

7.- International data transfers

Certain technology, analytics, advertising, social media or digital service providers may be located outside the European Economic Area or may process data from third countries.

Where an international data transfer takes place, DALRIT, S.L. will verify that it is carried out on the basis of an adequacy decision by the European Commission, standard contractual clauses, binding corporate rules or any other safeguard accepted under data protection regulations.

Specific information about transfers related to cookies or third-party services will be included in the Cookie Policy.

8.- How long do we keep your data?

Personal data will be kept for the following periods or according to the following criteria:

Enquiries and requests for information: for the time necessary to handle and close the enquiry and, subsequently, for the time required to deal with any possible liabilities.
User accounts: while the account remains active or until the user requests its deletion, without prejudice to the retention of data related to orders and legal obligations.
Orders and contractual relationships: for the duration of the contractual relationship and, subsequently, for the legal periods applicable in commercial, tax, accounting, consumer and liability matters.
Invoices and accounting documents: for the retention periods established by tax and commercial regulations.
Commercial communications: until the data subject withdraws consent or objects to receiving them.
Data necessary to prove that the user has unsubscribed from commercial communications: this may be kept on a limited basis to ensure that no further unsolicited communications are sent.
Cookies: for the period indicated for each cookie in the Cookie Policy.

When the data are no longer necessary for the purpose for which they were collected, they will be blocked for the limitation periods applicable to any possible liabilities and will then be securely deleted.

9.- Your rights

You may exercise the following rights:

The right to access your personal data.
The right to rectify inaccurate or incomplete data.
The right to request the deletion of your data where the legal requirements are met.
The right to object to the processing of your data.
The right to request the restriction of processing.
The right to data portability, where applicable.
The right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
The right not to be subject to decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you, where applicable.

You may exercise your rights by sending a request to:

DALRIT, S.L
C/ Quatre Boques, 4, Polígono Industrial La Trotxa
07730 Alaior, Illes Balears, Spain
Email: dalrit@dalrit.com

Your request must indicate the right you wish to exercise and include the information necessary to identify you.

DALRIT, S.L. will only request additional documentation to verify your identity where there are reasonable doubts about the person making the request.

You may also lodge a complaint with the Spanish Data Protection Agency through its electronic office or through any other channels made available by that authority.

10.- Automated decision-making

DALRIT, S.L. does not make decisions based solely on automated processing of personal data that produce legal effects concerning the user or similarly significantly affect the user.

11.- Security and confidentiality

DALRIT, S.L. applies appropriate technical and organisational measures to protect personal data and prevent their destruction, loss, alteration, unauthorised access, disclosure or processing.

All persons involved in processing personal data are subject to the corresponding duty of confidentiality.

However, users should be aware that no IT system or transmission of information over the internet can guarantee absolute security.

12.- Minors

The purchasing services offered through the website are not specifically aimed at minors.

Children under the age of fourteen must not provide personal data through the website without the authorisation of their parents, guardians or legal representatives.

13.- Changes to this Privacy Policy

DALRIT, S.L. may amend this Privacy Policy to adapt it to legislative changes, criteria issued by supervisory authorities, technical changes to the website or new data processing activities.

The current version will always be available on the website and will indicate the date of its latest update.