PROFTEX LEVANTE SL PRIVACY POLICY

1. Identity of the Data Controller

In compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), we provide the following information about the data controller:

Company name: Proftex Levante SL

Tax ID (CIF): B75679977

Registered address: Calle Estrella Polar, 6, Bloque C, Puerta 1, 03006 Alicante (Alicante), Spain

Contact email: proftex@proftex.es

Website: https://proftex.es

Data Protection Officer (DPO): Not appointed (not required given the profile of the organisation).

2. Personal Data We Collect

Through the contact forms and the quote configurator available on our website, we may collect the following data:

First and last name
Email address
Phone number (if voluntarily provided)
Location
Content of the message or enquiry
Characteristics of the windows or project you specify in the configurator (material, type, dimensions, finishes)
IP address and browser type (User-Agent) of the device from which the form is submitted

In addition, only if you consent through the cookie panel (“Advertising” category), we record where your visit to the website came from, as explained in section 9.

We do not collect sensitive personal data (health data, political opinions, religion, etc.). Fields marked as mandatory are strictly necessary to process your request.

3. Purposes of Processing and Legal Basis

We process your personal data for the following purposes and on the following legal grounds:

Purpose	Description	Legal basis (Art. 6 GDPR)
Handling enquiries	Managing and responding to messages and quote requests submitted through the contact forms and the configurator.	Art. 6(1)(b) — performance of pre-contractual measures at the request of the data subject.
Commercial communications (with consent)	Sending information about products, services or news from Proftex Levante SL, only if you have given explicit consent.	Art. 6(1)(a) — consent of the data subject.
Compliance with legal obligations	Retention of data in compliance with applicable tax, commercial and other legal obligations.	Art. 6(1)(c) — legal obligation.
Website security	Preventing automated submissions and abuse of the forms by recording the IP address and browser.	Art. 6(1)(f) — legitimate interest in the security of the website.
Advertising campaign measurement (with consent)	Finding out which advert or channel generated each request, to assess the effectiveness of our advertising (see section 9).	Art. 6(1)(a) — consent of the data subject (Art. 22.2 LSSI-CE).

4. Data Retention Period

Personal data will be retained for the following periods:

Contact and enquiry data: 3 years from the last communication or the end of the relationship, unless you request erasure earlier.
IP address, browser type and request-origin data (landing page, referrer and campaign parameters): retained together with the request, for the same period as contact and enquiry data.
Data required to comply with legal obligations (tax, commercial): in accordance with the legally established periods, generally 5 to 10 years.

Once the applicable retention period has expired, data will be securely erased or anonymised.

5. Recipients and International Transfers

Your data will not be shared with third parties, except in the following cases:

Where a legal obligation requires disclosure (public authorities, courts, tax authorities, etc.).
Technology service providers acting as data processors (e.g. web hosting and digital analytics services), with whom we maintain data processing agreements in accordance with Art. 28 GDPR.

We currently use the following services that may involve data processing:

Google LLC (Google Analytics 4, Google Ads Remarketing) — possible transfers to the USA under the EU-US Data Privacy Framework.
Microsoft Corporation (Microsoft Clarity) — possible transfers to the USA under the EU-US Data Privacy Framework.
Google Ireland Ltd. (Google Workspace — corporate email, through which we receive requests) — possible transfers to the USA under the EU-US Data Privacy Framework and Standard Contractual Clauses.

No other international transfers of data take place, and your data is not shared with third parties for their own purposes.

6. Rights of Data Subjects

Under the GDPR and the LOPDGDD, you have the following rights:

Access: obtain confirmation of whether we are processing your data and, if so, access to it. This service is free of charge.
Rectification: request the correction of inaccurate or incomplete data.
Erasure (‘right to be forgotten’): request the deletion of your data when it is no longer necessary for the purposes for which it was collected.
Restriction of processing: request that processing be restricted in certain circumstances.
Data portability: receive your data in a structured, commonly used format, or request that it be transmitted to another controller.
Objection: object to the processing of your data, in particular where it is based on legitimate interests or for direct marketing purposes.
Withdrawal of consent: where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at:

Email: proftex@proftex.es
Postal address: Calle Estrella Polar, 6, Bloque C, Puerta 1, 03006 Alicante (Alicante), Spain

Please identify yourself and specify the right you wish to exercise. We will respond within a maximum of one month.

If you consider that the processing of your data infringes applicable legislation, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

7. Minors

In accordance with Article 7 of the LOPDGDD, the minimum age to consent to the processing of personal data in Spain is 14 years. Persons under the age of 14 may not provide their personal data through this website without the prior and explicit consent of their parents or legal guardians.

Proftex Levante SL does not knowingly collect or process data from persons under the age of 14. Should we become aware that we have received data from a minor without the required parental consent, we will proceed to delete it immediately.

8. Security Measures

Proftex Levante SL has implemented the technical and organisational measures necessary to ensure the security and integrity of personal data and to prevent its loss, alteration or unauthorised access, taking into account the state of the art, the nature of the data stored and the risks to which it is exposed.

9. Origin of Quote Requests (Campaign Measurement)

If you consent through the cookie settings panel (“Advertising” category), when you submit a request through our forms or the quote configurator we record, together with the request, the page through which you entered our website, the website you came from (for example a search engine or a social network), the campaign parameters in the link (utm_source, utm_medium, utm_campaign, utm_term, utm_content) and, where applicable, the advertising click identifier (Google Ads gclid, Meta fbclid or Microsoft Ads msclkid).

For this purpose we use a first-party cookie (pfx_land, 24 hours) and browser session storage (csm_wc_attr, until the tab is closed), which are only activated if you accept the “Advertising” category and are deleted if you withdraw your consent. More information is available in our Cookie Policy.

Purpose: to find out which advertising channel or campaign generated each request, to assess the effectiveness of our advertising.
Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 22.2 LSSI-CE). You can withdraw it at any time using the “Consent preferences” button on our website; withdrawal does not affect the lawfulness of earlier processing. If you do not consent, only the address of the page from which you submit the form is recorded, as it forms part of the request itself.
Retention: this data is kept together with your request for the period set out in section 4 and is then deleted.
Recipients: not disclosed to third parties.

10. Updates to this Privacy Policy

This Privacy Policy may be updated to reflect changes in legislation or modifications to our services. We recommend that you review it periodically.

Last updated: October 2026