Privacy policy
Privacy Policy of www.lioramadrid.com
Owner and Data Controller:
Arturo López Rodríguez (54289575F)
PLZA. ALQUERIA NOVA
16 P08 Pta.40 46950 Xirivella (Valencia)
Owner contact email and email for data protection matters: info@lioramadrid.com
Applicable regulations
Our Privacy Policy has been designed in accordance with EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), as well as Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights. Where the User is located in the United Kingdom, the equivalent UK GDPR and the Data Protection Act 2018 will apply.
By providing your data, you declare that you have read and understood this Privacy Policy, granting your unambiguous and express consent to the processing of your personal data for the purposes and in accordance with the terms set out herein.
The Company may modify this Privacy Policy in order to adapt it to legislative or case-law developments, or to interpretations issued by the Spanish Data Protection Agency (or, where applicable, the UK Information Commissioner's Office). These privacy conditions may be supplemented by the Legal Notice, the Cookie Policy and the General Terms and Conditions which, where applicable, are established for specific products or services, if such access entails any specific aspect regarding the protection of personal data.
Data Protection Officer
No Data Protection Officer has been appointed.
PURPOSE OF THE PROCESSING OF PERSONAL DATA
The processing we carry out of your personal data responds to the following purposes:
- Providing you with information related to the products and services offered by our company and which
- are detailed on this website.
- Entering into the provision of our services through the acceptance of the corresponding quotation / order and/or the signing of a commercial contract.
- Sending you, by email and/or post, news and updates about our company, as well as updates to our catalogue of products and services.
Data Retention Period
We will retain your personal data from the moment you give us your consent until you withdraw it or request the restriction of processing. In such cases, we will keep your data blocked for the legally required periods.
LEGAL BASIS AND DATA COLLECTED
The legal basis for the processing of your data is the express consent granted through a positive and affirmative action (filling in the corresponding form and ticking the box accepting this policy) at the moment your personal data is provided to us.
Consent to process your data
By filling in the forms, ticking the "I accept the Privacy Policy" box and clicking to submit the data, or by sending emails to the Company through the accounts enabled for that purpose, the User declares having read and expressly accepted this privacy policy, and grants their unambiguous and express consent to the processing of their personal data in accordance with the indicated purposes.
Categories of Data collected
Among the categories of Personal Data collected by this Website, either directly or through third parties, are: Trackers; Usage Data; first name; last name(s); billing address; shipping address; phone number; payment information; device information; email address; number of Users; session statistics; User ID.
automatically when this Website is used. Unless otherwise indicated, all Data requested by this Website is mandatory and refusal to
provide it may make it impossible for this Website to provide its services. In cases where this Website specifically indicates that certain Data is not mandatory, Users will be free not to communicate such Data without any consequence on the availability or operation of the Service.
Users who have doubts about which Data is mandatory may contact the Owner. The use of Cookies - or other tracking tools - by this Website or by the providers of third-party services used by this Website serves the purpose of providing the Service requested by the User, in addition to
any other purposes described in this document and in the Cookie Policy.
The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Website.
Security Measures
As part of our commitment to ensuring the security and confidentiality of your personal data, we inform you that the necessary technical and organisational measures have been adopted to ensure the security of personal data and prevent its alteration, loss, processing or unauthorised access, taking into account the state of the art, the nature of the data stored and the risks to which it is exposed, in accordance with Art. 32 of EU GDPR 679/2016.
Data transfers
No data transfers or international transfers of your data are foreseen, except for those authorised by tax, commercial and telecommunications legislation, or in cases where a judicial authority requires us to do so.
Methods of Processing
The Owner shall process the Users' Data in an appropriate manner and shall adopt the appropriate security measures to prevent unauthorised access, disclosure, alteration or destruction of the Data.
be accessed by certain categories of authorised persons, related to the operation of this Website (administration, sales, marketing, legal department and system administration) or external contractors providing
services to the Owner (such as external technical service providers, courier companies, hosting providers, IT companies, communication agencies) who will be appointed by the Owner as Data Processors, where necessary. An updated list of such persons may be requested from the Owner at any time.
Place
The Data is processed at the Owner's offices, as well as in any other place where the parties involved in the processing are located.
Depending on the location of the Users, Data transfers may involve the transfer of Users' Data
to a country other than their own. For more information about the place of processing of such transferred Data, Users may consult the section containing the details about the processing of Personal Data.
Retention period
Unless otherwise indicated in this document, Personal Data will be processed and stored for as long as necessary and for the purpose for which they were collected and may be retained for a longer period due to a relevant
legal obligation or based on the consent of the Users.
Purpose of the Processing of the Data collected
Data concerning the User is collected to allow the Owner to provide its Service, comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of its Users or third parties), detect any malicious or fraudulent activity, as well as for the following purposes: Payment management, Platform and hosting services, Tag Management, Statistics, Remarketing and behavioral targeting, Advertising and Contacting the User.
Users may find specific information on the personal Data used for each purpose in the "Detailed information on the Processing of Personal Data" section.
Personal Data is collected for the following purposes and using the following services: Contacting the User Contact form (this Website)
By filling in the contact form with their Data, the User authorises this Website to use such data to respond to requests for information, quotations or any other type indicated in the form's heading.
Statistics
Google Analytics (Universal Analytics) (Google Ireland Limited)
Google Analytics (Universal Analytics) is a web analytics service provided by Google Ireland Limited ("Google"). Google uses the Data collected to track and examine the use of this Website, prepare reports on its activities and
Place of processing: Ireland – Privacy Policy – Opt Out.
Google Analytics 4 (Google Ireland Limited)
Google Analytics 4 is a web analytics service provided by Google Ireland Limited ("Google"). Google uses the Data collected to track and examine the use of this Website, prepare reports on its activities and share them with other
Google services.
Google may use the Data collected to contextualise and personalise the ads of its own advertising network. In Google Analytics 4, IP addresses are used at the moment of collection and then discarded before the Data is
recorded in any data centre or server. Users may obtain more information by consulting Google's official documentation.
Personal Data processed: number of Users; Usage Data; session statistics; Trackers.
Place of processing: Ireland – Privacy Policy – Opt Out.
Meta Events Manager (Meta Platforms Ireland Limited)
Meta Events Manager is a statistics service provided by Meta Platforms Ireland Limited. By integrating the Meta pixel, Meta
Events Manager can provide the Owner with information about traffic and interactions on this Website.
Personal Data processed: Usage Data; Trackers.
Place of processing: Ireland – Privacy Policy – Opt out.
Tag Management
This type of service helps the Owner to manage the tags or scripts needed on this Website in a centralised way.
This means that the Users' Data passes through these services, which may result in the retention of such Data.
Google Tag Manager is a tag management service provided by Google Ireland Limited. Personal Data processed: Usage Data; Trackers.
Place of processing: Ireland – Privacy Policy.
Payment management
Unless otherwise specified, this Website processes all payments by credit card, bank transfer or by any other means through external payment service providers. In general, and unless otherwise indicated, Users
shall provide their payment details and personal information directly to such payment service providers. This Website does not intervene in the collection and processing of such information; instead, it will only receive a
notification from the relevant payment service provider indicating whether the payment has been made successfully.
Google Pay is a payment service provided by Google Ireland Limited, allowing Users to make online payments using their Google credentials.
Personal Data processed: Usage Data; various types of Data, as specified in the service's Privacy Policy; Trackers.
Place of processing: Ireland – Privacy Policy.
PayPal is a payment service provided by PayPal Inc., allowing Users to make online payments.
Personal Data processed: last name(s); Usage Data; email address; billing address; various types of
Data, as specified in the service's Privacy Policy; payment information; first name; phone number.
Place of processing: Consult PayPal's privacy policy – Privacy Policy.
This type of service allows Users' Data to be used for advertising communication purposes. These communications are displayed in the form of banners and other ads on this Website, possibly based on Users'
interests. This does not mean that all Personal Data is used for this purpose. Information and conditions of use are detailed below.
Some of the services indicated below may use Trackers to identify Users or may use the technique of behavioral retargeting, that is, displaying personalised advertisements based on the User's interests and behaviour, including those obtained outside this Website. For more information, please check the privacy policies of the relevant services.
Services of this kind normally offer the possibility to disable such tracking. In addition to the disabling functionalities provided by any of the services listed below, Users may learn more about how to generally disable interest-based advertising in the specific section "How to disable interest-based advertising" in this document.
Pinterest Ads is an advertising service provided by Pinterest, Inc. that allows the Owner to carry out advertising campaigns
on the Pinterest advertising network.
Users may disable behavioural advertising functionalities through the configuration options of their devices, their personalisation options of Pinterest configuration.
Personal Data processed: Usage Data; email address; User ID; Trackers.
Place of processing: USA – Privacy Policy – Opt out.
Google AdSense (Google Ireland Limited)
Google AdSense is an advertising service provided by Google Ireland Limited. This service uses the "DoubleClick" Cookie, which tracks the use of this Website and User behaviour in relation to advertisements,
products and services offered.
Users may decide to disable all DoubleClick cookies at: Ad Settings.
Personal Data processed: Usage Data; Trackers.
Place of processing: Ireland – Privacy Policy – Opt Out.
Google Ads Similar audiences (Google Ireland Limited)
Similar audiences is an advertising and behavioral targeting service provided by Google Ireland Limited that uses Data
derived from Google Ads Remarketing in order to display ads to Users with behaviour similar to that of
Users already on the remarketing list because they have used this Website in the past.
Based on this Data, personalised ads will be shown to Users suggested by Google Ads Similar
audiences.
Users who do not wish to be included in Similar audiences may opt out and disable the use of advertising Trackers using the following link: Google Ads Settings.
To understand Google's use of Data, see Google's partner policy.
Personal Data processed: Usage Data; Trackers.
Place of processing: Ireland – Privacy Policy – Opt Out.
This type of service allows this Website and its partners to distribute, optimise and display advertisements based on the User's history of use of this Website. This activity is facilitated by tracking Users' Data and using Trackers to collect information that is then transmitted to the partners that manage the remarketing and behavioural
targeting activity.
Some services offer a remarketing option based on email address lists.
Services of this kind normally offer the possibility to disable such tracking. In addition to the disabling functionalities provided by any of the services listed below, Users may learn more about how to generally disable interest-based advertising in the specific section "How to disable interest-based advertising" in this document.
Google Ads Remarketing is a remarketing and behavioral targeting service provided by Google Ireland Limited that
connects the activity of this Website with the Google Ads advertising network and the DoubleClick cookie.
To understand Google's use of Data, see Google's partner policy. Users may disable Google's use of Trackers for advertising personalisation in
Google Ads Settings.
Personal Data processed: Usage Data; Trackers.
Place of processing: Ireland – Privacy Policy – Opt Out.
Facebook Remarketing (Meta Platforms Ireland Limited)
Facebook Remarketing is a remarketing and behavioral targeting service provided by Meta Platforms Ireland Limited that
connects the activity of this Website with the Meta advertising network.
Personal Data processed: Usage Data; Trackers.
Place of processing: Ireland – Privacy Policy – Opt Out.
Platform and hosting services These services aim to host and run the key components of this Website, allowing the
provision of this Website from a unified platform. These platforms provide the Owner with a wide range of tools (e.g. statistics, user registration, comments, database management, e-commerce, payment
processing) involving the collection and processing of Personal Data.
Some of these services operate through geographically distributed servers, making it difficult to determine the actual location where Personal Data is stored.
Shopify (Shopify International Limited)
Shopify is a platform offered by Shopify International Limited that allows the Owner to design, run and host an e-commerce website.
Personal Data processed: last name(s); Usage Data; email address; shipping address; billing
address; payment information; device information; first name; phone number.
Place of processing: Ireland – Privacy Policy.
Information on disabling interest-based advertising
In addition to the disabling functionalities offered by any of the services listed in this document,
Users may obtain more general information on how to disable interest-based advertising in the specific section of the Cookie Policy.
Cookie Policy
This Website uses Trackers. For more information, Users may consult the Cookie Policy. More information for users
Legal basis for Processing The Owner may process the User's Personal Data if one of the following conditions applies: When Users have given their consent for one or more specific purposes. Notice: Under various
different legislations, the Owner may be authorised to process Personal Data until the User objects to it ("opt-out"), without the need for consent or any other legal basis. However, this will not be
applicable when the processing of Personal Data is subject to European legislation on the protection of Personal Data; When the obtaining of Data is necessary for the performance of a contract with the User and/or any other
pre-contractual obligation thereof; When the processing is necessary for the fulfilment of a legal obligation binding on the
User; When the processing is related to a task carried out in the public interest or in the exercise of official authority granted to the Owner; When the processing is necessary for the purposes of a legitimate interest pursued by the Owner or a third party.
particular, whether the provision of Personal Data is a contractual or statutory requirement or a requirement necessary to
enter into a contract.
By using our website, you (the visitor) agree to allow third parties to process your IP address to determine your location for the purpose of currency conversion. You also agree to that currency being stored in a session cookie in your browser (a temporary cookie that is automatically deleted when you close your browser). We do this so that the selected currency remains selected and consistent when browsing our website so that prices can be converted into your local currency (the visitor's). More information about retention time
Unless otherwise indicated in this document, Personal Data will be processed and stored for as long
as necessary and for the purpose for which they were collected and may be retained for a longer period due to a relevant
legal obligation or based on the consent of the Users.
Therefore:
Personal Data collected for the formalisation of a contract between the Owner and the User shall be retained
as such until that contract has been fully performed.
Personal Data collected in the legitimate interest of the Owner shall be retained for as long as necessary
to fulfil that purpose. Users may find specific information regarding the legitimate interest of the
Owner by consulting the relevant sections of this document or by contacting the Owner.
The Owner may retain Personal Data for an additional period when the User gives their consent to such
processing, provided that such consent remains in force. In addition, the Owner shall be obliged to retain Personal Data
for an additional period whenever required to comply with a legal obligation or by order of the
competent authority.
Once the retention period has expired, Personal Data shall be deleted. Therefore, the rights of access,
modification, rectification and data portability cannot be exercised once such period has expired.
Users' rights
Users may exercise certain rights regarding the processing of Data by the Owner.
In particular, Users have the right to do the following, to the extent permitted by law:
Withdraw their consent at any time. Users have the right to withdraw their consent where they had
previously granted it for the processing of their Personal Data.
Object to the processing of their Data. Users have the right to object to the processing of their Data if such
processing is carried out on a legal basis other than consent.
Access their Data. Users have the right to know whether their Data will be processed by the Owner, to obtain
information about certain aspects of the processing, as well as to obtain a copy of the Data being processed.
Verify and request modification. Users have the right to verify the accuracy of their Data and request that
they be updated or corrected.
Restrict the processing of their Data. Users have the right to restrict the processing of their Data. In that case,
the Owner shall only process their Data for the purpose of storing it.
Erase or delete the Personal Data. Users have the right to obtain the erasure of their Data by the
Owner.
Receive their Data and transfer it to another controller. Users have the right to receive their Data in a structured,
commonly used and machine-readable format and, where technically feasible, to have it transmitted to another
controller without any hindrance.
Lodge a complaint. Users have the right to lodge a complaint before the competent authority for the
protection of personal data.
Users will also have the right to know the legal bases for the transfers of Data abroad, including to
any international organisation governed by Public International Law or formed by two or more countries,
such as the UN, and to know the security measures taken by the Owner to safeguard their Data.
Details on the right to object to processing
Where the processing of Personal Data is in the public interest, in the exercise of official authority granted
to the Owner or on the basis of a legitimate interest of the Owner, Users may object to such processing by stating a
reason related to their particular situation to justify their objection.
Users should know, however, that if their Personal Data is processed for direct marketing purposes,
they may object at any time to such processing, free of charge and without the need for justification.
When the User objects to processing for direct marketing purposes, the Personal Data may not continue
being processed for such purposes. To know whether Users' Personal Data is being processed by the Owner
for direct marketing purposes, Users should consult the relevant sections of this document.
How to exercise these rights
Any request to exercise the User's rights may be addressed to the Owner through the contact details provided in this document. Such requests are free of charge and the Owner will respond to them as soon as possible and always
within one month, providing Users with the information required by law. The Owner will communicate any rectification or erasure of Personal Data or restriction of processing to each recipient, where applicable, to whom the
Personal Data has been communicated, unless this proves impossible or requires disproportionate effort. At the User's request, the Owner will inform them of such recipients. Additional information on Data collection and processing.
Legal defence
The User's Personal Data may be used for the legal defence of the Owner before a court of law or in the judicial phases prior to a possible litigation arising from the improper use of this Website or related Services.
The User declares to be aware that the Owner may be required by public authorities to disclose Personal Data.
Additional information about the User's Personal Data
In addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual information regarding specific Services or the collection and processing of Personal Data.
System log and maintenance
For operational and maintenance reasons, this Website and any other service provided by third parties that is used may collect a system log; that is, files that record the interaction with this Website and which
may contain Personal Data, such as the User's IP address.
Information not contained in this privacy policy
Additional information about the collection and processing of Personal Data may be requested from the Owner at any time. Contact information is provided at the beginning of this document.
Modification of this privacy policy
The Owner reserves the right to modify this privacy policy at any time, notifying Users through this page and, where possible, through this Website and/or, if technically and legally possible, by directly notifying Users, where the Owner has the contact information necessary for this purpose. It is strongly recommended to check this page frequently, taking as a reference the date of the last update indicated at the
end of the page. In the event that the changes affect processing activities carried out on the basis of the User's consent, the
Owner shall obtain, where necessary, the User's new consent.
Definitions and legal references
Personal Data (or Data)
Personal data is any information which, directly, indirectly or in connection with other information – including
a personal identification number – allows the identification of a natural person.
Usage Data
The information collected automatically by this Website (or by third-party services used by this Website),
may include: the IP addresses or domain names of the computers used by the User connecting to this
Website, the URI (Uniform Resource Identifier) addresses, the time of the request, the method used to make the
request to the server, the size of the file obtained in response, the numerical code indicating the status of the server
response (successful, error, etc.), the country of origin, the characteristics of the browser and operating system
used by the visitor, the various time coordinates of the visit (for example, the time spent on each
page) and the details concerning the path followed within the Application, with particular reference to the sequence of
pages consulted, the parameters concerning the operating system and the User's IT environment.
User
The individual using this Website who, unless otherwise indicated, shall coincide with the Data Subject.
Data Subject
The natural person to whom the Personal Data refers.
Data Processor (or Processor)
The natural or legal person, public administration, agency or any other body, that processes the Personal Data on
behalf of the Data Controller, described in this privacy policy.
Data Controller (or Owner)
The natural or legal person, public administration, agency or any other body, acting alone or
jointly with others, that determines the purposes and means of the processing of Personal Data, including the security measures
relating to the operation and use of this Website. Unless otherwise specified, the Data Controller
is the Owner of this Website.
This Website (or this Application)
The means through which the User's Personal Data is collected and processed.
Service
The service provided by this Website, as described in the legal definitions and references (where available)
and on this page or application.
European Union (or EU)
Unless otherwise indicated, all references to the European Union in this document include all current
Member States of the European Union and of the European Economic Area.
Cookie
Cookies are Trackers consisting of small amounts of data stored in the User's browser.
Tracker
Tracker means any technology - e.g. Cookies, unique identifiers, web beacons, embedded scripts, entity tags
and fingerprinting - that allows tracking of Users, for example, by accessing or storing information
on the User's device.
Legal information
This privacy policy refers only to this Website, unless otherwise indicated in this document.
USER RIGHTS
Any data subject has the right to obtain confirmation as to whether or not we are processing personal data concerning them. Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where applicable, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. Under certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain it for the exercise or defence of claims. For reasons related to their particular situation, data subjects may object to the processing of their data. The data Controller will cease processing the data, except for compelling legitimate reasons, or the exercise or defence of possible claims.
In accordance with the legislation in force you have the following rights: the right to request access to your personal data, the right to request its rectification or deletion, the right to request the restriction of its processing, the right to object to processing, the right to data portability and likewise, the right to withdraw the consent granted. Likewise, you have the right to lodge a complaint with the Spanish Data Protection Agency (or, where applicable, with the UK Information Commissioner's Office).
How to exercise my rights?
To exercise your rights, you must contact the controller, requesting the corresponding form for the exercise of the chosen right. Optionally, you may apply to the competent Supervisory Authority to obtain additional information about your rights. The contact details for the exercise of your rights are the email address: info@lioramadrid.com. Remember to enclose a copy of a document that allows us to identify you.
CONSENT TO RECEIVE ELECTRONIC COMMUNICATIONS
Likewise, and in accordance with the provisions of Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE), by completing the data collection form and ticking the corresponding box "I accept the sending of electronic communications", you are granting express consent for us to send to your email address, telephone, fax or other electronic means information about the Company.
Last reviewed: 1 October 2025