How we handle personal data.

This policy explains how Creluz Tec processes personal data submitted through the website, contact forms, trade access requests, newsletter functions and related digital services.

Controller

Creluz Tec SLU
CIF: B16607442
Registered address: Carrer Illes Balears 21, 07180 Santa Ponsa, Illes Balears, Spain
Registered with the Registro Mercantil de Mallorca, Tomo 2.794, Folio 47, Hoja PM-85.675, Inscripción 1ª.
Email: info@creluz-tec.net
Phone: +34 971 13 70 13
Mobile: +34 639 51 06 82
Website: creluz-tec.net

Privacy requests may be sent to info@creluz-tec.net.

Data we process

Depending on how users interact with the website, Creluz Tec may process: name, company name, contact person, email address, phone number, website, company type, country or region, VAT or tax number where voluntarily provided, project or business context, brands of interest, message content, newsletter subscription data, trade access status, registered login email, cookie consent preferences and technical log data required for secure operation.

Purposes and legal basis

Purpose	Legal basis
Responding to contact, project, product or service enquiries	Pre-contractual steps at the user’s request and/or legitimate interest in responding to the enquiry
Managing professional trade access requests and approved trade user access	Pre-contractual steps, contractual preparation and/or legitimate interest in managing professional B2B access
Newsletter communication, if the user subscribes	Consent and, where applicable, applicable rules for electronic commercial communications
Website operation, security, spam prevention and technical logs	Legitimate interest in operating a secure and functional website
Analytics, maps, videos or non-essential cookies	Consent where legally required
Compliance with legal obligations	Legal obligation

Forms and trade access

Website forms may be used for general contact, project enquiries, trade access requests and B2B support. Trade access is reviewed manually by Creluz Tec and may be linked to a registered email address and an approved professional partner status.

No automatic entitlement to trade access, prices, conditions or downloads is created by submitting a form. Access may be granted, refused, limited or withdrawn by Creluz Tec.

Analytics and external services

Analytics are planned but the provider has not yet been selected. Analytics tools must be configured in accordance with applicable consent requirements and should not be activated before the user has given consent where consent is required.

Google Maps is planned. Maps should be loaded only after consent or through a consent-based or two-click solution. Videos are not planned for launch but may be added later; embedded video services should also be configured with consent where required.

Brand fonts should be hosted locally in the website environment to avoid unnecessary external font requests.

Recipients and processors

Personal data may be processed by hosting, CMS, email, form, newsletter, analytics, consent management, spam protection, security, membership, download protection or IT service providers acting on behalf of Creluz Tec.

Current or planned service providers may include IONOS for hosting, WordPress for the CMS environment, Brevo or Odoo for newsletter communication, a consent management provider, an analytics provider, a spam protection provider and a membership/download protection provider. The final list must be verified before launch.

Where a request concerns partner brands or manufacturers, relevant enquiry details may be shared only where necessary to respond to the request, coordinate technical information or support project-related next steps.

International transfers

Where service providers process data outside the European Economic Area, Creluz Tec should ensure that appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses or other safeguards required by applicable data protection law.

Retention

Personal data is retained only for as long as necessary for the relevant purpose, unless a longer period is required by law or needed to establish, exercise or defend legal claims.

Contact and project enquiries: for the period necessary to process the request and reasonable follow-up.
Trade access requests and approved access records: while the professional relationship or access status is active and for a reasonable period thereafter.
Newsletter data: until consent is withdrawn or the subscription is cancelled, subject to required consent records.
Technical logs: for a limited period required for security and operation.
Cookie consent records: for the period configured in the consent tool and required for accountability.

Your rights

Users may request access, rectification, erasure, restriction, portability and objection where applicable. Users may also withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

Requests may be sent to info@creluz-tec.net. Users also have the right to lodge a complaint with the Spanish Data Protection Authority, Agencia Española de Protección de Datos (AEPD), where they consider that their data protection rights have been infringed.

Security

Creluz Tec applies organisational and technical measures intended to protect personal data against unauthorised access, loss, misuse or alteration. Final WordPress security, access control, backup, membership and download protection settings must be verified before launch.

Updates

This Privacy Policy may be updated when the website, forms, plugins, service providers, analytics, newsletter tools, cookies, trade access functions or legal requirements change.