Privacy and cookie policy

Data controller

Oleg Kurylenko, tax ID (NIF) Y2843645P, Camino el Altet 1, 46196 Catadau (Valencia), España. Contact for privacy matters: info@alutorex.com.

What data we process and why

Contact form: name, email address, company (optional), phone (optional), your message, the site language, whether your enquiry comes from the professional or private section, the time you gave your consent, and a one-way cryptographic fingerprint (SHA-256) of your IP address used only to prevent abuse. Purpose: to read and answer your enquiry and, if you ask, to prepare a quotation.

Technical data: to deliver the website, our hosting provider processes connection data (IP address, date and time, requested page, browser type) in server logs.

Analytics and advertising data: described under "Cookies and similar technologies" and processed only with your consent.

Cookies and similar technologies

Strictly necessary items do not need consent; everything else is only set after you accept it in the cookie banner. You can change your choice at any time through "Cookie settings" in the footer.

Necessary: your language choice (browser local storage, until you delete it), a flag so the intro animation is shown once per session (session storage) and your cookie choice (cookie cookieyes-consent, 1 year).

Consent management: we use CookieYes (CookieYes Limited) to show the cookie notice and record your choice. When the page loads, your browser connects to CookieYes servers, which receive your IP address.

Analytics (Google Analytics 4, Google Ireland Ltd.): cookies _ga and _ga_<ID> (up to 2 years) to measure how the site is used: pages visited, approximate location, device and browser. Only with your consent.

Marketing (Meta Pixel, Meta Platforms Ireland Ltd.): cookie _fbp (up to 90 days) and similar technologies to measure the effectiveness of our ads and show relevant ads on Facebook and Instagram. Only with your consent.

Legal basis

Contact form: your consent, given by ticking the box (Art. 6(1)(a) GDPR) and, where you request a quotation, steps prior to entering into a contract (Art. 6(1)(b) GDPR). Technical data: our legitimate interest in providing and securing the site (Art. 6(1)(f) GDPR).

Analytics and marketing: your consent (Art. 6(1)(a) GDPR and Art. 22(2) of the Spanish LSSI-CE), which you can withdraw at any time without affecting processing carried out before.

Recipients and transfers

Your enquiry is stored in the database of our hosting and infrastructure provider and forwarded to our team by email through an email delivery service (Resend). These providers act as processors on our behalf.

If you accept analytics or marketing cookies, Google and/or Meta receive the corresponding data and process it as independent controllers under their own privacy policies.

Where a provider processes data outside the European Economic Area, the transfer relies on an adequacy decision (for example the EU-US Data Privacy Framework) or EU standard contractual clauses. We do not sell your data.

Retention

We keep enquiries for as long as needed to handle them and, where relevant, for the resulting business relationship and applicable legal periods. If no relationship results, we delete the enquiry after 12 months. The IP fingerprint is deleted automatically after 30 days. Cookie lifetimes are stated above.

Your rights

You may exercise your rights of access, rectification, erasure, restriction, objection and portability, and withdraw your consent, by writing to info@alutorex.com. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) or with the supervisory authority of your country of residence.

Changes

We may update this policy; the date shown above identifies the current version.