Privacy policy

1. Data Controller

In accordance with Regulation (EU) 2016/679 (GDPR) and the Spanish Organic Law 3/2018 (LOPDGDD), we inform you that your personal data will be processed by:

Darimo Carbon S.L.
VAT ID: ES/B98979024
Address: C/ CONCORDIA Nº44, 46160 LLIRIA (VALENCIA), Spain.
Email: info@darimo.eu

Darimo ensures lawful, fair and transparent processing of personal data and applies appropriate technical and organisational security measures.

2. When and how do we collect personal data?

Darimo collects personal data in the following situations:

• When you place an order through our website.
• When you create a user account.
• When you request information or contact customer support.
• When you subscribe to newsletters or marketing communications.
• When you browse our website (IP address, cookies, device identifiers).
• When managing returns, incidents, or warranty claims.
• When interacting with Darimo on social media (according to each platform's settings).

We also collect data through cookies or similar technologies, as detailed in our Cookie Policy.

3. Purposes of data processing

Your personal data may be processed for the following purposes:

• Processing and managing orders, including custom-made production and shipment coordination.
• Issuing invoices and managing payments, complying with tax and accounting regulations.
• Providing customer service and responding to inquiries and requests.
• Managing user accounts and user preferences on the website.
• Managing returns, warranties, repairs, and after-sales support.
• Analysing website usage to improve performance, user experience, and security.
• Fraud prevention and ensuring the security of transactions.
• Sending commercial communications, only if the user has expressly consented.
• Complying with legal obligations, including consumer protection, tax, commercial and e-commerce regulations.

4. Legal basis for processing

• Performance of a contract: order management, manufacturing, shipping, user account services, customer support.
• Consent: newsletters, marketing communications, and cookie usage.
• Legal obligation: invoicing, taxation, consumer rights, and warranty management.
• Legitimate interest: fraud prevention, website security, service improvement, analytics and statistics.

5. Categories of personal data processed

• Identification data: name, surname, email, phone number.
• Shipping and billing details: postal address, country, tax ID when required.
• Order and transaction data: purchased items, payment method, order history, incidents.
• Browsing data: IP address, browser type, device information, cookies, usage patterns.
• Support-related information: inquiries and communication records.
• We never store complete credit/debit card numbers or payment credentials.

6. Data recipients and disclosures

Your personal data may be shared with:

• Shipping and logistics companies.
• Banks and secure payment gateways.
• Accounting and tax advisory services.
• Technological providers (hosting, backups, PrestaShop services).
• Email service providers.
• Fraud prevention and security services when necessary.

All service providers act as Data Processors under written contracts and only access the data required for their services.

7. International data transfers

If any provider operates outside the European Economic Area (EEA), Darimo ensures adequate data protection through:

• EU Standard Contractual Clauses (SCCs).
• International certifications, such as the Data Privacy Framework (when applicable).

If no such providers are used: No international data transfers are carried out.

8. Data retention periods

• Order and billing data: 6 years (legal requirement).
• Returns, incidents and warranty-related data: until resolution + legally required periods.
• Marketing data: until withdrawal of consent.
• User accounts: while the account remains active or until deletion.
• Technical and security logs: 12 to 24 months.

9. User rights

Users may exercise the following rights at any time:

• Access, rectification and erasure of personal data.
• Objection and restriction of processing.
• Data portability.
• Withdrawal of consent for processing activities based on consent.

To exercise these rights, please send a request to info@darimo.eu together with proof of identity.

You may also file a complaint with the Spanish Data Protection Authority (AEPD): www.aepd.es.

10. Security measures

Darimo implements strong technical and organisational measures to ensure the protection of your personal data, including:

• HTTPS encryption and secure servers.
• Regular backups.
• Strict internal access controls.
• Certified secure payment gateways.
• No storage of sensitive banking information.

11. Cookie Policy

Data processing related to the use of cookies is detailed in our Cookie Policy, which describes types, purposes and configuration options.

12. Changes to this Policy

Darimo may update this Privacy Policy to reflect legal or technical changes. Updates will be published on this page. When changes significantly impact your privacy, you will be notified by email or through a notice on the website.