Data protection

Privacy Policy

How we collect and process the personal data of those who use this website or contact us.

Data Controller

The entity responsible for processing the personal data collected on this site is:

Holder: Gomez Brothers Hardware Store, SC.
CIF: J39046073
Home: La Ronda 1, 39700 Castro Urdiales (Cantabria)
Contact email: ferregomezcastro@gmail.com

You can contact the data controller through any of these means for any matter relating to your personal data.

What data do we process?

This website is an informational catalog with no online sales. Consequently, data processing is minimal and limited to:

Contact form. When you submit the form on the page of Contact, We process your name, phone number, email address, the selected service, and the message you wrote. These are the only details the form requests.
Direct communications. If you call us, write to us via WhatsApp or reply to an email, we process the data from that communication (name, phone number or email and the content of the query) in order to assist you.
Technical records. Just like any website, the hosting server may keep access logs (IP address, date and time, pages visited) for the sole purpose of ensuring the security and proper functioning of the site.

This site It does not measure audiencesIt does not use web analytics, advertising, or user profiling. You can see the details in the cookie policy.

What do we use them for?

The data is used exclusively for:

To handle inquiries, requests for quotes, and questions about the availability or features of items in the catalog.
Manage subsequent communication with the person who writes or calls (appointment, quote or order for an article).
Ensure website security and prevent fraudulent access.

Under no circumstances do we use the data to send mass advertising, newsletters or unsolicited commercial communications.

Legal basis

Consent (Art. 6.1.a of Regulation (EU) 2016/679): By submitting the contact form, you tick the box accepting this policy. Without this acceptance, the form will not be submitted.
Legitimate interest (art. 6.1.f GDPR): for site security and fraud prevention in communications.
Legal obligation (art. 6.1.c GDPR): in the event that a rule requires to retain certain information or to comply with requests from competent authorities.

Data retention

Data submitted via the form or by email is retained for the duration of the consultation process and subsequently for the statutory limitation periods established by applicable law (for example, to address potential liabilities arising from the care provided). Once these periods have expired, the data is securely deleted.

The server's technical logs are kept for the time specified by the hosting provider for security purposes.

Data recipients

We do not share your data with third parties for commercial purposes. We neither sell nor rent personal data. Data may only be disclosed to third parties when there is a legal obligation to do so.

To provide the service, two data processors are involved, who handle the data on our behalf and with our instructions, applying the guarantees required by the GDPR:

The supplier of web hosting of the site.
The supplier of email service where the form messages are received (account hosted on Google LLC, with adequate guarantees for international transfers).

Your rights

You can exercise your rights at any time and free of charge:

Access — to know what data of yours we process.
Rectification — correct inaccurate or incomplete data.
Suppression — request that we delete your data.
Opposition and limitation — to oppose a treatment or to ask that it be limited.
Portability — receive your data in a structured format.

To exercise these rights, please write to us at ferregomezcastro@gmail.com or by mail to La Ronda 1, 39700 Castro Urdiales (Cantabria), indicating the right you wish to exercise and attaching a document that proves your identity. We will respond within a maximum of one month from receipt of the request.

If you believe that we have not properly addressed your rights, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es), in particular on its electronic headquarters, or obtain more information at its offices (C/ Jorge Juan, 6 — 28001 Madrid).

What we don't do with your data

We do not create user profiles or make automated decisions that affect them.
We do not send newsletters or commercial communications by default: the form is only used to answer inquiries.
We do not register user accounts or manage passwords on this site.

If any of these circumstances change in the future (for example, if a new newsletter or service is added), this policy will be updated to indicate the date of the change.

Update

This privacy policy may be modified to adapt to regulatory changes, criteria of the Spanish Data Protection Agency, or changes to the website itself. In such cases, it will be announced on this page with the corresponding update date (August 26, 2026).

Document

Last updated: August 26, 2026