Legal information

Privacy policy

Last updated: 29 October 2026

At ACD&CO we take the protection of your personal data seriously. This document explains what information we collect, why we collect it and how we process it, in compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

1. Data controller

2. What data do we collect?

Through the contact form on our website we collect the following data:

• Identification data: first name and surname
• Professional data: the company you represent (optional)
• Contact data: email and phone (phone is optional)
• Enquiry data: intended use, timeframe, number of machines, indicative budget, configuration of interest and project description
• Source of contact: how you found us, so we know which channels work

The company, phone, number of machines, budget and message fields are optional: you can send the request without filling them in. The form does not use cookies, CAPTCHA or any external service; to prevent spam we only check a hidden field, the time taken to fill in the form and the number of submissions from the same connection.

We do not collect special categories of data (health, beliefs, orientation, etc.) or data from minors. The website does not use third-party cookies or trackers.

If you place an order in the website's shop, we also collect the data needed to prepare it, send you the pro forma invoice, invoice it and deliver the machines:

• Company data: company name, tax ID or VAT number, billing address and country
• Contact data: contact person, email and phone
• Order data: machines, configuration, units, amounts, delivery address (if different) and comments

The legal basis is the performance of the sales contract and of the pre-contractual steps you request (Art. 6.1.b GDPR) and, for invoicing, compliance with legal obligations (Art. 6.1.c GDPR). We send you an email with the order summary and keep a copy on our own server, in a folder that cannot be accessed from the internet. For delivery, the carrier receives only the delivery name, address and phone number. Until you send the order, the cart is stored only in your browser (local storage) and nothing reaches us.

3. Why do we process your data?

We process the information you give us for the following purposes:

• To answer your enquiry or request for a technical proposal
• To prepare and send you a personalised commercial proposal
• To manage the business relationship if you decide to hire our services
• To comply with the applicable legal, tax and accounting obligations

We will not use your data for advertising, we will not use it to build profiles and we will not pass it on to third parties for marketing.

4. Legal basis for processing

The legal basis that allows us to process your data is:

• Explicit consent (Art. 6.1.a GDPR) — which you give by ticking the acceptance box when you send the form
• Performance of a contract or pre-contractual measures (Art. 6.1.b GDPR) — to deal with your request for a quote
• Compliance with legal obligations (Art. 6.1.c GDPR) — tax and accounting obligations if the business relationship goes ahead

5. How long do we keep the data?

We will keep your data for as long as necessary for the purpose for which it was collected:

• Enquiries that do not become customers: up to 12 months from the last communication
• Customers: for the duration of the business relationship and the applicable legal periods (up to 6 years for tax obligations under the Spanish Commercial Code)
• Invoicing and accounting data: at least 6 years under Art. 30 of the Spanish Commercial Code

Once these periods have passed, the data will be securely deleted.

6. Recipients — who do we share your data with?

Your data may be disclosed to the following third parties, always with the safeguards of the GDPR:

• IONOS — web hosting and email provider (Germany/EU), acting as data processor
• Our accountants or tax advisers — in the event of invoicing
• Public authorities — where there is a legal obligation (Spanish Tax Agency, etc.)

The contact form is processed on our own server and the message is sent to our mailbox: your data does not pass through any third-party service. We do not transfer data outside the European Union.

7. Your rights

As the data subject, you have the right to:

• Access: know what data we hold about you
• Rectification: correct inaccurate data
• Erasure (right to be forgotten): ask us to delete your data
• Objection: object to certain processing
• Restriction: ask us to suspend processing
• Portability: receive your data in a structured format
• Withdraw your consent at any time, without retroactive effect

To exercise any of these rights, send an email to info@acdcompany.es stating the right you wish to exercise and attaching a copy of your ID card or an equivalent document. We will reply within one month at most.

8. Complaints to the supervisory authority

If you consider that your rights have not been properly respected, you may lodge a complaint with the Spanish Data Protection Agency (AEPD):

You may also contact the data protection authority of the EU country where you live.

9. Security measures

We apply appropriate technical and organisational measures to ensure the confidentiality, integrity and availability of your data: an encrypted HTTPS connection, access restricted to authorised staff and internal procedures to protect against unauthorised access, loss or alteration.

10. Changes to this policy

We may update this policy to adapt it to legal changes or to the evolution of our services. The date of the last update appears at the top of the document. If the changes are substantial and affect how we process your data, we will notify you through the usual channels.

This translation is provided for information. In case of discrepancy, the Spanish version prevails.