In accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), the user is informed about the processing of their personal data through this website.
1. Data controller
- Identity: Matcon Integral, S.L.
- Tax ID (NIF): B26766113
- Address: Av. Primado Reig, 54, B izq., 46010 Valencia (Valencia), España
- Email: info@matcon-integral.com
No Data Protection Officer has been appointed, as this is not mandatory under Article 37 of the GDPR, since the processing is neither large-scale nor involves systematic monitoring of data subjects on a large scale.
2. Purposes and legal bases
Personal data provided through this website will be processed for the following purposes:
- Managing requests for information or quotes submitted through the forms provided. Legal basis: consent of the data subject (Article 6.1.a GDPR).
- Managing the contractual relationship and invoicing in the event of a sale. Legal basis: performance of a contract (Article 6.1.b GDPR) and compliance with legal obligations (Article 6.1.c GDPR).
- Handling enquiries received by email or phone. Legal basis: legitimate interest (Article 6.1.f GDPR).
- Sending commercial communications or newsletters , in the event of subscription. Legal basis: consent (Article 6.1.a GDPR), which the data subject may withdraw at any time.
3. Recipients
Personal data will not be disclosed to third parties, except in cases provided for by law or when necessary for the performance of the contract, in particular for the delivery of products (carriers) or the management of payment (payment service providers).
4. International transfers
Matcon Integral, S.L. is based in and processes data within the European Economic Area (EEA). However, some of the service providers used on this website (or which may be used in the future) are located in countries outside the EEA, which may involve international data transfers.
4.1. Applicable safeguards
When international transfers take place, Matcon Integral, S.L. ensures that the safeguards required by the GDPR are met, in particular:
- Adequacy decisions adopted by the European Commission (for example, the EU-US Data Privacy Framework, in force since 10 July 2023).
- Standard Contractual Clauses (SCC) approved by the European Commission.
- Binding Corporate Rules (BCR).
- Explicit consent of the data subject, after being informed of the possible risks.
In any case, the data subject will be informed in advance of the transfer and of the safeguards adopted.
4.2. Third-party services that may involve international transfers
If used, this website may rely on the following third-party services, some of which may involve international data transfers:
a) Marketing and advertising
- Meta (Facebook / Instagram): Meta Pixel and remarketing tools. Recipient: Meta Platforms, Inc. (USA). Legal basis: EU-US DPF + SCC.
- Google Ads: remarketing and conversion tools. Recipient: Google LLC (USA). Legal basis: EU-US DPF + SCC.
- TikTok Pixel: measurement and remarketing tools. Recipient: TikTok Technology Limited (Singapore / USA). Legal basis: SCC.
b) Analytics and measurement
- Google Analytics 4: audience and behaviour measurement. Recipient: Google Ireland Ltd. and Google LLC (USA). Legal basis: EU-US DPF + SCC.
- Microsoft Clarity: heatmaps and anonymised session recording. Recipient: Microsoft Corporation (USA). Legal basis: EU-US DPF + SCC.
- Hotjar: heatmaps and surveys. Recipient: Hotjar Ltd. (Malta / Ireland). Legal basis: EEA.
c) Customer service and chat
- WhatsApp Business (Meta): customer service channel. Recipient: Meta Platforms, Inc. (USA). Legal basis: EU-US DPF + SCC.
- Tawk.to: live chat. Recipient: Tawk.to Inc. (USA). Legal basis: SCC.
- Zendesk Chat: chat and support. Recipient: Zendesk, Inc. (USA). Legal basis: EU-US DPF + SCC.
d) Email marketing and communications
- Mailchimp: newsletter and campaign delivery. Recipient: The Rocket Science Group LLC (USA). Legal basis: EU-US DPF + SCC.
- Brevo (Sendinblue): newsletter and campaign delivery. Recipient: Sendinblue GmbH (Germany) and, where applicable, affiliates in the USA. Legal basis: EEA / EU-US DPF.
e) Payment gateways
- Stripe: card payment processing. Recipient: Stripe Payments Europe Ltd. (Ireland) and Stripe, Inc. (USA). Legal basis: EEA / EU-US DPF + SCC.
- PayPal: payment processing. Recipient: PayPal (Europe) S.à r.l. et Cie., S.C.A. (Luxembourg) and PayPal Holdings, Inc. (USA). Legal basis: EEA / EU-US DPF + SCC.
- Redsys: Spanish national payment gateway. Recipient: Redsys Servicios de Procesamiento, S.L. (Spain). Legal basis: EEA (no international transfer).
- Bizum: Spanish national payment gateway. Recipient: Sociedad de Procedimientos de Pago, S.L. (Spain). Base legal: EEA (no international transfer).
f) Hosting, CDN and technical services
- Amazon Web Services (AWS): hosting and storage. Recipient: Amazon Web Services, Inc. (USA) and AWS Ireland Ltd. (Ireland). Legal basis: EEA / EU-US DPF + SCC.
- Cloudflare: CDN and security. Recipient: Cloudflare, Inc. (USA). Legal basis: EU-US DPF + SCC.
The above list is illustrative and will be updated when third-party services are added or removed. The current version of this policy reflects the services that may be used by the website.
4.3. Data subject rights in case of international transfer
The data subject may obtain a copy of the safeguards adopted for the international transfer by contacting info@matcon-integral.com.
5. Retention period
Personal data will be retained for as long as the contractual relationship remains in force or until the data subject requests its deletion. Once that relationship has ended, the data will be kept, where appropriate, blocked for the periods legally established to address any potential liabilities (as a general rule, five years for commercial obligations and four for tax obligations).
6. Rights of the data subject
The data subject may at any time exercise the rights of access, rectification, erasure, objection, restriction of processing and, where applicable, data portability, by written request addressed to info@matcon-integral.com.
7. Complaints to the supervisory authority
The data subject has the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if they consider that the processing of their personal data breaches the applicable regulations.
8. Source of the data
The personal data processed come directly from the data subject, having been provided by them through the forms provided or by email.
9. Automated decisions
No automated decisions with legal effects on the data subject are made, and no profiles are created for commercial or other purposes.
Last updated: 1 June 2026