Privacy Policy

At Quimipool, we take the protection of your personal data seriously. This Privacy Policy explains what data we process, for what purpose, on what legal basis, with whom we share it, and what rights you have, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).

Visiting this website does not imply that the user is obligated to provide any information. If you do provide personal data, it will be processed lawfully, fairly, and transparently.

1. Data Controller

  • Data Controller: Quimipool Piscinas y Jardines, S.L. (hereinafter, Quimipool)
  • Tax ID: B11712916
  • Address: Pol. Bértola 31, 11408 Jerez de la Frontera (Cádiz)
  • Phone: 91 128 55 90
  • Email: info@quimipool.com

2. Data We Process

Depending on your relationship with us, we may process the following categories of data:

  • Identification and contact information: first name, last name, Tax ID/National ID (when necessary for billing or financing), mailing address, email address, and phone number.
  • Order and billing data: products purchased, amounts, shipping address, and information necessary to issue the invoice.
  • Payment data: the information necessary to process payment. Card details are entered directly into the secure payment gateway; Quimipool does not store card numbers.
  • Browsing data: IP address, device and browser type, and information collected via cookies, in accordance with our Cookie Policy.

We do not process special categories of data (health, ideology, etc.).

3. Purposes and Legal Basis for Processing

We process your data for the following purposes, each with its own legal basis:

  • Management of your customer account and purchase (order processing, delivery, billing, and customer service). Legal basis: performance of the contract or pre-contractual measures (Art. 6.1.b GDPR).
  • Management of warranties, repairs, and returns (RMA). Legal basis: performance of the contract and compliance with legal obligations (Art. 6.1.b and 6.1.c of the GDPR).
  • Compliance with legal obligations (tax, accounting, and consumer protection). Legal basis: legal obligation (Art. 6.1.c of the GDPR).
  • Sending marketing communications and newsletters about our products and offers. Legal basis: your consent (Art. 6.1.a of the GDPR) or, if you are already a customer, our legitimate interest in offering you similar products (Art. 6.1.f of the GDPR and Art. 21.2 of the LSSI), which you may object to at any time.
  • Website improvement and statistical analysis. Legal basis: your consent (cookies) and/or our legitimate interest in improving our services (Art. 6.1.f of the GDPR).

The consent provided for commercial communications may be revoked at any time, without retroactive effect, through any communication sent or by writing to info@quimipool.com.

4. Retention Period

We will retain your data for as long as necessary to fulfill the purpose for which it was collected and, thereafter, for the periods required by law:

  • Customer account data: as long as the account remains active. If there is no activity for 3 years, the account will be deleted or blocked.
  • Order and billing data: for the duration of the contractual relationship and, once it has ended, for the applicable tax and commercial limitation periods (generally, up to 4 years under tax regulations and up to 6 years under the Commercial Code).
  • Warranty and repair data: for the duration of the statutory warranty period (3 years) plus the limitation periods for any potential claims.
  • Data for marketing purposes: until you withdraw your consent or unsubscribe.

Once these periods have elapsed, the data will be deleted or retained in a properly blocked format in accordance with the law.

5. Recipients of the Data

Your data may be disclosed to the following recipients, only when necessary:

  • Shipping companies responsible for delivering orders: GLS, Correos Express, Correos, Redur, Dachser, FedEx.
  • Financial institutions and payment gateways to process payments: CaixaBank/Redsys, PayPal, SeQura, Bizum, Lyra, Scalapay.
  • Manufacturers and official technical service providers, in the event of warranties or repairs.
  • Public administrations and law enforcement agencies, when there is a legal obligation to do so.
  • Technology providers acting as data processors (web hosting, email marketing tools, etc.), with whom we have entered into the corresponding data processing agreement in accordance with Article 28 of the GDPR.

6. International Transfers

Some of our technology providers, such as Google Analytics and Zoho, may be located outside the European Economic Area. In such cases, these transfers are carried out with the necessary safeguards, either because the provider is covered by the EU-US Data Privacy Framework (EU-US Data Privacy Framework), through the adoption of Standard Contractual Clauses approved by the European Commission, or any other appropriate safeguards provided for in the GDPR.

7. Data Subjects’ Rights

You may exercise the following rights:

  • Access: to know what data we process about you.
  • Rectification: to correct inaccurate or incomplete data.
  • Erasure: to request the deletion of your data.
  • Restriction: to request that processing be restricted.
  • Objection: to object to the processing of your data, including for advertising purposes.
  • Portability: Receive your data in a structured, commonly used format.
  • Withdraw consent at any time, without this affecting the lawfulness of prior processing.

To exercise these rights, write to Quimipool Piscinas y Jardines, S.L., Pol. Bertola 31, 11408 Jerez de la Frontera (Cádiz), or email info@quimipool.com, attaching a copy of a document proving your identity.

EspaYou also have the right to file a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es, if you believe that the processing of your data does not comply with the regulations. However, we encourage you to contact us first to resolve any issues.

8. Consent and Accuracy of Data

When data processing is based on your consent, it will be obtained through a clear affirmative action (for example, by voluntarily checking the corresponding box, which will never be pre-checked). You guarantee the truthfulness and accuracy of the data provided and agree to keep it up to date.

9. Protection of Minors

Our products and services are intended for adults. We do not knowingly collect data from minors. If you become aware that a minor has provided us with data without the authorization of a parent or guardian, please notify us at info@quimipool.com so that we may delete such data.

10. Security

Quimipool has adopted the necessary technical and organizational measures to ensure the security, integrity, and confidentiality of the data, preventing its alteration, loss, unauthorized processing, or access.

11. Social Media

Through our website, you can access our social media profiles (Facebook, Instagram, X/Twitter, and YouTube). These platforms are independent of https://www.quimipool.com/en/ and are governed by the privacy policies of each social media platform; Quimipool is not responsible for their data processing practices.

12. Changes to the Privacy Policy

Quimipool We may modify this Privacy Policy to adapt it to new legislation or changes in our business activities. We recommend that you review it periodically.

Last updated: Friday, June 19, 2026