Zenwood Solutions, S.L. is committed to the protection of the personal data of users and clients, complying with the provisions of Regulation (EU) 2016/679 General Data Protection (RGPD) and Organic Law 3/2018, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD). Below is information about our privacy policy and processing of personal data:

Data Controller: The person responsible for the personal data collected through the Website is Zenwood Solutions, S.L., with the contact information indicated in the Legal Notice (address at Carrer dels Pins 6, 08629 Torrelles de Llobregat, Barcelona, ​​email hola@zenwood.es).

Personal data we collect and purposes: Zenwood collects personal data only through the voluntary forms and functionalities of the Website. Specifically, we may request and process data (such as name, surname, email, telephone, postal address and other contact or identifying information) in the following cases:

• Contact form: To answer questions or requests for commercial information that the user sends us.
• Newsletter subscription: To send informative or promotional communications by email to those who voluntarily subscribe to our news distribution list.
• Sample Request: To manage the shipment of product samples that the user requests, which may require shipping information (for example, postal address) and details of the type of sample desired.
• Request for a quote or personalized order: To prepare and provide the interested party with a quote or commercial proposal adapted to their requirements (e.g., characteristics of a custom wood product, dimensions, finishes, etc.), as well as for the subsequent necessary pre-contractual and contractual procedures (communication with the client, formalization of the order, invoicing, delivery logistics, etc.).

Each form will clearly indicate what data is requested and for what purpose it is collected. In any case, Zenwood will only use the personal data provided for the explicit and legitimate purposes for which they were obtained. The data will not be used for purposes incompatible with those described.

Legitimation of processing: The legal basis that allows us to process personal data varies depending on the nature of the interaction: (a) The user's own consent, which is understood to be freely given when sending a contact form or subscribing to the newsletter (the user can withdraw said consent at any time); (b) The execution of pre-contractual measures or a contract when the interested party requests a quote, a sample or places an order for our personalized products (data processing is necessary to prepare and fulfill the commercial relationship requested by the client); and (c) Compliance with legal obligations applicable to Zenwood (for example, tax and accounting obligations arising from commercial transactions, which require us to retain certain data on invoices). In certain cases, we may also invoke our legitimate interest to respond to queries or maintain commercial communications with clients, provided that said interest does not prevail over the rights and freedoms of the interested party.

Legitimation of processing: The legal basis that allows us to process personal data varies depending on the nature of the interaction: (a) The user's own consent, which is understood to be freely given when sending a contact form or subscribing to the newsletter (the user can withdraw said consent at any time); (b) The execution of pre-contractual measures or a contract when the interested party requests a quote, a sample or places an order for our personalized products (data processing is necessary to prepare and fulfill the commercial relationship requested by the client); and (c) Compliance with legal obligations applicable to Zenwood (for example, tax and accounting obligations arising from commercial transactions, which require us to retain certain data on invoices). In certain cases, we may also invoke our legitimate interest to respond to queries or maintain commercial communications with clients, provided that said interest does not prevail over the rights and freedoms of the interested party.

Recipients of data and transfers: Zenwood does not sell or transfer users' personal data to third parties, except in cases necessary for the provision of our services or compliance with legal obligations. In particular, the data may be communicated to the following categories of recipients:

• Data processors: Third party providers that provide services to Zenwood and who require access to personal data under our instructions, in order to help us in the management of the activity. For example:
• Die Holded-Business-Management-Plattform (SaaS-Dienst mit Sitz in der EU), auf der wir Kunden-, Rechnungs- und Bestelldaten sicher speichern.
• Our corporate email service, through which communications are sent and received (the email provider also acts as data processor by temporarily hosting data messages).
• In the future, it is planned to use the Brevo platform (previously known as Sendinblue) to manage email marketing campaigns and newsletters; If implemented, said tool would process the contact data (e-mail) of our subscribers for the sole purpose of sending newsletters, under the appropriate guarantees in accordance with data protection regulations (Brevo is a service based in the EU).
• Logistics providers (transporters): In the event that a physical shipment must be made (for example, delivery of samples or final delivery of a purchased product), we will share with the transport company the strictly necessary data (name, delivery address and telephone contact of the recipient) to carry out the delivery.
• Accounting/tax advice: The identification data included in invoices and accounting documentation may be accessible by our external consultancy or agency for the purposes of compliance with fiscal and tax obligations, or in financial audits.
• Official authorities or bodies: In the event of a legal requirement, regulatory obligation or within the framework of a judicial or administrative procedure, Zenwood may be obliged to provide data to said entities (for example, before a Treasury inspection, requirements of the Spanish Data Protection Agency, judicial bodies with jurisdiction, etc.).

Zenwood procura asegurar que todos nuestros encargados de tratamiento ofrecen garantías suficientes en cuanto a medidas de protección de datos. En ningún caso se cederán datos personales a terceros para finalidades ajenas a las aquí descritas.

Transferencias internacionales: Como regla general, tratamos y almacenamos los datos personales dentro del Espacio Económico Europeo (EEE). No obstante, algunos de nuestros proveedores de tecnología pueden estar ubicados o pueden procesar información fuera del EEE. En particular, el uso de herramientas de análisis y marketing del tipo Google Analytics, Google Tag Manager o Facebook Pixel (descritas en la Política de Cookies) podría implicar transferencias internacionales de datos (por ejemplo, a servidores situados en Estados Unidos u otros países) operadas por Google LLC o Meta Platforms, Inc.. Zenwood únicamente empleará estos servicios con el consentimiento previo del usuario (obtenido mediante el banner de cookies) y, en su caso, adoptará las medidas necesarias para asegurar que la transferencia de datos cumple con la normativa (p. ej., mediante la firma de cláusulas contractuales tipo aprobadas por la Comisión Europea, evaluaciones de adecuación, etc.). El usuario puede rechazar el uso de cookies de terceros para evitar tales transferencias (ver Política de Cookies más abajo).

Rights of the interested party: Any person whose data we process has the following rights related to their personal data:

• Access: know what personal data of yours we have and obtain a copy of it.
• Rectification: request the correction of inaccurate or incomplete data.
• Deletion (right to be forgotten): request the deletion of your data when, among other reasons, it is no longer necessary for the purposes for which it was collected.
• Opposition: revoke the consent given or oppose us processing your data based on our legitimate interest, for reasons related to your particular situation.
• Limitation of processing: request that we temporarily restrict the use of your data in certain cases (for example, while a request for rectification or a challenge to the legality of the processing is resolved).
• Portability: receiving your personal data in a structured, commonly used and machine-readable format, and transmitting it to another controller, when technically possible and the processing is based on your consent or a contract.

Likewise, you have the right not to be subject to automated decisions based solely on the automatic processing of your data (Zenwood does not currently carry out fully automated profiles with legal effects for the user).

To exercise your rights, you can send a free request at any time to hola@zenwood.es clearly indicating what right you wish to exercise and on what data. You must attach a copy of a valid document that proves your identity (e.g. DNI or NIE) to verify that you are the owner of the data. We will respond to your request within the deadlines provided by the regulations (maximum 1 month, extendable to 2 months for complex cases, notifying you of the extension). If you consider that we have not correctly managed your request or that there is an infringement in the processing of your data, you also have the right to file a claim with the Spanish Data Protection Agency (AEPD), through its website. www.aepd.es.

Data security: Zenwood adopts appropriate technical and organizational security measures to protect personal data under its responsibility, avoiding, to the extent possible, unauthorized access, alterations, losses or unauthorized disclosures. These measures include the encryption of communications (website with HTTPS protocol), access control to databases, periodic backups, and confidentiality agreements with suppliers and employees with access to the information, among others. Although no system is completely secure, Zenwood applies protection standards in accordance with current regulations to safeguard your privacy.

Use of cookies and browsing data: The Website uses cookies and similar tracking technologies that may collect certain browsing data (e.g. IP address, visiting habits, sections consulted). These technologies and their specific purpose are detailed in the Cookies Policy of this document. The installation of analytical or advertising cookies is carried out only with the user's consent, requested through the pop-up banner when entering the Website for the first time. For more information about the cookies we use and how to manage them, see the Cookie Policy section below.

Si tienes cualquier duda sobre esta Política de Privacidad o el tratamiento de tus datos personales, no dudes en contactarnos a través del correo hola@zenwood.es. Estaremos atentos para resolver tus consultas en materia de privacidad.