Privacy policy

This is a courtesy translation. In the event of any discrepancy, the Spanish version shall prevail.

Last updated: 10 October 2026

At TECTON SAFETY, S.L. we process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and the guarantee of digital rights (LOPDGDD). This policy explains what data we process, for what purpose and how you can exercise your rights.

1. Data controller

Company name: TECTON SAFETY, S.L.
Tax ID (CIF): B26945733
Registered office: Calle de la Letra K, s/n, Hotel Alfa, Mercabarna, Zona Franca, 08040 Barcelona (Spain)
Registration details: registered with the Barcelona Companies Registry
Email: info@tectonsafety.com
Phone / WhatsApp: +34 665 790 228
Website: https://tectonsafety.com

2. What data we process and where it comes from

Order and billing data: name and surname or company name, tax ID, shipping and billing address, email, phone, products purchased and order history. Payment (card) data is processed directly by the payment gateway; we do not store it.
Contact data: whatever you provide through the contact form, email, phone or WhatsApp (name, company, email, phone and the content of your enquiry).
Customer account and professional (B2B) area: registration data, company, distributor or professional status and associated orders.
Browsing data: IP address, device identifiers and cookies, as described in the cookie policy.
Product traceability: the serial number of each anchor linked to the order, so that we can handle safety notices, product recalls or inspections.

Data always comes from the data subject. Our products and services are aimed at professionals and persons over 18 years of age.

3. Purposes and legal basis

Purpose	Legal basis	Retention
Managing orders, payments, shipping, invoicing and warranties	Performance of a contract (Art. 6.1(b) GDPR) and legal tax and accounting obligations (Art. 6.1(c))	For the duration of the relationship and 6 further years (Commercial Code) / tax limitation periods
Product traceability and safety (PPE): notices, recalls, inspections	Legal obligation (Regulation (EU) 2016/425) and legitimate interest in user safety	Service life of the product (25 years from manufacture)
Handling enquiries, quotes and site-visit requests	Pre-contractual measures at the data subject's request (Art. 6.1(b)) or consent	Until the enquiry is resolved and 1 further year
Managing the customer account and access to the professional area	Performance of a contract	While the account is active
Sending commercial communications about similar products to customers	Legitimate interest (Art. 21.2 LSSI-CE), with the option to object in every message	Until you object
Sending the newsletter to subscribers	Consent (Art. 6.1(a))	Until consent is withdrawn
Improving the website and measuring its use	Consent (analytics cookies)	As per the cookie policy

4. Recipients

We do not disclose your data to third parties unless legally required. To provide the service we use processors that access the data under our instructions:

Shopify International Ltd. (Ireland) and Shopify Inc. (Canada): e-commerce platform and hosting of the store, with possible international transfers covered by the European Commission's adequacy decision for Canada and by standard contractual clauses.
Payment gateways (Shopify Payments and the payment methods offered at checkout): they process payment data under their own responsibility.
Carriers (for example MRW or other agencies) for delivering orders.
Email and management tool providers needed to handle enquiries and send communications.
Tax and accounting advisers, to meet legal obligations.

Where required by law, data may be disclosed to the Tax Authority, PPE market surveillance authorities and courts.

5. Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent given, by sending a request to info@tectonsafety.com or by post to the controller's address, stating the right you are exercising and attaching a copy of an identity document. We will reply within one month.

If you believe that the processing does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid).

6. Security

We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or alteration. The store is served over HTTPS and payments are processed in PCI DSS certified environments.