Privacy Policy

Congas Iberico SL

CIF: B22696223

Address: Cecilia Böhl de Faber Street, s/n, Marbella, Málaga

Email: contacto@congas.es

Telephone: +34 951 876 678

Congas may process the following categories of personal data, depending on the user's interaction with the website:

Identifying data

• Name and surname.
• Identification document (when necessary for billing or legal processes).

Contact information

• E-mail.
• Mobile or landline phone.
• Postal address.

Transactional data

• Information needed to process purchases:
  Shipping and billing address
  Order details
  Payment information (always handled by secure external platforms: Shopify Payments and PayPal).

Navigation data

• IP address.
• Device type.
• Browser used.
• Pages visited.
• Cookies and similar technologies.

Account and membership details

• Access credentials (encrypted hash).
• Purchase history.
• User preferences.
• Data associated with the membership program, if the user registers.

Data provided voluntarily

• Messages sent through contact forms or customer service.
• Survey responses.
• Interactions with after-sales service.

The data will be processed for the following purposes:

Management of the contractual and commercial relationship

• Process orders, payments and collections.
• Manage shipments, deliveries and returns (DHL).
• Customer account management and membership services.
• Customer service and technical support.

Commercial communications

• Weekly newsletters are sent.
• Information about news, promotions or related products.
  
  (Always with the user's express consent.)

Digital marketing and remarketing

• Creating custom audiences.
• Advertising actions on platforms such as Meta Ads, Google Ads or TikTok Ads.
  
  (Based on consent given through cookies or privacy settings.)

Website analytics and improvement

Through:

• Google Analytics 4
• Meta Pixel
• TikTok Pixel
• Shopify Analytics

Statistical analyses are performed to improve site functionality and provide an optimized experience.

Compliance with legal obligations

• Billing.
• Guarantees and returns.
• Tax and accounting obligations.
• Fraud prevention.

The treatment is based on the following legal grounds:

• Performance of a contract (art. 6.1.b GDPR): order management, payments and customer account.
• Consent (art. 6.1.a GDPR): newsletters, non-essential cookies, marketing and remarketing actions.
• Legitimate interest (art. 6.1.f GDPR): website improvements, system security, fraud prevention.
• Legal obligation (art. 6.1.c GDPR): invoicing, taxes, accounting records.

The data may be communicated to:

Data Controllers

• Shopify (web platform and hosting).
• Shopify Payments and PayPal (payment gateways).
• Odoo (email marketing and CRM).
• DHL (logistics and shipping).
• Analytics tools (Google, Meta, TikTok).
• Technical services and IT consultants necessary for operations.

They all act under contract and in compliance with the GDPR

Some providers, such as Shopify, Meta, Google, or TikTok, may store data outside the European Economic Area.
Congas guarantees that these transfers comply with:

• Standard Contractual Clauses approved by the European Commission, or
• Equivalent protection mechanisms that ensure an adequate level of protection.

Congas retains the data only for as long as necessary:

• Customers: duration of the business relationship + mandatory legal periods.
• Account and membership records: while the account is active.
• Newsletter: until the user requests to unsubscribe or withdraws consent.
• Browsing data: according to the expiration defined in the Cookies Policy.
• Customer service inquiries: time required for resolution.

(Standard time limits established by Spanish regulations apply.)

The user may exercise the following at any time:

• Access
• Rectification
• Suppression
• Limitation of treatment
• Portability
• Opposition
• Withdrawal of consent

Request any of these rights by contacting: contacto@congas.es

You can also file a complaint with the Spanish Data Protection Agency (AEPD) .

Detailed information on the use of cookies and similar technologies is available in the website's Cookie Policy .

Congas applies appropriate technical and organizational measures to protect personal data, including:

• Encryption of sensitive data.
• Restriction of access to personal information.
• Systems monitoring.
• Security protocols in payment gateways.

Congas may modify this Privacy Policy at any time. Updates will be posted on this same page.