1. Identity of the data controller
- Company name: Informática Menéndez SL
- Tax identification number: B66474867
- Registered address: C/ Gravina 1, 08906 L’Hospitalet de Llobregat, Barcelona
- Telephone: 622 588 004
- Email: info@informaticamenendez.com
2. Collection and processing of personal data
Personal data means any information relating to an individual, such as a name, email address, postal address, telephone number or NIF/NIE identification number. When users visit our website, certain information is stored automatically for technical reasons, such as the IP address assigned by their Internet access provider.
Informática Menéndez SL, as data controller, informs users that personal data may be collected when they send an email or complete forms on the website. Only the data needed to provide the contracted service or respond appropriately to an information request will be collected. The data collected are identification details limited to what is reasonably necessary for the activity. Specially protected data are not collected, and data will not be used for purposes other than those for which they were collected.
3. Purposes of processing
Personal data provided by users will be processed to:
- Respond to information requests submitted through contact forms.
- Manage user registration on our website.
- Manage purchases.
- Provide information about the processing and status of purchases.
- Maintain a historical record of purchases made through the website.
- Send communications by email or telephone about incidents, errors, problems or order status.
4. Legal basis for processing
We process enquiries and quotation requests to respond and, where appropriate, take steps before entering into a contract. Purchases, payments, deliveries and related accounts are processed to perform the contract. Invoicing and disclosures to competent authorities meet legal obligations. Security and abuse prevention rely on legitimate interests, using proportionate safeguards. Optional marketing communications and cookies that require it rely on separate consent, which you may withdraw. Using our contact form does not subscribe you to advertising.
The virtual assistant is optional and used at your initiative to answer your enquiry; its specific arrangements are explained in section 16. Providing information necessary for a purchase or enquiry does not authorise unrelated uses.
5. Disclosure of data
Informática Menéndez SL will not disclose or communicate data to third parties except where provided for by law or strictly necessary to provide a service. In particular, data may be communicated to:
- Technology or IT service providers.
- Payment service providers.
- Courier and parcel delivery companies.
- Third parties or intermediaries providing services on behalf of Informática Menéndez SL, such as administrative or professional advisers.
Data will be communicated with respect for confidentiality and with appropriate measures, such as confidentiality agreements or adherence to providers’ privacy policies. Users may object in writing to the communication of their data to processors. Where necessary, customer data may be communicated to bodies to comply with a legal obligation, such as the tax authority, banks or the Labour Inspectorate.
6. Minors
Only persons over 14 may provide personal data through this website. Children under 14 require the consent of their parents or guardians. Only persons over 18 may contract our services; younger persons require the consent of their parents or legal guardians unless legally emancipated.
7. User registration
When users register through the relevant form, the information collected may include:
- First name and surname.
- Email address or telephone number.
- Shipping addresses.
- IP address.
- Username and password.
Users must accept the terms of purchase set out elsewhere on the website and provide a password meeting the stated security requirements. The password does not expire. To recover it, users must use the dedicated form and enter their email address to receive a link allowing them to change it. Users are responsible for keeping their password confidential and for its use, and must notify Informática Menéndez SL of any unauthorised use of their account or password as soon as possible.
Once registered, users may access a private dashboard to view certain content and their purchase history, among other functions, and manage account options. They may receive notifications when registering, purchasing, recovering a password, cancelling registration or deleting an account. Users will receive the shop newsletter if they have subscribed; they may unsubscribe by writing to info@informaticamenendez.com.
8. Security measures
Informática Menéndez SL has adopted technical and organisational security measures within its means to prevent data loss, misuse, alteration, unauthorised access and theft, and to protect the confidentiality, integrity and quality of information in accordance with applicable legislation. Personal data collected through forms are processed only by Informática Menéndez SL personnel or appointed processors. The website uses SSL encryption to allow secure transmission of personal data through its forms.
9. Accuracy of data
Users declare that the data provided are true and correct and undertake to keep them up to date. Users are responsible for their accuracy and for any conflicts or disputes arising from false data. To keep data current, users must inform Informática Menéndez SL of any changes.
10. Exercising rights
Data protection legislation grants individuals rights relating to the processing of their data. To exercise these rights, users may write to info@informaticamenendez.com or to the postal address in the legal notice, providing appropriate identification and stating their full name, the purpose of the request, address and supporting identification details. Rights must be exercised by the user or an authorised person providing evidence of representation.
- The right to access personal data, the purpose of processing, their source and disclosures made or planned.
- The right to request rectification of incorrect or inaccurate data, or erasure of inappropriate or excessive data.
- The right to request restriction of processing; in that case, only data necessary to establish or defend claims will be retained.
- The right to object to processing in the circumstances provided for by legislation.
- The right to portability of data in an exportable format where applicable.
Where consent was given for a specific purpose, it may be withdrawn at any time without affecting the lawfulness of earlier processing. Informática Menéndez SL undertakes to respond to these rights within the maximum legal period of one month. Users who consider there is a problem with the processing of their data may contact the security officer or the relevant data protection authority, which in Spain is the Spanish Data Protection Agency.
11. Data retention
We retain enquiries as needed to handle them and for applicable liability periods. Customer data is retained during the contractual relationship and subsequently blocked or restricted to meet legal duties and handle claims. Tax records are generally retained for four years and commercial records for six, subject to other applicable periods. We do not keep identifiable data indefinitely without a current purpose.
Optional marketing communications stop when consent is withdrawn. Information about assistant conversations and counters is set out in section 16. Irreversibly anonymised information no longer identifies an individual.
12. Social media
Informática Menéndez SL has profiles on some of the main social networks, including Facebook, X, Instagram, YouTube, LinkedIn and Pinterest. Data processing on these profiles aims to inform followers about the company’s activities and provide personalised assistance through tools permitted by each network. Use of these networks is subject to their own terms of use and privacy policies. Informática Menéndez SL recommends reading them before using their links or applications. It will not extract data from social networks without users’ express consent and accepts no responsibility for those platforms’ privacy practices.
13. Recruitment
Applicants sending electronic communications to participate in recruitment authorise Informática Menéndez SL to analyse the documents provided, such as CVs, content accessible through search engines, professional profiles, assessment data and information disclosed at interview, to assess their application and, where appropriate, offer employment. If not selected, their CV may be retained for a maximum of two years for future vacancies unless they indicate otherwise. The legal basis is consent, which may be withdrawn at any time.
14. Confidentiality
Information provided by users is confidential and will not be used for purposes other than those described. Informática Menéndez SL undertakes not to disclose information about users’ intentions, the reasons for the advice requested or the duration of their relationship with the company.
15. Validity
Last reviewed: 20 October 2026. Relevant changes to data processing will be published here, and fresh consent requested when required.
16. AI virtual assistant
The Informática Menéndez virtual assistant uses the OpenAI API to provide guidance on services and products. It is an artificial intelligence system and its responses may contain errors: they are not quotations, order confirmations or definitive technical diagnoses. You can request personal assistance through Contact or email info@informaticamenendez.com.
Using the assistant is optional. When you send a question, its text and limited conversation context are sent to OpenAI to generate a response. Do not enter passwords, bank details, identity documents, health data or other sensitive information. The assistant does not access your orders or account and does not send emails or make purchases.
The conversation remains in the browser tab’s memory and can be cleared using “Clear conversation” or by closing or reloading the page. The integration does not save conversation content in the WordPress database. It uses OpenAI’s store=false setting; this does not mean zero retention by the provider. OpenAI may retain security and abuse prevention logs under its terms. See its API data controls.
Information sent to the API is not used to train OpenAI models by default. The service may involve international data processing; an EU-only processing guarantee has not been configured. To limit abuse and usage, temporary technical counters and an identifier derived by hashing the IP address are maintained, without storing the IP address in those counters. The hosting provider’s own logs are governed by its retention conditions.
For enquiries about data processing or exercising your rights, contact Informática Menéndez SL using the details provided in this policy.