Privacy Policy

1. Data Controller

• Controller: ALMACENES FERRAGUT S.L.
• Tax ID (NIF/CIF): B07782535
• Address: C/ Illes Baleares 2, (Son Bugadelles Industrial Estate) 07180 – Calvià, Balearic Islands, Spain
• Email: almacenes@ferragut.com
• Telephone: +34 971 69 70 00

2. Source of Data

The personal data processed by Almacenes Ferragut is obtained directly from the data subject through the forms available on the website (including the contact form), email communications, use of the AI Advisor, and voluntary interactions on social media.

3. Personal Data Collected

Through this website, the following personal data may be collected:

• First and last name
• Email address
• Company name (where voluntarily provided)
• Content of the message sent by the user
• Information voluntarily provided in the AI Advisor
• Data derived from interaction with our social media accounts

Under no circumstances are specially protected categories of data requested.

4. Purpose of Processing

The personal data provided will be processed for the following purposes:

• Handling requests for information or contact received through the website contact form or by email.
• Storing the data provided through the contact form in Almacenes Ferragut's internal systems to manage and track requests.
• Sending response communications to users via email.
• Responding to technical or commercial inquiries.
• Internally analyzing common inquiries to improve service quality.
• Managing interaction with users through social media.

Data will not be used to send unsolicited commercial communications.

5. Legal Basis for Processing

The processing of personal data is based on the following legal grounds set out in Article 6 of the GDPR:

• Consent of the data subject (Art. 6.1.a GDPR): the user gives their explicit consent by accepting this Privacy Policy before submitting any form on the website. This consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to its withdrawal.
• Pre-contractual measures (Art. 6.1.b GDPR): when the user requests information about Almacenes Ferragut's products or services, processing is necessary to respond to that request prior to any potential contractual relationship.
• Legitimate interests of the controller (Art. 6.1.f GDPR): for the internal analysis of received inquiries with the aim of improving the service and ensuring website security, provided that such interests do not override the fundamental rights and freedoms of the data subject.

6. Use of the AI Advisor

The website provides an AI Advisor whose purpose is to offer general guidance regarding products, materials, and solutions related to Almacenes Ferragut’s business activity.

Queries made through the AI Advisor may be stored and processed in order to respond to the user’s request and improve service quality, without any automated decisions being made that produce legal or significant effects.

Under no circumstances will automated decisions be made that produce legal or significant effects for the user. The responses provided are for informational purposes only and do not constitute binding technical or professional advice.

7. Data Retention

• Contact and email inquiries: up to 12 months.
• Queries made through the AI Advisor: up to 12 months.
• Social media interactions: in accordance with each platform’s policies.

After these periods, data will be securely deleted.

8. Data Recipients and Data Processors

Personal data will not be transferred to third parties unless required by law or in the cases described below.

Almacenes Ferragut uses the following technology providers acting as data processors under Article 28 of the GDPR, with whom appropriate data processing agreements have been executed:

• Supabase (Supabase Inc., United States): database platform used to store data received through the contact form and other interactions with the website. Servers may be located outside the European Economic Area (EEA). International data transfers are carried out with appropriate safeguards as required by the GDPR, by means of standard contractual clauses adopted by the European Commission.
• Resend (Resend Inc., United States): transactional email delivery platform used to manage the sending of confirmations and responses to users who contact Almacenes Ferragut. Servers may be located outside the EEA. International data transfers are carried out with appropriate safeguards as required by the GDPR, by means of standard contractual clauses adopted by the European Commission.
• Google (Google LLC) (United States): email and productivity services used internally. Google applies GDPR-compliant transfer mechanisms, including standard contractual clauses and the EU-U.S. Data Privacy Framework.

Users may request additional information about the safeguards applied to these international transfers by writing to: cristinatallon@ferragut.com.

9. Social Media

Almacenes Ferragut maintains profiles on social media platforms to inform users about its products, services, and business activities. Data processing is governed by this policy and by the specific terms and conditions of each social media platform.

10. User Rights

Users may exercise their rights of access, rectification, erasure, objection, restriction of processing, and data portability by sending a request to:
cristinatallon@ferragut.com

Users also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).

11. Security Measures

Almacenes Ferragut adopts the necessary technical and organizational measures to ensure the security, integrity, and confidentiality of personal data, preventing loss, alteration, or unauthorized access.

12. Modifications

This Privacy Policy may be modified to adapt to legislative changes or to the website’s activities. Any modifications will be published on this same page.

13. Supervisory Authority

If the user considers that the processing of their personal data infringes applicable regulations, they may lodge a complaint with the Spanish Data Protection Agency (AEPD).

Last updated: 08/04/2026