Skip to content

Privacy policy

Last updated: 3 September 2026

English translation provided for information. In the event of any discrepancy, the Spanish version prevails.

Data controller

  • Owner: M.A COLOR CAR SL · Tax ID (NIF) B23927528
  • Registered office: Carrer Almansa, 26, 03206 Elx / Elche, Alicante, Spain
  • Contact: info@macolorcar.com

What data we process and why

This website is aimed at professionals. There is no online selling, so we do not collect payment data. We process data in four situations:

1. Information and quote requests

  • Data: name, company, email address or phone number and the message you write.
  • Purpose: to answer your enquiry and prepare the quote.
  • Legal basis: your consent and the pre-contractual steps taken at your request (Articles 6(1)(a) and 6(1)(b) GDPR).
  • Retention: for as long as the business relationship lasts and, afterwards, for the statutory limitation periods. If no relationship follows, the data is deleted once the enquiry is resolved and, at the latest, after one year.

2. Customer account

  • Data: full name, company, tax ID, phone, postal address, email address, password (stored encrypted; nobody can read it), language and any notes you wish to leave us for your orders.
  • Purpose: to create and manage your account, show you sales prices once it is activated, handle your orders and issue invoices.
  • Legal basis: performance of the business relationship you request (Article 6(1)(b)), legal invoicing obligations (6(1)(c)) and your consent when registering (6(1)(a)).
  • Activation: accounts are activated one by one by a person at M.A COLOR CAR SL. There is no automated decision-making.
  • Retention: for as long as the account exists. You can delete it yourself from your customer area; invoicing data is kept afterwards for as long as tax and commercial law require.

3. Google reviews

  • Data: user name, rating, text and date of the public reviews on our Google listing. We do not display profile photos.
  • Purpose: to show on the website the opinions customers have published on Google.
  • Legal basis: legitimate interest (Article 6(1)(f)) in showing opinions their authors made public. If you wrote a review and do not want it shown here, write to us and we will remove it.

4. Website analytics

  • Data: pages visited and technical browser data, in aggregate form.
  • Purpose: to learn which content is useful and improve the site.
  • Legal basis: your consent, which you can withdraw at any time from the cookie policy. If you do not accept, no analytics tool is loaded.

Recipients and processors

We do not pass your data on to third parties. We do use providers that process data on our behalf under data processing agreements:

  • Supabase — database and customer accounts, on servers in the European Union (Ireland).
  • Vercel Inc. — website hosting and content delivery network.
  • Resend Inc. — sending the website’s emails (account confirmation, password recovery and internal notifications).
  • Google Ireland Ltd. — analytics, only if you have given your consent.
  • Development and maintenance provider — administers the website and keeps a daily backup, stored in the European Union and retained for two weeks.

Vercel, Resend and Google may process data in the United States. Those transfers rely on the EU–US Data Privacy Framework where the provider is certified and, failing that, on the standard contractual clauses approved by the European Commission.

If you write to us on WhatsApp

The website offers links to contact us on WhatsApp and to share a product page. When you use them, the conversation takes place on WhatsApp (Meta Platforms Ireland Ltd.) and is governed by its own terms and privacy policy, over which we have no control. We treat the content of those messages just like a request from the contact form: to assist you. If you would rather no third party were involved, email us or call us.

Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to info@macolorcar.com, stating which right you wish to exercise and proving your identity. We reply within one month.

If you have a customer account, you can correct your data and delete the account directly from your customer area.

When we delete something, it disappears immediately from the website and the database, but it may remain for up to two weeks in the backups, which are renewed automatically. After that, no trace remains.

If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).

Minors

This website and its services are aimed at professionals and companies. We do not knowingly collect data from anyone under 14; if we find that we have, we delete it.

Security

We apply reasonable technical and organisational measures to protect your data: always-encrypted transmission, passwords stored with irreversible encryption, and access to requests and accounts restricted to M.A COLOR CAR SL staff and providers under a processing agreement.

Changes to this policy

If anything relevant changes (a new processing activity, a different provider), we will update it here and change the date in the heading.