Privacy Policy

At Deronya Global we take privacy seriously. This Policy explains transparently what personal data we process, for what purposes, for how long, and what rights you have, in compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

This is an English-language version of our Política de Privacidad. The Spanish text is the legally controlling version under Spanish law.

1. Data Controller

• Controller: Deronya Global (in the process of incorporation as a Spanish S.L.).
• Address: C/ del Túria, 53, 46008 Valencia, Spain.
• Email: Deronyaglobal@gmail.com
• Phone: +34 672 848 303

For any matter relating to your personal data or to exercise your rights, you may contact us at any time through the channels above.

2. Data we process

The website www.deronya.com is informational only and, in itself, collects no personal data through forms. We receive data only when you choose to contact us through one of the following channels:

• Email: your email address and the content of your message.
• WhatsApp: your phone number, the name you display, and the content of the conversation.
• Phone: your number (where a callback is needed) and the content of the conversation, which is not recorded.
• In-person visit by appointment: your name, contact and any data you voluntarily provide.

Browsing data

The website does not use third-party analytics, tracking cookies or advertising pixels. The only information stored locally in your browser is your language preference (localStorage.deronyaLang), which remains exclusively on your device and is not transmitted to Deronya Global. See our Cookies Policy for further detail.

Server logs

The server hosting the website may transiently log the IP address and user agent of visits, for the technical purpose of preventing abuse and ensuring service operation. These logs are retained for a maximum of 30 days and are not cross-referenced with other personal data.

3. Purposes of processing

We process your personal data for the following purposes:

• To respond to your enquiry or request for information about our products and services.
• To confirm the technical compatibility of a product with your vehicle.
• To manage the negotiation, formalisation and performance of any commercial transactions.
• To comply with applicable legal obligations (tax, accounting, commercial).

We do not process your data for profiling, automated marketing, or automated decisions that produce legal effects on you.

4. Legal basis

• Consent of the data subject (Art. 6.1.a GDPR): when you contact us voluntarily, you authorise the processing of the data necessary to respond to you.
• Performance of a contract (Art. 6.1.b): where data is necessary to negotiate or formalise a commercial transaction you have requested.
• Compliance with legal obligations (Art. 6.1.c): where a rule requires us to retain or deliver certain data (e.g., invoicing).
• Legitimate interest (Art. 6.1.f): to maintain technical security of the site and prevent abuse (server logs).

5. Retention period

• Enquiries with no subsequent contract: up to 24 months after the last contact, unless you request earlier deletion.
• Formalised commercial transactions: the legal period applicable under Spanish tax, accounting and commercial law (minimum 6 years).
• Server logs: maximum 30 days.
• Language preference (localStorage): until you delete it from your browser.

6. Disclosure of data to third parties

We do not sell, rent or share your personal data with third parties for commercial purposes. Your data may only be disclosed in the following cases:

• Technical service providers acting as data processors (web hosting, email). These providers process the data solely under our instructions and under contracts that comply with Article 28 GDPR.
• Thunder Carrier UK, in its capacity as manufacturer, only where strictly necessary to confirm technical compatibility of a product with your vehicle or to manage a warranty claim.
• Public authorities, where there is a legal obligation to disclose.

International transfers

Some of our technical providers may be located outside the European Economic Area (for example, in the United Kingdom or the United States). In such cases we ensure the safeguards provided in Chapter V of the GDPR: an adequacy decision by the European Commission, standard contractual clauses, or equivalent.

7. Your rights

As a data subject, you have the right to:

• Access the personal data we process about you.
• Rectification of inaccurate or incomplete data.
• Erasure ("right to be forgotten") when the data is no longer necessary or you withdraw your consent.
• Restriction of processing in certain circumstances.
• Portability of your data in a structured, machine-readable format.
• Object to processing based on legitimate interest.
• Withdraw your consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, write to Deronyaglobal@gmail.com indicating the right you wish to exercise and, if necessary, attaching a copy of an identity document. We will respond within one month.

Complaint to the supervisory authority

If you believe processing does not comply with applicable law, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), located at C/ Jorge Juan, 6, 28001 Madrid, or via its electronic office at www.aepd.es.

8. Security

We apply reasonable technical and organisational measures to protect your data against unauthorised access, accidental loss or destruction. However, no system on the internet is entirely impenetrable; we encourage you to use encrypted channels (HTTPS, WhatsApp) when transmitting sensitive information to us.

9. Changes to this Policy

We may update this Privacy Policy to reflect legal, technical or operational changes. The current version will be published at this same URL, with the date of the last update shown at the top of the document.

Back to home