Information about personal data processing
At Kovizu S.L. (hereinafter 'Kovizu', 'we' or 'the company'), we are committed to protecting and respecting your privacy. This privacy policy explains how we collect, use, store, and protect your personal information when you use our website kovizu.com and our custom parts manufacturing services.
Kovizu 904 Paseo de Larratxo, 20017 Guipúzcoa, Spain
We collect and process the following types of personal data:
Full name, email address, phone number, postal address.
Order history, product preferences, commercial communications.
Billing address, tax information (ID number, Tax ID), payment data (processed by secure third parties).
IP address (anonymized), browser type, pages visited, browsing time.
Technical specifications, design files, customization preferences for products.
We process your personal data based on the following legal bases under GDPR:
For direct marketing, non-essential cookies, and promotional communications.
To process orders, manage customer accounts, provide customer service.
For web analytics, service improvement, fraud prevention, website security.
To comply with tax, accounting, and billing obligations.
We use your personal data for the following purposes:
We do not sell or rent your personal data to third parties. We share data only when necessary to provide our services:
Hosting companies, payment processors, shipping services, web analytics providers.
All have data processing agreements and comply with GDPR.
When required by law or to protect our legal rights.
For product delivery (only data necessary for shipping).
Some of our service providers may be located outside the European Economic Area (EEA). In such cases, we ensure that:
We retain your personal data for as long as necessary to fulfill the purposes for which it was collected:
While you maintain an active account with us
7 years (Spanish tax billing requirement)
Until you withdraw your consent
26 months (Google Analytics)
3 years to demonstrate compliance
As a personal data subject, you have the following rights:
You can request a copy of the personal data we hold about you.
You can request that we correct inaccurate or incomplete personal data.
You can request that we delete your personal data in certain circumstances.
You can request that we limit the processing of your personal data.
You can request to receive your data in a structured, machine-readable format.
You can object to processing based on legitimate interests or for direct marketing.
You can withdraw your consent at any time when processing is based on consent.
To exercise any of these rights, use our contact form. We will respond to your request within 7 business days.
We implement appropriate technical and organizational measures to protect your personal data:
Our services are intended for people over 16 years of age. We do not intentionally collect personal data from minors under 16 without parental consent. If we discover that we have collected data from a minor without consent, we will delete it immediately.
We reserve the right to update this privacy policy to reflect changes in our practices or legal requirements. We will notify you of any significant changes by email or through a prominent notice on our website. The date of the last update is indicated at the top of this policy.
If you have any questions about this privacy policy or about how we process your personal data, you can contact us through our contact form on the website.
We commit to responding to all inquiries within 7 business days.