Skip to content
Data protection

Privacy policy

Last updated: 2026-10-30

1. Identity of the controller

This policy explains how we process your personal data, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, GDPR), articles 13 and 14, and with Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

The data controller is:

Owner: Textura Decoración S.L.
Trade name: Vegasmat
Tax ID (CIF): B-30659213
Registered office: Ctra. N-301, km 431, Miranda, 30319 Cartagena (Murcia), España
Registration details: Murcia Commercial Registry (Registro Mercantil de Murcia). Volume (tomo) 1503, folio 34, section 8, sheet (hoja) MU-733
Email: info@vegasmat.com
Phone: +34 618 265 712 · +34 618 265 667 · +34 902 022 180
Website: vegasmat.com

Data Protection Officer: we have not appointed a Data Protection Officer, because our activity is not one of the cases in which it is mandatory (art. 37 GDPR and art. 34 LOPDGDD). For any matter concerning your data, write to us at info@vegasmat.com.

2. Principles applied to processing

We process your data in accordance with the principles of article 5 GDPR:

  • Lawfulness, fairness and transparency: we only process data with a legal basis and explain how we do it.
  • Purpose limitation: we use the data only for what is stated in this policy.
  • Data minimisation: we only ask for what is needed to reply to you and prepare the quote. We do not ask for your tax ID or postal address.
  • Accuracy: we keep the data up to date and correct any inaccurate data.
  • Storage limitation: we keep the data only for the period stated in section 7.
  • Integrity and confidentiality: we protect the data with the measures described in section 10.
  • Accountability: we can demonstrate that we comply with these principles.

3. How we obtain personal data

We only obtain personal data through the two forms on the website, and you always provide it yourself. We do not obtain data from other sources.

Contact form (contact page)

  • name
  • company
  • email address
  • phone number
  • subject
  • message
  • privacy policy acceptance checkbox

Quote form (request a quote)

  • name
  • company
  • email address
  • phone number
  • message
  • privacy policy acceptance checkbox

Data recorded by the server when a form is submitted

  • IP address
  • browser (user agent)
  • page language
  • page or website from which the form was reached
  • date and time of submission and consent

We keep these as proof that you gave your consent and of when you gave it.

Mandatory fields are marked on each form. If you do not fill them in, we cannot handle your enquiry or prepare the quote. The other fields are optional.

The website has no user registration, newsletter or online shop.

4. Purpose of processing

We process your data in order to:

  • handle and reply to the enquiries you send us through the contact form;
  • review your quote request, prepare the quote —if you send us your logo, we use it to assess the printing and prepare the proposal— and follow up on that request;
  • notify Vegasmat staff internally that your request has arrived, so that they can deal with it;
  • keep proof of your consent.

We do not use your data to send you advertising or newsletters, we do not build profiles and we do not make automated decisions that affect you (art. 22 GDPR).

5. Legal basis

The legal basis for each processing operation is as follows:

  • Contact form: your consent (art. 6.1.a GDPR), which you give by ticking the privacy checkbox.
  • Quote form: taking steps at your request prior to entering into a contract (art. 6.1.b GDPR), that is, preparing the quote you ask us for; and your consent (art. 6.1.a GDPR), which you give by ticking the privacy checkbox.
  • Internal notice: the same basis as the request it relates to, because it is part of handling it.
  • Record of IP address, browser, language, date and time: compliance with a legal obligation (art. 6.1.c GDPR), since article 7.1 GDPR requires the controller to be able to demonstrate that the data subject has consented.

You may withdraw your consent at any time by writing to info@vegasmat.com. Withdrawing it does not affect the lawfulness of processing carried out before.

6. Categories of data

We process the following categories of data:

  • Identification data: name.
  • Contact data: email address and phone number.
  • Professional data: the company you work for.
  • Project or enquiry data: the subject (contact form), the message and, if you come from a model or sector page, that model or sector.
  • Technical consent data: IP address, browser, language, date and time.

We do not process special categories of data (art. 9 GDPR), such as health data, political opinions or religion. Please do not include them in your message.

7. Data retention

Requests received through the contact and quote forms —including the data that prove consent— are kept for one year from receipt. After that period, they are deleted.

If you ask us to delete them earlier, or withdraw your consent, we delete them, unless we must keep them blocked to deal with possible legal liabilities during the applicable limitation periods (art. 32 LOPDGDD).

If your request leads to an order, the data become part of the business relationship and are kept for as long as it lasts and, afterwards, for the periods required by law (for example, six years for accounting records, art. 30 of the Spanish Commercial Code).

8. Recipients of the data

We do not disclose your data to third parties, except where required by law (for example, to the tax authorities or to courts when they request it).

Data processors

These providers process data on our behalf, under a data processing agreement (art. 28 GDPR), and only to provide their service to us:

  • Web hosting: NEURALSEC GROUP, S.L. (CIF B-23906779), C/ Lotos 11, 1.º Dcha., 30205 Cartagena (Murcia), España. Hosts the website and the requests received.
  • Email: NEURALSEC GROUP, S.L. (CIF B-23906779). Sends the internal notice for each request.

International transfers

The web hosting servers are located in Spain, so hosting does not involve any transfer of data outside the European Economic Area (EEA).

If the email provider were Google (Gmail or Google Workspace), emails could be processed in the United States. In that case, the transfer would be covered by the EU-U.S. Data Privacy Framework, to which Google LLC has self-certified (European Commission Implementing Decision (EU) 2023/1795 of 10 July 2023; arts. 44 and 45 GDPR).

Google map on the contact page

The contact page includes a Google Maps map that is not loaded when the page opens. Only if you click the button to view the map does your browser connect to Google —Google Ireland Limited (Gordon House, Barrow Street, Dublín 4, Irlanda), and its parent company Google LLC, in the United States—, which receives your IP address and may set its cookies. Google processes that data under its own privacy policy. Google LLC has self-certified to the EU-U.S. Data Privacy Framework. If you do not click the button, nothing is sent to Google.

Apart from these cases, there are no international transfers of data.

9. Your rights

You may exercise the following rights at any time, free of charge (arts. 15 to 22 GDPR):

  • Access: find out whether we process your data and obtain a copy.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: ask us to delete your data.
  • Objection: object to the processing of your data.
  • Restriction of processing: ask us to keep your data without using it, in the cases provided by law.
  • Portability: receive your data in a structured, commonly used format, or have us transmit it to another controller.
  • Withdraw your consent at any time, without affecting the lawfulness of prior processing.

How to exercise them: write to us at info@vegasmat.com or by post to Textura Decoración S.L., Ctra. N-301, km 431, Miranda, 30319 Cartagena (Murcia), España, stating which right you wish to exercise. If we have reasonable doubts about your identity, we may ask for additional information to confirm it (art. 12.6 GDPR). We will reply within one month, which may be extended by two further months in complex cases, in which case we will let you know (art. 12.3 GDPR).

Complaint to the supervisory authority: if you believe we have not properly handled your rights or that the processing of your data does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD):

  • Website: www.aepd.es
  • Electronic office: sede.aepd.gob.es
  • Address: C/ Jorge Juan, 6, 28001 Madrid, Spain
  • Phone: 901 100 099 · 912 663 517 (+34)

10. Data security

We apply technical and organisational measures appropriate to the risk (art. 32 GDPR), including:

  • the website is served over an encrypted connection (HTTPS), so what you send through the forms travels encrypted;
  • requests are managed from an internal administration panel that only authorised Vegasmat staff can access, with a username and password; passwords are stored hashed, never in plain text;
  • staff with access to the data are bound by a duty of confidentiality (art. 5 LOPDGDD);
  • providers that process data on our behalf do so under a data processing agreement (art. 28 GDPR).

Should a security breach occur that posed a risk to you, we would act in accordance with articles 33 and 34 GDPR.

12. Accuracy and truthfulness of data

The data you provide must be true, accurate, complete and up to date. You are responsible for the truthfulness of what you send and for informing us of any changes.

If you give us data about another person (for example, a colleague at your company as a contact person), you guarantee that you have informed them of the content of this policy and that you are entitled to provide their data.

13. Acceptance and consent

By ticking the privacy checkbox and submitting a form, you confirm that you have read this policy and consent to the processing of your data for the purposes stated. The checkbox is not pre-ticked and the form cannot be sent without it. You may withdraw your consent at any time by writing to info@vegasmat.com.

Minors: the website is aimed at businesses and professionals. In Spain, only people aged 14 or over can consent to the processing of their own data (art. 7 LOPDGDD). If you are under 14, do not send us your data. If we find that a minor under that age has done so without the consent of their parents or guardians, we will delete the data.

14. Changes to the Privacy policy

We may modify this policy to adapt it to legal changes or to changes in the website and in the processing. The version in force is always the one published on this page. If a change significantly affects how we process your data, we will make it clearly visible on the website.

Last updated: 30 October 2026.

Last updated: 2026-10-30 · Textura Decoración S.L.