Privacy policy
Thank you for your interest in our company. The protection of your personal data is a high priority for deku cocinas SLU. The use of our website is generally possible without providing personal data. However, if you make use of services such as consultation inquiries, kitchen planning or requests for quotations via our website, it may be necessary to process personal data.
The processing is carried out in accordance with the General Data Protection Regulation (GDPR) and the data protection regulations applicable in Spain.
1. responsible person
deku cocinas SLU
Bulevar de Paguera 16
07160 Paguera
Spain
Phone: +34 971 68 56 97
E-mail: info@deku.es
Website: https://www.deku.es
CIF: B10690360
Registered in the Registro Mercantil de Palma de Mallorca
Controller within the meaning of Art. 4 No. 7 GDPR.
2. legal bases of the processing
The processing of personal data takes place on the basis of:
Regulation (EU) 2016/679 (GDPR)
Ley Orgánica 3/2018 (LOPDGDD)
Ley 34/2002 (LSSI-CE)
Legal basis according to Art. 6 GDPR:
Art. 6 para. 1 lit. a GDPR – Consent
Art. 6 para. 1 lit. b GDPR – contract / pre-contractual measures
Art. 6 para. 1 lit. c GDPR – Legal obligation
Art. 6 para. 1 lit. f GDPR – Legitimate interest
3. purposes of the processing
3.1 Contact requests
Purpose: Processing of inquiries, consulting, preparation of offers
Legal basis: Art. 6 para. 1 lit. b GDPR
Mandatory fields: Name, e-mail address
Storage: Until final processing and within statutory limitation periods.
3.2 Contract processing
Purpose: Delivery, assembly, project planning, invoicing
Legal basis: Art. 6 para. 1 lit. b GDPR and lit. c GDPR
Storage duration:
Commercial and business documents: 6 years (Código de Comercio)
Tax-related documents: at least 4 years (Spanish tax laws)
3.3 WhatsApp communication
On the website, you have the option of using WhatsApp Business to contact us.
Provider:
WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
When used, personal data (telephone number, communication content) is transmitted to WhatsApp.
Legal basis: Art. 6 para. 1 lit. a GDPR (voluntary use)
Third country transfer:
Data transfer to the USA cannot be ruled out. WhatsApp is certified under the EU-U.S. Data Privacy Framework certified.
Note: Communication via WhatsApp is the sole responsibility of the user.
4. hosting
The website is hosted by:
Host Europe GmbH
Hansestr. 111
51149 Cologne
Germany
There is a contract with the hosting provider for order processing in accordance with Art. 28 GDPR.
Processed data:
IP address
Access time
Browser information
Logfiles
Storage period: maximum 30 days
Legal basis: Art. 6 para. 1 lit. f GDPR (security and stability)
5 Google Analytics 4 (GA4)
This website uses Google Analytics 4.
Provider:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Purpose:
Analysis of user behavior to optimize the website.
Processed data:
IP address (shortened)
Device information
Interactions
Usage statistics
Legal basis:
Art. 6 para. 1 lit. a GDPR (consent via cookie banner)
Storage duration:
User data is deleted after 14 months.
Third country transfer:
Google LLC (USA) is authorized under the EU-U.S. Data Privacy Framework certified.
Revocation:
Consent can be changed at any time via the cookie tool.
6. cookies
This website uses cookies in accordance with Art. 22 LSSI-CE.
Consent is managed via the cookie tool from SEOPress.
Categories of cookies
Technically necessary cookies
Statistics cookies (Google Analytics)
Non-essential cookies are only set after active consent has been given.
Consents are logged and can be revoked at any time.
7. categories of personal data
Identification data (name, address)
Contact details (telephone, e-mail)
Contract and project data
Communication content
Logfiles
Usage data
8. recipient of the data
Data will only be passed on to:
Tax consultant (Spain)
Hosting provider (Germany)
IT service provider
Installation partner (contractually required)
Authorities with a legal obligation
It will not be passed on for marketing purposes.
9. storage period
Personal data is only stored for as long as is necessary to fulfill the purpose or as required by law.
After the deadlines have expired, the data will be deleted or anonymized.
10. rights of the data subject
You have the following rights pursuant to Art. 15-22 GDPR:
Information
Correction
Deletion
Restriction
Data portability
Contradiction
Revocation of consents granted
Please address inquiries to:
info@deku.es
11. right of appeal
Competent supervisory authority:
Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan 6
28001 Madrid
Spain
https://www.aepd.es
12. data security
Appropriate technical and organizational measures are implemented in accordance with Art. 32 GDPR:
SSL/TLS encryption
Access restriction
Data backup
Server security measures
13. minors
The website is not intended for persons under the age of 14 (in accordance with the LOPDGDD).
14. actuality
Status: February 2026
We reserve the right to adapt this privacy policy.
