Privacy Policy

Last updated: 7 August 2026.

1. Data controller

The data controller for the personal data collected via the website www.avantarea.com (hereinafter, the ‘Website’) is:

  • Data controller: AVANT AREA EUROPE, S.L.
  • Trading name: AVANTAREA.
  • Tax Identification Number (NIF): B12977138.
  • Registered office: Polígono Industrial Belcaire, plot 304, 12600 La Vall d’Uixó, Castellón, Spain.
  • Email: info@avantarea.com.
  • Telephone: (+34) 964 69 08 00.

Hereinafter, AVANT AREA EUROPE, S.L. shall be referred to as ‘AVANTAREA’.

2. Applicable legislation

AVANTAREA processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (hereinafter, the ‘GDPR’), Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights (hereinafter the ‘LOPDGDD’), Act 34/2002 of 11 July on Information Society Services and Electronic Commerce (hereinafter the ‘LSSI’) and any other applicable legislation.

3. Personal data we may process

Depending on your relationship with AVANTAREA and the services you use, we may process the following categories of data:

  • Identification and contact details: first name, surname, postal address, email address, telephone number and, where necessary, identity document or tax identification number.
  • Account details: username, securely stored password, preferences, saved addresses and account history.
  • Purchase and contract data: selected products, measurements, finishes, customisations, quotes, orders, returns, incidents, warranties, billing and delivery addresses, and communications relating to the purchase.
  • Financial and transaction data: billing details, amount, payment method, status and transaction reference. Generally speaking, AVANTAREA does not receive or retain full card details when payment is made via a financial institution’s or payment provider’s gateway.
  • Communication data: content of enquiries, requests for information, quotations, emails, complaints and other communications with AVANTAREA.
  • Technical and browsing data: IP address, online identifiers, device and browser type, language, operating system, access logs, pages visited, origin or source of the visit, campaign parameters, interactions and data obtained via cookies or similar technologies.
  • Marketing preferences: consent to receive communications, chosen channels, interests and records of subscriptions, unsubscriptions or objections.
  • Professional data: company, job title and professional contact details when acting on behalf of a company, business, distributor or other organisation.

AVANTAREA does not request special categories of data via the Website, such as information on health, political views, religion, racial or ethnic origin, sexual orientation or biometric data. You should not provide us with this type of information unless it is strictly necessary and has been expressly requested with the appropriate safeguards.

4. Source of the data

Personal data may be obtained from the following sources:

  • Directly from you, when you contact AVANTAREA, request a quote, create an account, make a purchase, request assistance, subscribe to communications or exercise your rights.
  • Automatically, when you browse the Website, via technical logs, cookies and similar technologies, in accordance with the preferences you have set.
  • From suppliers involved in the transaction, such as payment providers, transport companies, installers or technology platforms, where necessary to process a purchase, verify its status or resolve an issue.
  • From social media or other platforms when you voluntarily interact with AVANTAREA’s profiles or use features offered by those platforms.

If you provide another person’s data, you must have informed them beforehand and have a valid legal basis for disclosing it. AVANTAREA may ask you to provide evidence of compliance with this obligation.

5. Purposes, legal bases and retention periods

5.1. Responding to enquiries and requests for information or quotations

We will process the data necessary to respond to enquiries received by email, telephone or other channels, to prepare and send quotations, to carry out requested measurements or configurations, and to follow up on the request.

The legal basis is the implementation of pre-contractual measures requested by the data subject (Article 6(1)(b) of the GDPR). Where the enquiry is not related to a potential contract, the legal basis will be AVANTAREA’s legitimate interest in responding and maintaining its business relationships (Article 6(1)(f) of the GDPR).

The data will be retained for the duration of the enquiry’s processing and, at the latest, for twelve months from its closure where it does not result in a contract. If there is an accepted quotation, a contractual relationship or a potential liability, the data will be retained in a duly restricted form for the applicable statutory periods.

5.2. Creating and managing the customer account

We will use the data to register and authenticate the user, maintain their account, save the addresses and preferences they request, allow them to view their orders and facilitate future purchases.

The legal basis is the performance of the contractual relationship or the implementation of pre-contractual measures requested by the user (Article 6(1)(b) of the GDPR).

The data will be retained for as long as the account remains active or until the user requests its deletion. Data relating to purchases, invoices, complaints or other obligations will be retained separately for the relevant statutory periods, even if the account is closed.

5.3. Managing purchases, payments, manufacturing, delivery and after-sales service

We will process the data to manage the shopping basket and order, confirm availability, manufacture or customise products, process or verify payment, issue invoices, organise transport or delivery, keep the customer informed and handle returns, cancellations, repairs, warranties, complaints and incidents.

The main legal basis is the performance of the contract of sale (Article 6(1)(b) of the GDPR). The issuing and retention of invoices, accounting, taxation and the fulfilment of consumer-related obligations are based on compliance with legal obligations (Article 6(1)(c) of the GDPR). Reasonable checks to prevent fraudulent transactions are based on the legitimate interests of AVANTAREA, its customers and payment service providers in preventing fraud and protecting transactions (Article 6(1)(f) of the GDPR).

Commercial and supporting documentation relating to transactions will generally be retained for six years in accordance with the Commercial Code, without prejudice to any other tax, consumer, warranty or limitation periods that may apply. Once the data is no longer required for day-to-day management, it will be blocked and made available solely to address any potential legal liabilities.

5.4. Sending marketing communications

If you voluntarily subscribe or tick the relevant box, we will use your data to send you news, content, promotions, product information and other marketing communications from AVANTAREA via the channels you have authorised. The legal basis is your consent (Article 6(1)(a) of the GDPR).

Where there is a pre-existing contractual relationship, AVANTAREA may send you electronic communications regarding its own products or services similar to those contracted, on the basis of its legitimate interest and Article 21.2 of the LSSI. All messages will include a simple and free procedure for objecting or unsubscribing.

Your data will be processed until you withdraw your consent or object to receiving communications. Thereafter, a minimal record may be retained on an opt-out list to comply with your request and prevent further unsolicited communications.

5.5. Managing interactions on social media

When you follow, mention or contact AVANTAREA via a social media platform, we may process the data accessible on your profile and the content of the interaction in order to respond to you and manage the brand’s presence. The legal basis will be your consent upon initiating the interaction and AVANTAREA’s legitimate interest in responding to public or private communications relating to its activities.

The data will be retained for as long as necessary to manage the interaction, without prejudice to the relevant platform retaining it in accordance with its own privacy policy.

5.6. Ensuring the security and operation of the Website

We will process technical data to administer the Website, maintain your session and shopping basket, remember your language preference, detect errors, prevent unauthorised access, prevent abuse or fraud, and protect systems, users and communications.

The legal basis is AVANTAREA’s legitimate interest in maintaining a secure and operational service (Article 6(1)(f) of the GDPR), as well as the performance of the requested service where technical processing is essential for using an account or completing a purchase (Article 6(1)(b) of the GDPR).

Security logs will be retained for as long as is strictly necessary and, generally speaking, for a maximum of twelve months, unless they need to be retained for longer to investigate an incident, comply with a legal obligation or establish, exercise or defend legal claims.

5.7. Analysing usage, measuring campaigns and personalising advertising

Where you have given your consent to the relevant cookies, we may collect statistics on the use of the Website, analyse the source of visits and campaigns, measure results, and display or measure personalised advertising. The legal basis is consent (Article 6(1)(a) of the GDPR and Article 22(2) of the LSSI).

You can accept, reject or withdraw your consent via the cookie settings panel. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal. Specific providers, cookies, purposes and retention periods can be found in the Website’s Cookie Policy.

5.8. Complying with legal obligations and handling claims

AVANTAREA may process and retain data to comply with requirements from authorities, as well as tax, accounting, commercial, consumer and data protection obligations, and to establish, exercise or defend legal claims. The legal basis will be compliance with legal obligations (Article 6(1)(c) of the GDPR) and the legitimate interest in defending its rights (Article 6(1)(f) of the GDPR).

Data will be retained for the periods required by each regulation and for as long as liabilities may arise.

6. Mandatory nature of data

Fields marked as mandatory are required to process the request, create the account or complete the purchase. If these are not provided, AVANTAREA may not be able to fulfil the request or provide the service. Optional fields may be left blank without this preventing you from continuing, unless they are necessary for a configuration or personalisation that has been expressly requested.

7. Recipients of the data

AVANTAREA does not sell personal data. The data may be disclosed to or made available to the following categories of recipients where necessary for the purposes indicated:

  • Financial institutions, banks and payment service providers, to manage, verify or refund payments and prevent fraudulent transactions.
  • Transport, logistics, assembly, installation or collection companies, to carry out the delivery, installation, return or service requested.
  • Providers of hosting, website maintenance, e-commerce, email, storage, support, security, backups, customer management, analytics or communications services, who will act as data processors where applicable.
  • Consultancy firms, auditors, insurers, solicitors and other professionals where necessary to fulfil obligations or defend rights.
  • Tax authorities, consumer protection authorities, courts, tribunals, law enforcement agencies and other public bodies where there is a legal obligation or a valid request.
  • Social media, analytics or advertising platforms where you have consented to their use or interact directly with them. These entities may act as independent data controllers in accordance with their own terms and conditions.

Where a supplier acts as a data processor, AVANTAREA will enter into the contract required by Article 28 of the GDPR and will allow the supplier to process only the necessary data in accordance with its instructions.

8. International transfers

Some technology, cloud services, analytics, communications or social media providers may be established or process data outside the European Economic Area. Where an international transfer takes place, AVANTAREA will ensure that it is covered by an adequacy decision from the European Commission or by appropriate safeguards, such as standard contractual clauses, binding corporate rules or other mechanisms recognised by Articles 45 to 49 of the GDPR.

You may request further information on the applicable transfers and, where appropriate, a copy or reference to the safeguards used by writing to info@avantarea.com.

9. Automated decision-making and profiling

AVANTAREA does not make decisions based solely on automated processing that produce legal effects concerning the data subject or similarly significantly affect them. Payment providers or financial institutions may apply their own fraud prevention or transaction authorisation systems as independent data controllers, in accordance with their privacy policies.

The personalisation of content or advertising based on cookies will only take place once you have given the required consent, which you may withdraw via the cookie settings.

10. Rights of data subjects

You may exercise the following rights free of charge, where applicable:

  • Access: to find out whether we are processing your data and to obtain a copy.
  • Rectification: to correct inaccurate or incomplete data.
  • Erasure: to request the deletion of data when it is no longer necessary.
  • Objection: object to processing based on legitimate interests and to direct marketing.
  • Restriction: request that processing be temporarily restricted in the cases provided for by law.
  • Portability: receive the data provided in a structured format and transmit it to another data controller.
  • Not to be subject to automated decision-making: request human intervention when a fully automated decision is made that produces significant legal or similar effects.
  • Withdrawal of consent: withdraw your consent at any time without retroactive effect.

To exercise your rights, you may send a request to info@avantarea.com, stating ‘Data Protection’ in the subject line, or send it by post to Polígono Industrial Belcaire, plot 304, 12600 La Vall d’Uixó, Castellón, Spain. You must specify the right you wish to exercise and provide the necessary information to locate your data. Additional identification documents will only be requested where there are reasonable doubts as to your identity.

AVANTAREA will respond within the timeframes set out in the GDPR. If you consider that the processing infringes the regulations, you may lodge a complaint with the Spanish Data Protection Agency or with the supervisory authority of the European Union Member State in which you reside or work.

11. Minors

The Website and the shop are not specifically aimed at minors. In Spain, minors under the age of fourteen must not provide personal data or consent to the processing of such data via the Website without the authorisation of their legal guardians or carers, without prejudice to any higher age limit that may apply in their country of residence. Making purchases requires sufficient legal capacity to enter into a contract.

If AVANTAREA discovers that it has collected data from a minor without the necessary authorisation, it will take reasonable steps to delete such data. Anyone aware of such a situation may report it to info@avantarea.com.

12. Information security

AVANTAREA implements technical and organisational measures appropriate to the risk to protect data against destruction, loss, alteration, unauthorised disclosure or access. These measures include, as appropriate, access controls, permission management, credential protection, backups, system updates, encryption in transit, event logging and incident management procedures.

No system is completely invulnerable. Should a personal data breach occur, AVANTAREA will act in accordance with Articles 33 and 34 of the GDPR, including notifying the supervisory authority and the data subjects where legally required.

13. Accuracy and updating of data

The user guarantees that the data provided is accurate, complete and up to date, and undertakes to notify AVANTAREA of any changes. AVANTAREA may request that the information be updated or verified where necessary to maintain its accuracy or prevent fraudulent use.

14. Third-party links and services

The Website may contain links to or integrations with third-party services. When accessing these, the processing of data may be subject to the privacy policies of their respective controllers. AVANTAREA recommends reviewing these policies before providing information or using such services.

15. Changes to this policy

AVANTAREA may update this policy to reflect regulatory changes, guidelines from supervisory authorities, changes to data processing or new features. The current version will be the one published on the Website and will show the date of its last update. Where a change substantially affects data processing based on consent, consent will be sought again where necessary.

Product added to wishlist