Privacy Policy

Last updated: September 9, 2026

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), users of the website ioves.com (hereinafter, “the Website”) are informed about the policy for processing their personal data, so that they may freely and voluntarily decide whether to provide the data that may be requested.

1. Data Controller

IOVES SPA
VIA DELL’INDUSTRIA 9
32040 LOZZO DI CADORE BL
Província de Belluno, Italia
IT00054960257

2. Principles applied to data processing

The processing of personal data is governed by the following principles:

Lawfulness, fairness and transparency: the user’s consent is always required, or another legal basis applies to the processing.
Data minimization: only the data strictly necessary for the intended purpose is requested.
Storage limitation: data is kept only for as long as necessary to fulfil the purpose of the processing and any legal obligations.
Integrity and confidentiality: appropriate technical and organizational measures are implemented to ensure data security.

3. What is the purpose of processing personal data?

3.1 Contact form

When a user fills in the Website’s contact form, we process the data provided (name, email address and, where applicable, phone number and message) for the following purposes:

To handle and respond to inquiries, requests or information requests submitted.
To manage the relationship that may be established with the user, if any.

Legal basis: consent of the data subject, given by ticking the corresponding box and submitting the form (Art. 6.1.a GDPR).

3.2 Analytics cookies

We use analytics cookies (e.g., Google Analytics) to understand how users interact with the Website, compile usage statistics, and improve our content and services.

Legal basis: user consent, given through the cookie settings panel (Art. 22 of the Spanish LSSI and Art. 6.1.a GDPR).

3.3 Advertising and remarketing cookies

We use third-party cookies (e.g., Meta Pixel from Meta/Facebook and Google Ads) for the following purposes:

To display personalized advertising based on the user’s browsing activity.
To carry out remarketing or retargeting campaigns on social media and other advertising platforms.
To measure the performance of our advertising campaigns.

Legal basis: user consent, given through the cookie settings panel (Art. 22 of the Spanish LSSI and Art. 6.1.a GDPR).

For more detail on the specific cookies used, their purpose, duration and how to disable them, please see our [Cookie Policy].

4. How long will the data be kept?

The personal data provided will be kept as follows:

Contact form: for as long as the relationship is maintained, or until the user requests its deletion, and in any case, for the legally required periods.
Analytics and advertising cookies: according to the retention periods specified in the Website’s Cookie Policy, or until the user withdraws consent.

5. What is the legal basis for processing the data?

The legal basis for processing the data is the consent of the data subject, given freely, specifically, in an informed manner and unambiguously by ticking the corresponding box on the contact form, or by accepting the settings in the cookie panel.

The user may withdraw their consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.

6. To which recipients will the data be disclosed?

The data may be disclosed to the following processors or third parties, to the extent necessary to provide the services described:

Hosting provider: Aruba Business Partner, for hosting the Website.
Google LLC (Google Analytics and Google Ads), for web analytics and advertising campaign management.
Meta Platforms, Inc. (Meta Pixel), for managing advertising and remarketing campaigns on Facebook and Instagram.
[OTHER PROVIDERS: e.g., email marketing tool, CRM, etc.], where applicable.

International data transfers

Some of the providers mentioned above (Google, Meta) may be located, or may process data, outside the European Economic Area (EEA), in particular in the United States. In such cases, the transfer is based on the safeguards provided for under the GDPR, such as the Standard Contractual Clauses approved by the European Commission or other recognized adequacy mechanisms adopted by those providers.

7. What are the users’ rights?

Any individual has the right to:

Access their personal data.
Rectify inaccurate or incomplete data.
Request erasure of their data when, among other reasons, it is no longer necessary for the purposes for which it was collected.
Request restriction of the processing of their data, in which case it will only be kept for the exercise or defense of claims.
Object to the processing of their data, including processing carried out for direct marketing purposes.
Request portability of their data.
Withdraw consent at any time.

These rights may be exercised by written request addressed to info@ioves.com, indicating the right being exercised and enclosing a copy of an identification document.

Users are also informed that, if they believe their data has not been processed appropriately, they have the right to file a complaint with the Spanish Data Protection Agency (AEPD), through its electronic office, or with their local supervisory authority.

8. How have we obtained your data?

The personal data processed has been obtained directly from the data subject through the Website’s contact form, as well as through cookies installed during browsing, with the user’s prior consent.

9. Categories of data processed

Only identification data is processed (name, email address, phone number if provided, and browsing data derived from cookies). No special categories of data are processed.

10. Security measures

The legally required levels of personal data protection have been adopted, implementing the technical and organizational measures necessary to prevent the loss, misuse, alteration, unauthorized access to, and theft of the data provided, without prejudice to the fact that internet security measures cannot be considered entirely impregnable.

11. Minors

The Website is not directed at minors. If we become aware that data has been collected from a minor without the consent of their parents or legal guardians, it will be deleted immediately.

12. Changes to this privacy policy

We reserve the right to modify this privacy policy to adapt it to legislative or case-law developments, as well as industry practices. In such cases, changes will be announced on the Website with reasonable notice before they take effect.

For questions related to data protection, you may contact us at info@ioves.com.