Privacy policy

1. Data controller

Your data is processed by:

• — Controller: Griferia Sanitaria Rovira, S.A.
• — Tax ID (NIF/CIF): A08452955
• — Address: C/ Major, 251-255 · 08759 Vallirana · Barcelona, Spain
• — Email: info@griferiarovira.com
• — Phone: +34 936 830 406

2. Purposes of processing

We process your data to:

• — Handle the enquiries and requests you send us by email, phone, or when booking a visit to the Creative Studio.
• — Manage our relationship with clients, distributors, architects, interior designers and specifiers.
• — Analyse aggregated Site usage with Google Analytics 4, only if you accept analytics cookies.
• — Analyse interaction and browsing through heatmaps and session recordings with Microsoft Clarity, only if you accept analytics cookies.
• — Ensure the technical operation, security and correct display of the Site (necessary cookies, always active).

3. Legal basis

The legal basis for processing is:

• — Your consent (Art. 6.1.a GDPR and Art. 22.2 LSSI-CE), for analytics cookies: you can give, refuse or withdraw it at any time from "Cookie preferences", without this affecting your access to the Site.
• — Rovira’s legitimate interest (Art. 6.1.f GDPR), in responding to enquiries you initiate yourself.
• — Compliance with legal obligations, where applicable.

4. Recipients of processing

We do not share your data with third parties except where legally required. We share data with the following processors, who provide services to Rovira:

• — Google Ireland Limited (Google Analytics 4) — audience measurement and Site analytics.
• — Microsoft Ireland Operations Limited (Microsoft Clarity) — interaction analysis, heatmaps and session recordings.
• — Cloudflare, Inc. — hosting, content delivery network and Site security.

5. International transfers

Google and Microsoft may transfer certain data to servers located outside the European Economic Area, including the United States. These transfers are covered by the EU-U.S. Data Privacy Framework and/or standard contractual clauses approved by the European Commission, as appropriate safeguards under Chapter V of the GDPR.

6. Retention period

We keep contact data for as long as a relationship or legitimate interest exists, and afterwards for the legally applicable limitation periods.

Google Analytics 4 data is kept for the period configured in the tool (a maximum of 14 months); Microsoft Clarity data, according to its own retention policy. In both cases, this data is only generated if you have given your consent, and collection stops as soon as you withdraw it.

7. Your rights

You can exercise the following rights at any time by writing to info@griferiarovira.com, stating the right you wish to exercise and enclosing a copy of an identity document:

• — Access: find out what data of yours we process.
• — Rectification: correct inaccurate or incomplete data.
• — Erasure: request that we delete your data.
• — Objection: object to a specific processing activity.
• — Restriction: restrict the use of your data in certain cases.
• — Portability: receive your data in a structured, commonly used format.
• — Withdraw your consent at any time, without affecting the lawfulness of prior processing, including managing cookies from "Cookie preferences" in the footer.

8. Complaints to the supervisory authority

If you believe that the processing of your data does not comply with the regulations, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) through its website at www.aepd.es, or with the supervisory authority of your country of residence within the European Union.

9. Cookies

The Site uses first- and third-party cookies. You can find the full detail — types, purpose, provider and duration — in our Cookie Policy, and change your choice at any time from "Cookie preferences" in the footer.

10. Minors

The Site is not directed at children under 14. If you are under that age, you need the consent of a parent or legal guardian to provide us with your data.

11. Security

Rovira applies appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or alteration, as required by the GDPR.

12. Changes to this policy

We may update this Privacy Policy to reflect legislative developments or changes to the Site. The date of the last update appears at the top of this page.