Last updated: July 2. 2026
The controller for data processing on this website is:
Dominic Levien (Solymontes)
Lugar La Solana 1, 29550 Ardales, Málaga, Spain
NIF: ESY6079820Z
Email: [privacy@solymontes.com]
We have not appointed a Data Protection Officer, as we are not legally required to.
This policy explains what personal data we collect when you visit our website, place an order, create an account, or subscribe to our newsletter, why we collect it, the legal basis, who we share it with, how long we keep it, and your rights. We process data in accordance with the EU GDPR and applicable Spanish (LOPDGDD) and, for our German customers, German data-protection law.
Visiting the website. Our host records standard server log data (IP address, browser/user agent, date/time, pages requested) to deliver the site securely and detect abuse.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in a secure, functioning website.
Placing an order. Name, billing and shipping address, email, phone number, order contents.
Legal basis: performance of a contract (Art. 6(1)(b)); and legal obligation (Art. 6(1)(c)) for the tax/accounting retention of invoice data.
Payment. Payment is processed by our payment providers (see section 5). We do not store full card details; these are handled by the provider. We receive confirmation of payment and a transaction reference.
Legal basis: performance of a contract (Art. 6(1)(b)).
Shipping. We share your name and delivery address with our shipping/logistics partners to deliver your order, including where parcels are consolidated for transport and forwarded via a partner in Germany.
Legal basis: performance of a contract (Art. 6(1)(b)).
Creating an account (optional). If you create an account, we store your profile and order history for your convenience. Guest checkout is available without an account.
Legal basis: performance of a contract / your consent where the account is optional.
Newsletter. If you subscribe, we process your email address (and name, if given) to send you our newsletter. Subscription is double opt-in and you can unsubscribe at any time via the link in every email. Our newsletter is delivered through our email provider (see section 5).
Legal basis: consent (Art. 6(1)(a)). For existing customers we may inform you about similar own products under Art. 6(1)(f) / applicable soft opt-in rules; you can object at any time.
Marketing & analytics (Meta Pixel). With your consent, we use the Meta (Facebook) Pixel to measure and improve our advertising. This sets cookies and transmits data to Meta Platforms Ireland / Meta Platforms Inc. (USA). It runs only after you consent via our cookie banner.
Legal basis: consent (Art. 6(1)(a)) and applicable local ePrivacy/cookie law.
Customer service / contact. If you contact us, we process the data you provide to answer you.
Legal basis: legitimate interest / pre-contractual steps (Art. 6(1)(f)/(b)).
We use technically necessary cookies to operate the site and, only with your consent, cookies for analytics and marketing (including the Meta Pixel). You manage your choices via our cookie-consent banner, and you can withdraw consent at any time with effect for the future. Details of individual cookies, their purpose and lifespan are shown in the consent tool.
We share data only as necessary, under data-processing agreements where required:
Most processing takes place within the EU/EEA. Where a provider transfers data outside the EEA (notably Meta, USA), the transfer is safeguarded by the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework. You can request more information using the contact details in section 1.
You have the right to: access your data; rectify inaccurate data; erase data (“right to be forgotten”); restrict processing; data portability; and object to processing based on legitimate interest. Where processing is based on consent, you may withdraw consent at any time with effect for the future. To exercise any right, contact us using the details in section 1. Note that we may retain data we are legally obliged to keep (e.g. invoice records) even after an erasure request.
If you believe our processing infringes data-protection law, you may complain to a supervisory authority. Our lead authority is the Spanish Agencia Española de Protección de Datos (AEPD) (www.aepd.es). Customers in Germany and other EU countries may also contact their local data-protection authority.
We use appropriate technical and organisational measures (including TLS encryption in transit) to protect your data against loss, misuse and unauthorised access.
We may update this policy to reflect changes in our processing or the law. The current version is always available on this page, with the “last updated” date above.
For any privacy question or to exercise your rights: mail@solymontes.com — Dominic Levien, Lugar La Solana 1, 29550 Ardales, Málaga, Spain.