Your cart
Cart
0
Support: (+001) 1234567xxxx
Mon - Sat: 9:00AM-5:00PM

Privacy policy

PRIVACY POLICY

Last Updated: July 29, 2026

At VEXRIONEU, SL (hereinafter referred to as "we", "us", "our", or "the Company"), accessible via vexrioneu.com, we are committed to protecting the privacy, confidentiality, and security of personal data collected from our customers across Spain and all European Union (EU) member states.

This Privacy Policy informs you about how we collect, process, share, store, and protect your personal information when you visit our website, purchase photography and electronic products, or interact with our services, in compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data Controller Identification

In compliance with Article 13 of the GDPR, the legal entity responsible for processing your personal data is:

  • Legal Business Name: VEXRIONEU, SL

  • NIF / CIF (Tax ID / VAT): ESB88976816

  • Registered Office Address: Carrer del Roselló 132, 3rd floor, door 1, 08036 Barcelona, Spain.

  • Commercial Register Details: Inscrita en el Registro Mercantil de Barcelona, Tomo 1000476378587, Folio 1, Hoja B-660026, Inscripción 1ª.

  • Data Protection Contact Email: support@vexrioneu.com

2. Personal Data We Collect

To fulfill customer orders, manage warranties, and provide customer support, we collect and process the following categories of personal data:

  1. Identification & Contact Data: First name, last name, national identification/NIF/NIE/Passport number (required for statutory tax invoices under Spanish law), billing address, delivery address, email address, and phone number.

  2. Transaction & Financial Information: Order history, items purchased, unique serial numbers of electronic/optical equipment (recorded for warranty tracking and anti-fraud purposes), payment confirmation tokens, and invoice records. (Note: Sensitive credit card details are processed directly by PCI-DSS certified payment gateways and are never stored on our servers).

  3. Technical & Browsing Data: IP address, browser type, device identifiers, general location data (used to calculate destination VAT under EU One-Stop-Shop rules), and web navigation analytics.

  4. Communications & Support Records: Inquiries submitted via contact forms, email communications, technical support tickets, and warranty or return requests.

3. Purposes and Legal Basis for Data Processing

We only process your personal data when we have a valid legal basis under GDPR Article 6:

Purpose of Processing Categories of Data Legal Basis (GDPR Art. 6)
Order Execution & Delivery: Processing orders, issuing legal VAT invoices, tracking express deliveries, and registering serial numbers for warranty tracking. Identification, Contact, Financial, Transaction Performance of a Contract (Art. 6.1.b)
Legal & Fiscal Compliance: Tax accounting, auditing, commercial regulations, and Spanish tax reporting (Ley General Tributaria). Invoices, Fiscal IDs, Order Records Legal Obligation (Art. 6.1.c)
Customer Service & After-Sales: Managing returns, repair requests, Dead-on-Arrival (DOA) claims, and warranty claims. Order History, Identity, Customer Communications Performance of a Contract & Legitimate Interest
Direct Marketing: Sending newsletters, promotional offers, or product updates via email. Name, Email address Explicit Consent (Art. 6.1.a) — requires opt-in
Security & Analytics: Cyberattack prevention, website functionality, and service optimization. Technical & Browsing Data, IP Address Legitimate Interest & Consent (for tracking cookies)

4. Data Retention Periods

We retain your personal data only for as long as strictly necessary to fulfill the purposes for which it was collected, or to satisfy legal, tax, and reporting obligations:

  • Fiscal & Invoice Records: Retained for a minimum of 5 years to comply with Spanish tax audit obligations (Ley General Tributaria) and 3 years to satisfy the statutory product warranty period under Spanish consumer law.

  • Customer Account Records: Retained until you request the deletion or closure of your account.

  • Marketing Communications Data: Retained until you withdraw your consent or click the "Unsubscribe" link in any promotional email.

  • Security & Server Logs: Retained for a maximum period of 6 months.

Once these mandatory retention periods expire, your personal data will be securely destroyed, deleted, or permanently anonymized.

5. Third-Party Data Recipients and International Transfers

VEXRIONEU, SL does not sell, rent, or trade your personal information. To fulfill orders and operate our e-commerce business across the EU, we share necessary data only with trusted third-party Data Processors (Encargados del Tratamiento):

  • Express Couriers & Logistics: (e.g., FedEx, UPS, DHL, SEUR) to ship orders securely across Spain and EU member states.

  • Payment Processing Gateways: (e.g., Stripe, PayPal, RedSys) to handle credit card payments and electronic transactions securely.

  • IT, Hosting & Technical Infrastructure: Cloud server providers, databases, and customer support software located within the European Economic Area (EEA).

  • Tax & Accounting Advisors: Registered tax consultants (gestoría) in Spain for official fiscal filings.

International Transfers: If any technical sub-processor processes data outside the EEA, VEXRIONEU, SL ensures that strict legal safeguards are implemented, such as EU Standard Contractual Clauses (SCCs) or adequacy decisions.

6. Your Data Rights under EU and Spanish Law

As an EU resident, you have full authority over your personal information under the GDPR and LOPDGDD. You can exercise the following rights free of charge:

  • Right of Access: Request confirmation of whether we process your data and receive a copy of your personal records.

  • Right to Rectification: Request correction of inaccurate, outdated, or incomplete data.

  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data when it is no longer necessary for original processing purposes (subject to tax law retention duties).

  • Right to Object: Object to data processing based on legitimate interests or direct marketing.

  • Right to Restriction of Processing: Request temporary restriction of data processing under specific conditions.

  • Right to Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format.

  • Right to Withdraw Consent: Revoke marketing or cookie consent at any time without affecting prior lawful processing.

How to Exercise Your Rights

To exercise any of these rights, please submit a written request accompanied by a copy of an official identification document (NIF, NIE, or Passport) to:

  • Email: support@vexrioneu.com

  • Postal Address: VEXRIONEU, SL, Carrer del Roselló 132, 3rd floor, door 1, 08036 Barcelona, Spain.

If you believe your data protection rights have been violated, you have the right to lodge a formal complaint with the Agencia Española de Protección de Datos (AEPD) at https://www.aepd.es.

7. Data Security

VEXRIONEU, SL implements robust organizational and technical security measures—including SSL/TLS encryption for website traffic, restricted database access control, administrative protocols, and regular system vulnerability scans—to protect your personal data against unauthorized access, loss, alteration, or disclosure.

Login