Last updated: 28 September 2026
This is an English translation provided for convenience. In the event of any discrepancy, the Spanish version prevails.
Data controller
| Controller | Gallardo Automotive Technologies, S.L. |
| Tax ID (NIF) | B67996454 |
| Address | Calle Pino Verde, 17 · 41410 Carmona (Seville), Spain |
| Contact email | pedidos@gallardoparts.es |
| Phone | +34 954 92 59 52 |
What data we process, why, and on what legal basis
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Opening and managing the trade account and the My Gallardo portal | Identification and contact details of the contact person and the company’s tax details | Performance of the contract and legitimate interest in the business relationship | For as long as the relationship lasts |
| Managing orders, invoicing, shipping and payments | Order details, delivery address and payment details | Performance of the contract and compliance with legal, commercial and tax obligations | 6 years (Spanish Commercial Code) and 4 years (Spanish General Tax Law) |
| Core deposits, returns, warranties and repairs | Case details, part number, serial number and photographs of the part | Performance of the contract | Same as orders |
| Handling enquiries, price requests and trade account applications | Contact details and content of the enquiry | Pre-contractual measures taken at the data subject’s request | 1 year if no relationship follows |
| Logging catalogue searches, to understand demand and decide which part numbers to add | Search text, whether it returned results, approximate region and country, pseudonymised visit identifier and, if logged in, the customer account | Legitimate interest in completing the catalogue with the parts the market demands | 24 months, deleted automatically |
| Communications about products and services similar to those already purchased | Business contact details | Legitimate interest (article 21.2 of Spanish Law 34/2002, LSSI), with the option to unsubscribe in every message | Until you unsubscribe |
About the search log: the IP address is used only to work out the approximate region and country and is not stored. The visit identifier is an irreversible value that changes every day, so it cannot be used to follow a user’s activity from one day to the next.
Who we share data with
Data may be disclosed to third parties that provide services to Gallardo, under a data processing agreement where applicable:
- Website hosting provider (Arsys, Spain).
- Email and office software services (Microsoft 365).
- Business management system (Sage).
- Carriers, for deliveries and collections.
- Banks and payment gateways, to collect payment for orders.
- Tax, accounting and employment advisers.
- Public authorities, courts and law enforcement agencies, where required by law.
Microsoft services may involve access from outside the European Economic Area, covered by the safeguards provided for in the General Data Protection Regulation, in particular the standard contractual clauses approved by the European Commission.
Your rights
Anyone may exercise their rights of access, rectification, erasure, objection, restriction of processing and portability by writing to pedidos@gallardoparts.es or to the postal address given above, proving their identity. You may also withdraw any consent given at any time, without affecting the lawfulness of processing carried out before withdrawal.
If you believe your data is not being processed correctly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority of your country of residence in the European Union.
Security, accuracy and changes
Gallardo applies appropriate technical and organisational measures to protect personal data. The customer guarantees that the data provided is accurate and undertakes to report any changes. Where the customer provides data about other people in their company, they must have informed them of this processing beforehand.
This policy may be updated to reflect changes in the law or in how the website works. The version in force is always the one published, with its update date.