Privacy policy
This policy explains how Carbónica processes the personal data of customers, suppliers, contacts and users of www.carbonica.es (the "Website"), under Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 of 5 December (LOPDGDD).
1. Data controller
- Company name: Carbónica Ibiza, S.L. ("Carbónica")
- Tax ID (NIF): B75900985
- Registered office: C/ Antoni Jaume, 6-8, 2º, 07800 Eivissa, Illes Balears
- Data protection email: privacidad@carbonica.es
- Telephone: +34636815264
2. Data we process
Carbónica processes the following categories of data:
- identification and contact data: name, surname, tax ID, address, telephone, email, company and position;
- commercial and billing data: orders, deliveries, cylinders on deposit, invoices, payments and bank details;
- browsing data: IP address, browser type and pages visited, as described in the Cookie Policy;
- CVs and application details from job candidates.
Data comes from the individual or the company they work for; anyone who provides data about other people confirms that they have informed them of this policy. Data marked as required is needed to deal with the request or provide the service.
3. Purposes, legal basis and retention
| Purpose | Legal basis | Retention |
|---|---|---|
| Answering enquiries received by form, email or telephone | Pre-contractual steps at the individual's request (art. 6.1.b GDPR) or legitimate interest in replying (art. 6.1.f GDPR) | Until answered, and no more than one year unless a business relationship begins |
| Managing customer and supplier relationships: orders, supply and delivery of gases and equipment, cylinder tracking, invoicing and payments | Performance of a contract (art. 6.1.b GDPR); for contact persons, legitimate interest (art. 6.1.f GDPR and art. 19 LOPDGDD) | For the duration of the relationship and then for the statutory periods: six years for commercial records and four for tax records |
| Meeting tax, accounting, product safety and dangerous goods transport obligations | Legal obligation (art. 6.1.c GDPR) | The period set by each law |
| Sending marketing | To customers, about products similar to those they have bought: legitimate interest (art. 6.1.f GDPR and art. 21.2 LSSI-CE). To others: consent (art. 6.1.a GDPR) | Until the individual objects or withdraws consent |
| Handling job applications | Consent (art. 6.1.a GDPR) | One year from receipt |
| Keeping the Website secure | Legitimate interest (art. 6.1.f GDPR) | No more than one year |
Every marketing message includes a simple, free way to unsubscribe. Carbónica does not make decisions based solely on automated processing or create profiles with legal effects on individuals.
4. Recipients
Carbónica shares personal data with third parties only in these cases:
- public authorities and courts, where the law requires it;
- banks, to process payments and collections;
- service providers that process data on Carbónica's behalf, such as IT and cloud services, accountancy and tax advice, and transport, under the processing agreement required by Article 28 GDPR.
Carbónica does not sell or share personal data with third parties for their own marketing.
5. International transfers
Some of Carbónica's technology providers may process data outside the European Economic Area, in particular in the United States. These transfers rely on the European Commission's adequacy decision on the EU-US Data Privacy Framework, where the provider is certified, or on standard contractual clauses approved by the Commission (art. 46 GDPR). Individuals can ask for details of these safeguards at the address in section 1.
6. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent you have given, without affecting the lawfulness of processing before withdrawal.
To do so, write to the email or postal address in section 1, marked "Data protection", with proof of identity. Carbónica will reply within one month.
7. Children
The Website is not aimed at children under 14, and Carbónica does not knowingly collect their data (art. 7 LOPDGDD).
8. Security
Carbónica applies technical and organisational measures appropriate to the risk to protect data against loss, alteration or unauthorised access (art. 32 GDPR).
9. Changes and language
Carbónica may update this policy to reflect changes in the law or in its processing. The version that applies is the one published on the Website. If there is any discrepancy with a translation, the Spanish version prevails.
Last updated: 14/10/2026