Skip to content
CMOX

Legal

Privacy policy

Last updated: 26 August 2026

Who the controller is

The controller of any data you provide through this website is CMOX VORTEX, S.L. (hereinafter, CMOX).

What data we process, and what for

This website has no user accounts, no private area and no basket. There are only three processing activities, and none of them collects more data than it needs.

1. Replying to your message

If you fill in the contact form, we process your name, your email address, your phone number (optional), the subject and the message. We use them solely to read what you sent and reply to you.

  • Legal basis: your consent when submitting the form (Art. 6(1)(a) GDPR), and pre-contractual steps where what you are asking for is a quotation (Art. 6(1)(b)).
  • Retention: the message arrives in our mailbox and is kept for as long as the conversation lasts and, afterwards, for the applicable statutory limitation periods. You can ask us to delete it sooner.
  • Required fields: name, email, subject and message are needed in order to reply to you. Without them we cannot help you.

2. Preventing bulk form submissions

So that the form is not used by bots, the server stores the time of the most recent submissions against a value derived from your IP address — a cryptographic hash, not the address itself — and refuses more than five submissions per hour. The address is not stored in the clear, it is not cross-referenced with anything else, and the timestamps stop counting after an hour.

  • Legal basis: our legitimate interest in keeping the website working and protected against abuse (Art. 6(1)(f) GDPR).
  • Retention: one hour.

3. Knowing how the website is used

If you accept measurement cookies, Google Analytics tells us which pages are visited and from where, in aggregate form. We explain this in detail in the cookie policy.

  • Legal basis: your consent, which you may withdraw at any time (Art. 6(1)(a) GDPR and Art. 22(2) of the Spanish LSSI).
  • If you do not accept: nothing from Google is loaded and no measurement cookie is stored. Refusing has a real effect, not a cosmetic one.

Who else sees your data

We do not sell or transfer personal data to anyone. Only two third parties are involved, and each one only for its own part:

  • OVH, which hosts the website and the email, as a processor and with its servers inside the European Union.
  • Google Ireland Limited, only if you have accepted measurement cookies. Google may transfer data outside the European Economic Area on the basis of the European Commission’s standard contractual clauses.

We may also disclose data to public authorities and to the courts where a legal rule requires us to do so.

Automated decisions

We do not build profiles and we do not make automated decisions that affect you.

Your rights

You may ask us at any time to give you access to your data, to rectify it, to erase it, to restrict its processing, to object to the processing, or to port it elsewhere. You may also withdraw any consent you have given, without that affecting what was processed before you withdrew it.

To exercise any of these rights, write to info@cmox.es saying which one you want to exercise. We will reply within one month.

If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency, www.aepd.es.

Children

This website is aimed at companies and professionals. We do not knowingly request or collect data from anyone under 14.

Security

The site is served entirely over HTTPS, and the form validates and sanitises everything it receives before processing it. We apply technical and organisational measures appropriate to the kind and volume of data we handle.

Changes to this policy

If we change the way we process data, we will update this page and the date shown above. It is worth checking back from time to time.