Privacy policy

Controller

OPER FACTORY EUROPE, S.L.

Tax ID

B16421158

Address

Vilablareix, 9 · 17190 Salt (Girona), Spain

Contact

contact@operfactory.com

Write to that address for anything in this policy, including to exercise the rights listed below.

Nothing you type. There is no contact form here. Every call to action either opens your own email client or sends you to our quotation application, which is a separate service.

Technical connection data. The site is served from Amazon Web Services. Like any web server, it records the request: IP address, date and time, the page requested, the referring page and your browser's user agent. We use this to deliver the site, keep it available and detect abuse.

Usage statistics, with your consent. If you accept in the cookie bar, Google Analytics 4 records the pages you open, the links and buttons you use, the language you read in, your approximate location at country and city level, and the type of device and browser. It tells your browser apart with a random number kept in a cookie, not with your name, and it does not keep your IP address. We use this to see which pages are read and which are not, and to decide what to write next. Nothing about it feeds advertising: Google Signals is switched off, no advertising features are enabled and no Google Ads account is linked to it. Your answer is kept in one cookie that our quotation and customer applications read too, so the same statistics run there under the same consent, and asking once is enough.

Measurement of our own ads, with your consent. When you click one of our Google ads, Google adds an identifier of that click to the address you land on. If you consent to ad measurement, that identifier travels with you to our quotation application, which keeps it with any quote request you create, together with the date and time and the state of your consent, and reports to Google Ads that the click led to a request. The state of your consent goes with the report because Google requires it for every European conversion. We use this only to learn which ads and search terms bring real requests. No tag, pixel or cookie from Google Ads is placed on any of our pages, nothing is used for remarketing or to build audiences, and the ads you see anywhere are not personalised by it. Without your consent the identifier is not passed on and nothing is reported.

Session recordings in the applications, with your separate consent. The quotation and customer applications ask you a second question before loading Microsoft Clarity, which records where you click, how far you scroll and the layout of the screen, so we can see where people get stuck. Every text, number, input and file name is masked in your browser before anything is sent: a recording shows where you clicked, never what you wrote or what you are quoting. When you are signed in, the recording is tagged with a scrambled form of your account's internal identifier, never your name or email, so we can find it if you report a problem. This website does not run it. Nothing about it feeds advertising or a profile of you.

What you send us by email. If you write to us we process your address, your name if you give it, and the content of your message, so we can answer you and, where it leads somewhere, quote and supply your parts.

It loads nothing from any third party until you consent, and then only Google's analytics; the applications add Microsoft's session recording only after their own separate question. None of our pages carries an advertising tag or tracking pixel, none runs remarketing, and nothing here builds a profile of you or makes automated decisions about you. Typefaces are served from our own domain, so opening a page sends nothing to a font provider. The cookie policy lists every cookie and every entry the site keeps in your browser, and how to remove them.

Connection data: our legitimate interest, under article 6.1.f of the GDPR, in serving a working, secure website. The interest is narrow and the data is not used to identify you as a person.

Usage statistics, ad measurement and session recordings: your consent, under article 6.1.a of the GDPR and article 22.2 of Spanish Act 34/2002, given in the cookie bar, one answer per purpose. Nothing is measured, reported or recorded before you give it. You can withdraw it at any time from the Cookie settings link in the footer here or in the applications; that takes effect immediately, everywhere, and does not affect what was lawfully processed before.

Your email: answering an enquiry you sent, and the steps taken at your request before a contract, under article 6.1.b, or our legitimate interest in maintaining a business relationship where no contract follows.

Legal duties: invoicing and accounting records, once you become a customer, under article 6.1.c.

Our hosting and content delivery provider, Amazon Web Services, processes connection data on our behalf, and our email provider processes messages you send us. With your consent, Google Ireland Limited processes usage statistics on our behalf as the provider of Google Analytics 4, and, in the applications and with your separate consent, Microsoft Ireland Operations Limited processes session recordings on our behalf as the provider of Microsoft Clarity. Each acts as a processor under a contract that limits them to what we instruct; the data-sharing options that would let Google use the statistics for its own purposes are switched off.

With your consent to ad measurement, Google Ireland Limited, as the provider of Google Ads, receives the identifier of your ad click, the date and time of the quote request it led to and the state of your consent, under Google's Ads Data Processing Terms, so that it can count the request against the ad in our account.

We do not sell personal data, and we share none of it to target or personalise advertising. We disclose it to public authorities only where the law obliges us to.

Google Analytics, Google Ads and Microsoft Clarity data may be processed on servers in the United States. That transfer rests on the European Commission's adequacy decision for the EU-US Data Privacy Framework, under which Google LLC and Microsoft Corporation are certified, with the standard contractual clauses as a fallback. Where any other provider processes data outside the European Economic Area, the transfer is covered by those clauses together with the additional safeguards they require.

Connection logs are kept only as long as they are useful for security and diagnostics, and are then deleted by our provider. Usage statistics are kept in Google Analytics for fourteen months and then deleted. Session recordings are kept in Microsoft Clarity for thirty days, and the aggregated heat maps drawn from them for up to thirteen months. The cookies that carry both are listed, with their lifetimes, in the cookie policy. An ad click identifier is kept with the quote request it led to, for as long as that request is kept, and is reported to Google Ads within ninety days of the click; Google keeps the conversion in our advertising account under its own retention terms. Email correspondence is kept while the enquiry or the business relationship is live. Commercial and accounting records are kept for the periods Spanish tax and commercial law require, which is generally six years, and are then deleted.

Quoting is a separate application at our quotation app. It asks you to create an account, and a mutual non-disclosure agreement is signed before you upload a drawing, so your design files are covered from the first file onward. That application processes the data you enter into it under the privacy terms published inside it; the measurement described above is the one part it shares with this site, under the same consent and this same page. When you reach it from a page of this site, the link carries the name of that page and, if you arrived from a campaign, the campaign's name, so that we know which page led to a request. It carries the identifier of your ad click only if you consented to ad measurement, and nothing else.

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. Where processing rests on consent, you can withdraw that consent at any time without affecting what was done before; for usage statistics, ad measurement and session recordings, the Cookie settings link in the footer does it in one click.

Write to contact@operfactory.com. We answer within one month. We may ask you to confirm who you are first, so we do not hand your data to someone else.

If you think we have handled your data badly, you can complain to the Spanish supervisory authority, the Agencia Española de Protección de Datos, at aepd.es. We would rather you told us first.

If what we do with data changes, we change this page and the date at the top of it. A change that requires your consent will be asked for before it takes effect, not announced afterwards.