Address:
Work Hours
Monday to Friday: 8AM - 5.30PM
Privacy Policy
Privacy Policy — ARTRONIK COMPONENTS SL
Version 3.0 | Last updated: 22 June 2026
1. Data Controller
| Field | Details |
|---|---|
| Controller | ARTRONIK COMPONENTS SL |
| Tax ID (NIF) | B72398084 |
| Registered address | Avenida de San Marcos, 31B, 15820 Santiago de Compostela (A Coruña), Spain |
| Phone | +34 600 850 800 |
| General email | sales@ar-tronik.com |
| Privacy email | intelligence@ar-tronik.com |
| Website | www.ar-tronik.com |
| DPO | Not appointed (not required under the current processing profile) |
2. Personal Data Processed and Purposes
| Category | Data processed | Purpose |
|---|---|---|
| B2B Customers | Company name, tax ID, contact name and job title, email, phone, billing/delivery address, order history, agreed commercial terms | Order management, invoicing, after-sales support, commercial follow-up |
| Suppliers | Company name, tax ID, contact name, email, phone, bank details (IBAN) | Purchase and payment management |
| B2B Prospects | Name, company, job title, email, phone | B2B commercial prospecting (Art. 19 LSSI-CE — B2B exception) |
| Newsletter subscribers | Email address, communication preferences | Sending periodic newsletters on electronic components, partner news and sourcing opportunities |
| Website users | IP address, browsing data, browser type, pages visited, session duration, session and analytics cookies | Website security, anonymous usage statistics, user experience improvement |
| Job applicants (HR) | Name, email, employment history, academic background, other CV data | Recruitment process |
3. Legal Basis for Processing
Processing of your personal data is based on the following legal grounds set out in Article 6 of the GDPR:
- Performance of a contract (Art. 6.1.b GDPR): order management, invoicing and commercial relationship with customers and suppliers.
- Legitimate interest (Art. 6.1.f GDPR): B2B commercial prospecting, IT security and fraud prevention. Legitimate interest in B2B prospecting is expressly recognised by Recital 47 of the GDPR and Article 19.2 of the Spanish LSSI-CE.
- Compliance with a legal obligation (Art. 6.1.c GDPR): retention of accounting and tax documents in accordance with Spanish tax law (Ley General Tributaria) and the Commercial Code (Código de Comercio).
- Consent (Art. 6.1.a GDPR): newsletter subscription, non-essential cookies and commercial communications outside the direct B2B context. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.
4. Processors and Recipients
4.1 Data processors
The following providers access personal data as data processors, under contract in accordance with Article 28 of the GDPR:
| Provider | Service | Location / Transfer | Safeguards |
|---|---|---|---|
| Pipedrive OÜ | CRM – customer and sales pipeline management | Paldiski mnt 80, 10617 Tallinn, Estonia (EU) | Art. 28 GDPR – DPA available |
| Erplain SAS | ERP – inventory and order management | France (EU) | Art. 28 GDPR – DPA available |
| LWS (Ligne Web Services SARL) | WordPress web hosting | 10 rue Penthièvre, 75008 Paris, France (EU) | Art. 28 GDPR – DPA available |
| Statcounter | Web analytics (visit counter) — anonymous data (no individual identification) | Guinness Enterprise Centre, Taylor’s Lane, Dublin 8, Ireland (EU) | Art. 28 GDPR – DPA available |
| Visitors Traffic plugin (WP-Buy) | Self-hosted visit statistics on the website server | Plugin installed locally; data stored on the LWS server (France, EU) — no transfer to the developer | Art. 28 GDPR |
| Hu-manity.co (Crownpeak Technology) | Cookie consent manager (CMP) | Princeton, New Jersey, USA | Standard Contractual Clauses (SCCs) – Decision 2021/914/EU |
| The Newsletter Plugin (Stefano Lissa) | Self-hosted newsletter sending platform | Plugin installed locally; data stored on the LWS server (France, EU) | Art. 28 GDPR |
| WPForms (WPForms LLC) | Self-hosted contact form platform | Plugin installed locally; data stored on the LWS server (France, EU) — no transfer to the developer | Art. 28 GDPR |
| Apollo.io (Apollo Data Company) | B2B prospecting and contact data enrichment | 535 Mission St, San Francisco, CA 94105, USA | Standard Contractual Clauses (SCCs) – Decision 2021/914/EU |
| Lusha Systems Inc. (and its affiliate Lusha Systems Ltd.) | B2B contact data enrichment | Boston, USA (HQ) + Tel Aviv, Israel (subsidiary); data stored on AWS USA | Standard Contractual Clauses (SCCs) – Decision 2021/914/EU for USA ; European Commission adequacy decision (Israel, 2011) |
The website also uses the Polylang plugin for multilingual management; this plugin operates locally on the server and does not involve any data transfer to third parties.
4.2 Other recipients
- Banking institutions: for the management of payments and collections via bank transfer (SEPA).
- Carriers and logistics operators: for order delivery (Incoterms® 2020 terms).
- Tax, legal and audit advisors: in the context of compliance with legal obligations.
- Customs authorities and export control bodies: in accordance with EU Regulation 2021/821 on dual-use items.
- Public authorities: Spanish Tax Agency, Social Security, and others as required by applicable law.
5. International Data Transfers
Hu-manity.co (Crownpeak Technology), provider of the cookie consent manager, is headquartered in the United States (Princeton, New Jersey). Data transfers to this processor are covered by the Standard Contractual Clauses (SCCs) adopted by the European Commission (Implementing Decision 2021/914/EU), which constitute adequate safeguards under Article 46 of the GDPR. The data transferred is strictly limited to the information necessary to manage cookie consent (technical identifier, user preferences, timestamp).
All other identified processors are based in the European Union or the European Economic Area (EEA); therefore no additional international transfers take place.
For any new provider that may involve transfers outside the EEA, ARTRONIK COMPONENTS SL will ensure that equivalent safeguards (SCCs, adequacy decision, binding corporate rules, or other Article 46 GDPR mechanisms) are in place before processing begins.
On the use of generative AI: ARTRONIK COMPONENTS SL may use generative AI tools (such as Anthropic’s Claude or ChatGPT) for internal productivity tasks like generic content drafting, translation and creative thinking. These tools are not used to process identifiable personal data of customers, prospects or data subjects. Any information transmitted to these services is limited to generic or anonymised content.
Data subjects may request information about the safeguards in place for international transfers by writing to intelligence@ar-tronik.com. We will respond within the timeframe set by applicable law.
6. Cookies
The website uses both first-party and third-party cookies. The following table summarises their classification:
| Type | Purpose | Legal basis | Duration |
|---|---|---|---|
| Essential / technical cookies | Website operation, user session | Legitimate interest (no consent required) | Session or up to 12 months |
| Analytics cookies | Visit statistics (StatCounter) — anonymised data | Consent | Max. 13 months |
| Preference cookies | Language, user settings | Consent | Up to 12 months |
Users may manage, accept or refuse non-essential cookies through the cookie banner displayed upon accessing the website, and may modify their preferences at any time through their browser settings. Withdrawal of consent does not affect the lawfulness of prior processing.
For more detailed information, please refer to our Cookie Policy at www.ar-tronik.com/politica-de-cookies/.
7. Newsletter
If you subscribe to our newsletter through the form available on the website, we will process your email address solely for the purpose of sending you periodic communications about electronic components, partner news and sourcing opportunities.
- Legal basis: explicit consent (Art. 6.1.a GDPR).
- Retention: until the data subject unsubscribes or withdraws consent.
- Unsubscribe: you may cancel your subscription at any time via the unsubscribe link included in each email or by writing to intelligence@ar-tronik.com.
8. Retention Periods
| Data type | Retention period |
|---|---|
| Customer data / commercial contracts | Duration of relationship + 10 years (Art. 30 Commercial Code) |
| Invoices and accounting documents | 10 years (Commercial Code) / 4 years (General Tax Law) |
| B2B prospecting data | Until objection; maximum 3 years without activity |
| Newsletter subscriber data | Until unsubscription or withdrawal of consent |
| Web security logs | 12 months |
| CVs and applicant data | 12 months from receipt (unless explicit consent to extend) |
| Supplier data | Duration of relationship + 10 years |
| Analytics cookie data | Maximum 13 months |
9. Data Subject Rights
In accordance with Articles 15 to 22 of the GDPR, you have the right to:
- Access (Art. 15 GDPR): know what personal data we process about you and obtain a copy.
- Rectification (Art. 16 GDPR): request correction of inaccurate or incomplete data.
- Erasure (Art. 17 GDPR): request deletion of your data when it is no longer necessary for the purpose for which it was collected.
- Objection (Art. 21 GDPR): object to processing based on legitimate interest, including commercial prospecting.
- Restriction of processing (Art. 18 GDPR): request suspension of processing in certain circumstances.
- Data portability (Art. 20 GDPR): receive your data in a structured, commonly used and machine-readable format.
- Withdrawal of consent (Art. 7.3 GDPR): at any time and without retroactive effect, for processing based on consent.
- Not to be subject to automated decisions (Art. 22 GDPR): including profiling with significant legal effects.
To exercise your rights, please send a written request to intelligence@ar-tronik.com stating the right you wish to exercise and enclosing a copy of your ID or equivalent identifying document. We will respond within a maximum of 1 month (extendable by 2 additional months in cases of particular complexity, with prior notification).
Right to lodge a complaint: If you believe that the processing of your data does not comply with applicable law, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): C/ Jorge Juan, 6 – 28001 Madrid | www.aepd.es | +34 901 100 099
You also have the right to lodge a complaint with the supervisory authority in your country of residence or place of work within the EEA.
10. Security Measures
ARTRONIK COMPONENTS SL has implemented appropriate technical and organisational measures to ensure the security, integrity and confidentiality of personal data processed, in accordance with Article 32 of the GDPR, including:
- Role-based access control (RBAC).
- Communication encryption via HTTPS/TLS.
- Regular backups with integrity verification.
- Staff training on data protection and cybersecurity.
- Internal procedure for notifying personal data breaches in accordance with Article 33 of the GDPR.
11. Policy Updates
This Policy may be updated at any time to reflect changes in legislation, case law or business practices. The current version, with its update date, will always be available at www.ar-tronik.com. We recommend checking it periodically.
Version 3.0 | 22 June 2026 | ARTRONIK COMPONENTS SL | www.ar-tronik.com