Privacy

Who is responsible

The controller of your personal data is FLOFUM, S.L., which trades online as Gormox. Registered office: Calle Parcerisa 13, Local 1, 08014 Barcelona, Spain. CIF B75621250. For anything to do with your data, write to support@gormox.com.

What we collect

• From the enquiry form: your name, email address, phone number, delivery country and address, the machine you are asking about, and anything you write in the message box.
• From emails you send us: whatever the email contains, including photographs you attach for a return or a guarantee claim.
• For an order: the delivery details above, what you ordered, the total and the delivery status.
• For a refund: the account holder’s name and IBAN, asked for only once a returned machine has reached us.
• When you visit the site: our web host records standard server logs (IP address, browser type and the pages requested) to keep the site secure and working.

Card numbers never reach us and are never kept here. Paying by card, what you type goes directly to the payment company named on the checkout page; it collects the money and reports back one thing only, whether the payment went through. Paying cash, no such data exists in the first place.

Why we use it, and on what basis

Purpose	Legal basis (GDPR)
Answering your enquiry and sending you a total	Steps taken at your request before a contract, art. 6(1)(b)
Delivering an order, handling returns and guarantee claims, making refunds	Performing the contract, art. 6(1)(b)
Invoices and accounting records	Legal obligation, art. 6(1)(c)
Server logs for security and troubleshooting	Our legitimate interest in a safe website, art. 6(1)(f)

We do not send marketing emails, we do not sell or rent personal data, and we do not use it for automated decisions or profiling.

Who else receives it

• Couriers receive your name, address, phone number and the amount to collect, so they can deliver.
• Our hosting provider stores the website and our email on our behalf.
• Our accountants see invoices, and tax and other public authorities receive data when the law requires it.
• Our bank processes the transfer when we make a refund.

Our hosting provider may process data on servers outside the European Economic Area. Where that happens, the transfer is covered by the European Commission’s standard contractual clauses.

How long we keep it

• Enquiries that do not lead to an order: 12 months, then deleted.
• Order records and invoices: six years, as Spanish commercial and tax law requires.
• Bank details for a refund: deleted as soon as the bank confirms the payment.
• Server logs: the short period our host keeps them for security purposes.

Your rights

You can ask to see the data we hold about you, to correct it, to have it deleted, to restrict how we use it, to object to its use, or to receive it in a portable format. Email support@gormox.com; we answer within one month. Some records, such as invoices, have to be kept for the legal period even if you ask for deletion, and we will tell you when that applies.

If you are unhappy with how we have handled your data, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es), or to the authority in the country where you live.

Cookies

This site does not use advertising or analytics cookies. The details are on the cookies page.

Changes

If this notice changes, the new version will appear here with a new date. We will not use data already collected for a new purpose without telling you first.