Privacy

The search receives optional characteristics and dimensions to filter products during the visit. We do not create visitor accounts or personal profiles from them, or send these values to analytics. The installation compatibility selector remains private. We do not use AI services to process visitor information.

Connection data, including IP address, date, browser information and the HTTP request, is processed to deliver and protect the website. The purpose is to provide the requested service and prevent abuse; the legal basis is legitimate interest in website operation and security (GDPR Article 6.1.f). The application does not enable a visit log. Its HTTP error logs omit IP addresses, URLs, headers and submitted values. We do not make decisions with legal effects on visitors or use personalised advertising.

The operator manages the hosting infrastructure. Cloudflare provides HTTPS delivery and connection protection and processes technical data under its terms and data processing agreement. It may process data outside the European Economic Area. Its agreement identifies applicable safeguards, including standard contractual clauses where appropriate; we do not claim all processing stays in Europe.

Cookie durations are described on the cookies page. Cloudflare applies retention criteria from its policy, including processing purpose, security and legal duties. We do not set our own period for logs outside this application’s control. Contact messages are used to handle the enquiry and retained as necessary to resolve it and meet legal responsibilities. They are not used for subscriptions or campaigns.

You may request access, rectification, erasure, restriction, objection and, where applicable, portability. Explain the right you wish to exercise; additional identity information is requested only if needed. We respond within the legal period, generally one month, with extensions and information as provided by the GDPR. You may also complain to the Spanish Data Protection Agency (aepd.es). An identity-document copy is not required by default.

External links open only at your choice, and the destination applies its own conditions. We do not load Amazon photographs, advertisements or widgets in the background.

If you accept measurement, we use Umami, hosted on our server, to count page views and clicks on links to Amazon. We use this to improve content and assess interest in references; the legal basis is your consent (GDPR Article 6.1.a). A click does not tell us what you bought or identify you as a buyer.

We send the page path without parameters, domain, language and referring domain. For an Amazon link we add our product identifier and link position (card, start or end of product page). We also count searches with and without results, without sending search text, selected filters or their values. The service receives connection data and may derive browser, operating system, device and approximate location. We do not send measurements, form contents, names, email addresses or a personal identifier selected by Cubifora. We do not use session recordings, heat maps or personalised advertising.

Umami is delivered from umami.alejandromaestre.com through our infrastructure and Cloudflare. It loads only after consent. You can refuse without losing functionality and withdraw through the visit-measurement control. We respect DNT and GPC. Withdrawal stops new measurement without affecting the lawfulness of earlier processing.

Your preference is stored in browser local storage for up to 180 days, without a personal identifier. A daily task deletes individual Umami events older than 90 days, with up to an additional day due to scheduling. Cubifora application backups do not include those individual events. We also retain aggregated reports by page and period, without visitor identifiers, to compare business results; these form part of the application database and backups. The retention limit is reapplied before bringing a server restoration containing individual events into service.