Privacy policy
Last updated: 25 October 2026
This translation is provided for information only. In case of discrepancy, the Spanish version prevails.
1. Data controller
In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), the controller of your personal data is Proframes Distribución Óptica S.L., Tax ID B88407028, Calle Santa Leonor 61, Planta 4, Oficina 5, 28037 Madrid (Spain). Email: comercial@proframes.es · Phone / WhatsApp: +34 680 577 120.
2. What data we process
- Contact form, email and WhatsApp: name, company or optical store, email, phone number and the content of your message.
- B2B online shop: details of the optician customer and contact person (company name, tax ID, shipping and billing address, email, phone), login credentials and order history. The shop does not collect bank or card details.
- Customers, opticians, represented brands and sales agents: identification, contact and commercial data and, where necessary, bank details for invoicing and commission payments, processed outside the website.
- Browsing data: IP address and technical device data; and, only if you consent, statistical data through analytics cookies (see Cookie Policy).
Please do not send us special categories of data. If you provide data about third parties (for example, staff of your store), you confirm that you have informed them.
3. Purposes, legal bases and retention
| Purpose | Legal basis | Retention |
|---|---|---|
| Answering enquiries received via form, email or WhatsApp | Consent (Art. 6.1.a GDPR) and pre-contractual steps (Art. 6.1.b) | Until the enquiry is resolved plus 1 year |
| Managing registration and access to the B2B shop and optician customers' orders | Performance of a contract (Art. 6.1.b GDPR) | For the duration of the relationship and then for the statutory periods (generally 6 years under the Spanish Commercial Code) |
| Invoicing, accounting and tax obligations | Legal obligation (Art. 6.1.c GDPR) | Applicable statutory periods |
| Managing relationships with represented brands and sales agents | Performance of a contract (Art. 6.1.b GDPR) | For the duration of the relationship and subsequent statutory periods |
| Sending news and catalogues of our brands to optician customers | Legitimate interest (Art. 6.1.f GDPR and Art. 21.2 LSSI) or consent | Until you object or withdraw consent |
| Web analytics through third-party cookies | Consent (Art. 6.1.a GDPR and Art. 22.2 LSSI) | See Cookie Policy |
| Website security and spam prevention (reCAPTCHA) | Legitimate interest (Art. 6.1.f GDPR) | The minimum time necessary |
You may object to commercial communications at any time by writing to comercial@proframes.es or using the link in each communication. We do not carry out automated decision-making or profiling with legal effects.
4. Recipients
We do not share your data with third parties unless required by law (for example, the Spanish Tax Agency). The following providers may access data as processors, under contracts compliant with Art. 28 GDPR:
- Website platform and hosting (Nominalia / Duda).
- B2B shop platform (Shopify International Ltd., Ireland).
- Google services (Google Analytics, only with your consent; reCAPTCHA; Google Fonts).
- Email providers, tax and accounting advisers, and carriers delivering orders.
- Proframes sales agents, where necessary to serve your store in your area.
5. International transfers
Some providers (for example Google, Shopify or Duda) may process data in the United States or other countries outside the European Economic Area. Such transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on the Standard Contractual Clauses approved by the European Commission.
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to comercial@proframes.es(subject "Data protection") or by post to Calle Santa Leonor 61, Planta 4, Oficina 5, 28037 Madrid. We may ask you to verify your identity. We will reply within one month.
If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency( www.aepd.es) or with the supervisory authority in your country.
7. Security
We apply technical and organisational measures appropriate to the risk: HTTPS/TLS encryption across the whole website, spam protection on forms, access to systems through personal credentials and two-step verification where available, backups and confidentiality agreements with anyone who accesses the data.
8. Minors
Our services are aimed at professionals. We do not knowingly process data of children under 14.
9. Changes
We may update this policy to reflect legal changes or changes to our services. The version in force is always the one published on this page, with its update date.