Privacy | Conalux
This page explains how the contact form works: which data is processed, for what purpose and on what legal basis, how long it is kept and how to exercise your rights.
How the contact form works
The contact form is live. When you submit it, the data is sent to a service of our own, on the same hosting as this site, which stores it in a database on that hosting and sends an email notification to the commercial team. To limit abuse, the service stores hashed fingerprints of the IP address and of the email address, not their values, and deletes them automatically within one day. Emails sent to administracion@iluminaco.com are received and handled manually, including for exercising rights. The site sets measurement cookies only if you accept them: Google Analytics cookies, provided by Google Ireland Limited; any interface animation or interaction remains local and ephemeral, with no personal data and no network, and nothing is stored in your browser apart from the record of your cookie choice, described in the “Cookies and audience measurement” section, without making claims about browser configuration or any technical hosting logs.
Data and purpose
When you submit the form, the data processed is name, company, email and message, plus the necessary technical markers (date, origin, language), for the purpose of handling the enquiry and, if you arrive through a campaign link, of knowing which campaign led to it, as explained in this section. Email and message are required to reply; name and company are optional. The enquiry is stored in a database and an email notification goes to the commercial team, who reply personally; no automatic acknowledgement, no public panel and no public export. News and commercial offers from Conalux (ILUMINACIÓN NACO S.L.) by email require a separate, express and optional choice: “I would like to receive news and commercial offers from Conalux (ILUMINACIÓN NACO S.L.) by email.” Without that choice no commercial message is sent. Your choice is stored with the enquiry and, if you tick the box, so are its date, the version and the exact wording of the box. If you reach this site through a campaign link, we store with your request the parameters of that link that identify the campaign (utm_source, utm_medium, utm_campaign and utm_content) and, if you come from a Google ad, the gclid click identifier. They are used to know which campaign led to each request, are not used for profiling, and follow the same legal basis and retention period as the request.
Recipients, access and private export
The recipients are the commercial team and strictly necessary technical providers, with access restricted to authorised persons only. There is no public disclosure; any extraction remains a private internal CSV export, handled securely, together with its copies and backups.
Controller, legal bases, retention and rights
The data controller is ILUMINACIÓN NACO S.L. (details in the legal notice). The enquiry is handled in order to reply: pre-contractual measures at the request of the person who will be party to the contract, or legitimate interest for the professional exchange with a person representing a company. Commercial messages rely solely on express consent, withdrawable simply for the future. Three operational retention criteria apply, chosen by the controller and not universal statutory deadlines: the intake copy is purged automatically 24 months from receipt, calculated as calendar months; enquiries without a contract are kept 24 months after closure in the controller’s commercial system; the authorised commercial list is kept 3 years after the last voluntary commercial interaction, with possible express renewal. Being on the commercial list does not justify keeping the full message beyond the enquiry need: only minimal proof of the choice (address, date, version, text) is kept with the list. Exporting a CSV transfers no controllership and neither deletes nor resets these periods; purging the intake database does not delete mailbox copies, exported CSVs or backups, which follow their own procedure with designated owners. Rights of access, rectification, erasure, restriction, objection and portability where applicable: write to administracion@iluminaco.com. Reply within one month under Article 12 of the GDPR, with a reasoned extension where needed; proof of identity is requested only where there is reasonable doubt. Complaints go to the AEPD in Spain; people in France may also contact the CNIL.
Cookies and audience measurement
This site measures visits with Google Analytics, through Google Tag Manager, only if you accept it in the cookie notice. Until then no Google tool is loaded and no measurement cookie is stored. If you accept, Google Ireland Limited provides the service and the cookies _ga and _ga_<identifier> are set (up to two years according to Google’s documentation); they allow visits and sessions to be told apart. The measurement covers which pages are visited, language, device, country and where the visit came from, whether the contact section is reached, whether the form is started and whether it is sent, and clicks on the link to Conalux with their location and destination; for a submission only the fact that it happened is recorded: the name, email, company and message from the form are never sent to Google. Advertising features and ad personalisation are switched off and the data is not used for advertising. Google may process data outside the European Economic Area under the safeguards provided by the GDPR; see Google’s data processing terms. The legal basis is your consent. You can refuse without any consequence or change your mind at any time from “Cookie preferences” in the footer; withdrawing deletes the Google cookies and reloads the page. Your choice (accept or reject) is saved in your browser’s local storage, not in a cookie, only so that you are not asked again; you can delete it from your browser settings.
| Cookie | Owner | Duration | Purpose | Type |
|---|---|---|---|---|
| _ga | Google Ireland Limited | Up to 2 years | Tell visits and users apart | Analytics |
| _ga_<identifier> | Google Ireland Limited | Up to 2 years | Keep the state of the measurement session | Analytics |
You can delete or block cookies from your browser settings:
Hosting, cookies and the Conalux service
This site, the enquiry database and the technical email used for notifications are hosted by Raiola Networks S.L. (see the legal notice). Hosting processes the IP address to provide and secure the service; where the controller operates its own systems, this processing relies on legitimate interest. Technical logs are kept under necessary diagnostic and security criteria, with no specific period stated here. Raiola publishes its privacy policy at https://raiolanetworks.com/politica-de-privacidad/ (external site). Fonts and media are self-hosted. Audience measurement is only enabled if you accept it and is described in the “Cookies and audience measurement” section. The outbound link to Conalux leads to a separate service: read its own policy for its data practices.