Privacy policy

Processing of personal data

The personal data collected on our website are processed in compliance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

Likewise, we guarantee that personal data are processed lawfully, fairly and transparently, and are collected for specific, explicit and legitimate purposes, remaining limited to those purposes and updated where necessary. The identification of data subjects will not be permitted for longer than necessary, and their security will be guaranteed through appropriate technical and organisational measures.

Summary

CONTROLLER PIKOLIN, S.L.

PURPOSE To manage user registration, the purchase of products or services, respond to enquiries or complaints, communicate with you for commercial purposes, and create online profiles.

LEGAL BASIS Performance of a contract, compliance with legal obligations, consent of the data subject, legitimate interest of the controller.

RECIPIENTS Third-party service providers acting as processors and other companies of Grupo Pikolin.

RIGHTS You may exercise your rights regarding personal data as explained at the end of this Policy.

 

Who is responsible for your personal data?

PIKOLIN, S.L., with CIF B50032200, as a company belonging to the business group known as “Grupo PIKOLIN”, leader in Spain and France in the bedding sector, with registered office at Ronda Ferrocarril nº 24, Plataforma Logística Zaragoza (PLAZA), 50197-Zaragoza (Spain), will be responsible for the processing of your personal data.

You may submit a complaint or contact our Data Protection Officer at: dpo.pikolin@portalartico.es.

If you wish to unsubscribe, you may do so by completing this form.

 

Why do we process your data and what allows us to do so? Why can we process your data?

By completing registration or contact forms, sending emails or calling us by telephone, your personal data will become the responsibility of the entities mentioned above.

The data will be processed for the purpose of managing user registration, the purchase of products or services, complying with legal obligations, communicating commercially with interested parties, including by electronic means, and responding to enquiries and requests for information.

  • Managing user registration. When the data subject voluntarily registers on our website, we collect their data with their consent in order to formalise their registration as a user and retain the information required to provide our services and maintain contact.
  • Providing the requested service. We process your data to provide our services by managing orders, issuing invoices and communicating in relation to the development of the service by email or telephone where necessary, in compliance with the contractual relationship.
  • Complying with legal obligations. Certain processing activities will be carried out in compliance with legal obligations, such as tax or accounting obligations, communicating with the competent public administrations where necessary.
  • Responding to requests and enquiries. When the data subject sends us an enquiry or request for information, we process their data with their consent in order to respond to that enquiry or request. We may also process the data of interested parties when they contact our customer service departments to resolve issues or complaints, in compliance with the contractual relationship.
  • Communicating commercially with interested parties by any means:
    • When the customer registers on our website, we may communicate commercially with them by electronic means regarding our products and services. In this case, the legal basis for processing personal data is our legitimate interest in sending such communications with the guarantees of Article 21 of the LSSICE. The user may object at the time the data are collected.
    • When the data subject provides their email address or mobile phone number in our forms and expressly authorises us to do so, we process their data to keep them informed through periodic communications about our products and services, based on their consent.

Data subjects may object in each of the communications received and additionally through the mechanism provided in the section “What are your rights?”.

  • Commercial profiling using information obtained from tracking, storage and data recovery devices. With the consent of visitors browsing the websites, and through the analysis of their browsing and behaviour, commercial customer profiles will be created in order to target them with related advertising on other websites. You can obtain additional information in the Cookie Policy. The legal basis is the consent given by the data subject when configuring the data storage and recovery devices upon accessing the website.
  • Commercial profiling through forms. With the consent of duly informed users who complete the corresponding forms, their data will be processed to create a commercial profile through which we can offer information that is more relevant to their interests. The data used may refer to products purchased, gender, age or place of residence. The legal basis is the consent given by the data subject when completing the corresponding form, having been duly informed.
  • Using mechanisms to verify that website visitors are not automated browsing systems. We use Google reCAPTCHA to protect the submission of personal information through our forms by analysing the visitor’s behaviour on the website. Therefore, browsing data will be communicated to the service provider, which will act as processor.
  • Participation in contests, prize draws or promotions. We will process your personal data to manage your participation and communicate winner status, always respecting the specific Legal Terms of each promotion.
  • Managing the delivery of our products. When the data subject configures the delivery of our products through our forms or logistics applications, we will process their identification and contact details to manage such delivery, and may contact the data subject by telephone.
  • Managing applications. Data may also be processed to include the data subject in current and future recruitment processes and to communicate, including by electronic means, in relation to the application when they register on our employment platform under the conditions published there.

 

Who do we provide your data to?

When the data subject purchases Pikolin Home products, we will communicate their data to the Grupo Pikolin entity responsible for marketing those products for the purposes set out in the previous section, relating to contracting and compliance with legal obligations, as this is essential to formalise the contractual relationship. With the consent of the data subject, their data will be communicated to other Grupo Pikolin companies so that they may communicate commercially by electronic means with information about the bedding sector.

PIKOLIN SL B50032200 Ronda Ferrocarril nº 24, Plataforma Logística Zaragoza (PLAZA), 50197-Zaragoza (España)

COMPAÑIA EUROPEA DE ARTICULOS DEL DESCANSO SL B50759810 Ronda Ferrocarril nº 24, Plataforma Logística Zaragoza (PLAZA), 50197-Zaragoza (España)

CONFORDES SL B08209496 Plaza Utrillas 4, 50013 Zaragoza (España)

ESPADESA RETAIL SL B50125152 Ronda Ferrocarril nº 24, Plataforma Logística Zaragoza (PLAZA), 50197-Zaragoza (España)

PIKOLIN LUSITANA LTDA 502052210 Estagdo Ferroviaria Fogueteiro, Loja 21 — 2840-432, Fogueteiro – Seixal.

In addition, we may communicate personal data to third-party service providers acting as processors, solely for the purpose of providing us with certain services following our instructions, without using the data for their own purposes, and in order to carry out our own activities, or to the competent public administrations in compliance with legal obligations. Some of these providers may be located in countries outside the European Union and may therefore be considered not to have the same levels of protection. In such cases, we will always obtain appropriate safeguards and apply the necessary security measures to communicate your data. Among others, these safeguards may consist of an Adequacy Decision or the Standard Contractual Clauses of the European Commission.

If the user uses their WhatsApp account to contact and communicate with Pikolin, they do so knowing that the controllers also manage a WhatsApp Business account that allows them to establish the conditions for the processing of personal data, and that their data will be processed according to those conditions in addition to those that apply to them as a user of said instant messaging service.

 

How long do we retain your data?

As a general rule, data will be retained for as long as they are compatible with the purpose for which they were collected, in compliance with legal retention obligations and for as long as liabilities may arise from the processing of such data, after which they will be deleted.

Data processed for the purpose of managing user registration and communicating commercially will be retained until the user decides to unsubscribe or objects to the processing.

 

What are your rights?

You may:

  1. Obtain more information.
  2. Withdraw your consent where you have given it for a specific processing activity.
  3. Stop receiving our commercial communications.
  4. Exercise your rights of:
    • Access, or knowing what personal data we process about you;
    • Rectification, or correcting incorrect or inaccurate personal data;
    • Erasure, or deleting the personal data we hold about you that we are not legally obliged to retain;
    • Objection, or asking us to stop processing your personal data for a specific purpose;
    • Restriction, or restricting the processing we carry out;
    • Portability, or asking us to provide you with the personal data we hold.

In order to exercise any of the rights granted to you by data protection regulations, you may request a rights exercise form from the controller or directly download any of the forms proposed by the Spanish Data Protection Agency through this link and submit it duly completed together with a copy of your DNI or any other valid identification document to the address or email address of the controller.

Controller: PIKOLIN SL Address: Ronda Ferrocarril no 24, Plataforma Logística Zaragoza (PLAZA), 50197- Zaragoza (España) C.I.F.: B50032200

DPO contact details: dpo.pikolin@portalartico.es

You can find more information about your rights or submit a complaint by contacting our Data Protection Officer, or the competent supervisory authority, the Spanish Data Protection Agency, at http://www.aepd.es – C/ Jorge Juan, 6. 28001 – Madrid (901 100 099 – 912 663 517).

 

How do we guarantee the security of your data?

We have adopted appropriate technical and organisational measures to guarantee an adequate level of security that prevents the accidental or unlawful destruction, loss or alteration of personal data, or unauthorised disclosure of or access to such data.

We have also implemented procedures to respond within the legally established deadlines to any security breach that may affect your personal data.

When contracting suppliers, we ensure that they implement appropriate security measures for the protection of personal data.

 

Why have we changed the Privacy Policy? Will we change it again?

We have updated this Policy to include new processing activities and to be more transparent with data subjects.

This latest Policy is dated: 20/04/2026