ESCAENLet's talk →
Legal

Privacy policy

What data we collect, what we use it for and what you can do about it. Written to be understood, not to tick a box.

Data controller

The controller of any personal data you provide through this site is:

  • Controller: José Luis Martir Millán (Magnes Factory)
  • Tax ID (NIF): 34750645Z
  • Address: Palau Firal, Carrer del Futur · 17251 Sant Antoni de Calonge (Girona), España
  • Contact email: hola@magnesfactory.com

What data we collect and where from

We only process data you give us voluntarily when you get in touch. Specifically:

  • Contact form: name, email address, phone, company, service of interest and whatever message you write. The form on this site opens your email client and the message reaches us by email; it is not stored in any database on the site.
  • Email or phone: whatever details you include in your message or call.
  • WhatsApp: if you write to us through the WhatsApp buttons, the conversation takes place inside that application and is additionally governed by its provider's terms.
  • Browsing: this site installs no cookies and uses no analytics tools. On the campaign pages of our ads, and only if you accept it in their cookie notice, Google Ads records whether you arrived from an ad and then wrote to us on WhatsApp or sent the form (click identifier, IP address, technical browser data and, if you send the form, your email address irreversibly encrypted; basis: your consent, art. 6.1.a GDPR; see the cookie policy). The server automatically records standard technical data (IP address, date and time, browser) in its access logs, for security and operational purposes.

What we use your data for, and on what legal basis

We process your data for these purposes:

  • To answer your enquiry and prepare a quote. Legal basis: your consent and pre-contractual measures taken at your request (GDPR art. 6.1.a and 6.1.b).
  • To maintain the contractual relationship if we end up working together, including invoicing and tax obligations. Legal basis: performance of the contract and compliance with legal obligations (art. 6.1.b and 6.1.c).
  • To keep the site secure. Legal basis: the controller's legitimate interest (art. 6.1.f).
  • We do not send marketing messages to people who haven't asked for them, nor do we pass your data to others so they can.

How long we keep it

If your enquiry does not lead to a project, we keep the message for as long as needed to deal with it and then for a reasonable period in case you get back in touch; after that it is deleted.

If we do work together, the data is kept for the duration of the relationship and, once it ends, for the statutory limitation periods applicable under tax, commercial and accounting law.

Who we share it with

We do not sell or pass your data to third parties for advertising purposes. Only the providers needed for the service to work have access, acting as processors under the corresponding agreement:

  • The hosting and email provider where messages are stored.
  • Our accountants and invoicing services, where a contractual relationship exists.
  • Public authorities, where a legal obligation requires it.
  • When loading fonts and the 3D model viewer from content delivery networks (Fontshare and jsDelivr), your browser connects to those servers and they receive your IP address. Neither installs cookies on this domain.

Your rights

You may exercise the rights granted to you by the General Data Protection Regulation at any time:

  • Access: to know what data of yours we process.
  • Rectification: to correct anything inaccurate.
  • Erasure: to ask us to delete it when it is no longer needed.
  • Objection and restriction: to object to processing or ask us to restrict it.
  • Portability: to receive your data in a structured format.
  • Withdrawal of consent at any time, without affecting the lawfulness of processing carried out beforehand.

How to exercise them

Write to hola@magnesfactory.com stating which right you wish to exercise and enclosing a copy of your identity document so we can verify it is you. We will reply within one month at most.

If you believe your request has not been handled properly, you may lodge a complaint with the Spanish Data Protection Agency, at C/ Jorge Juan 6, 28001 Madrid.

Security and minors

We apply reasonable technical and organisational measures to protect data against loss, misuse or unauthorised access, including this site's encrypted connection.

Our services are aimed at companies and professionals. They are not directed at children under fourteen, and we do not knowingly collect data from anyone of that age.

Changes to this policy

We may update this policy if our services or the applicable rules change. The version in force is always the one published on this page, with the last-updated date shown at the end.

Last updated: 16 October 2026.

Legal noticeCookie policy
Let's talk