Last updated 16 October 2026
This policy explains how we process the personal data of people who contact Satine, have a business relationship with us or receive our email communications.
Data controller
Satine Factory S. L., Spanish tax identification number B97543227, with registered address at Carrer Coure, 16-24, 12530 Burriana, Castellón, Spain, is the controller of your data. You can contact us about privacy and exercise your rights at info@satine.es or by writing to that address.
Data we process and where it comes from
We collect the information you provide when contacting us: name, email address, country, message and telephone number if you choose to provide it. Required fields are identified on the form; you cannot submit it without completing them. The telephone number is optional. The country helps us provide international assistance and is not obtained by geolocating your IP address.
If an enquiry leads to a business relationship, we also process professional contact details, communications and the information needed to manage quotations, orders, invoicing, warranties and complaints. We record selected contacts requiring follow-up in Gespymes. This does not subscribe you to advertising.
To protect the website and form, we process technical connection and verification signals, such as IP address, browser characteristics and the result of the bot check. Avoid including sensitive data or other people's information that is unnecessary to handle your request.
Handling enquiries and business relationships
We use your data to answer your enquiry, provide the information or quotation requested and follow up on your request. Requests for quotations or contracts are processed on the basis of precontractual steps taken at your request under Article 6(1)(b) GDPR.
For other enquiries, processing is based on our legitimate interest in assisting people who contact Satine and carrying out limited follow-up related to their request and reasonably expected, under Article 6(1)(f) GDPR. You may object on grounds relating to your particular situation. This purpose does not include recurring advertising campaigns.
When a purchase is made, we process the data needed to perform the contract and meet the applicable legal obligations under Articles 6(1)(b) and 6(1)(c) GDPR. For company representatives and contact persons, we use professional details to maintain the relationship with the organisation they represent, on the basis of legitimate interest and within their professional role.
Marketing communications
We use MailerLite to send communications about our products, news, offers and corporate greetings. Sending is based on your consent where you have given it for this purpose. You may withdraw consent at any time without affecting earlier lawful processing.
For existing customers, we will use the exception in Article 21(2) of the Spanish LSSI only where contact details were lawfully obtained in a contractual relationship, the communications concern our own products or services similar to those purchased and the option to object was offered both at collection and in each message. In that case, the GDPR basis is our legitimate interest in maintaining this communication with customers, subject to your right to object.
Being a customer or practising a particular profession does not authorise every campaign. Recipient selection must respect the scope of permission or the previous relationship and applicable legal conditions.
You can stop receiving advertising free of charge using the unsubscribe link in each email or by writing to info@satine.es. Unsubscribing does not affect messages needed to handle your requests, manage a transaction or comply with legal obligations. We will retain the minimum suppression information needed to respect your choice. Submitting the contact form does not subscribe you to our campaigns.
Campaign statistics
We use MailerLite statistics to view campaign results, including deliveries, unsubscribes, opens and clicks. Opens are recorded using a small tracking image and clicks through tracking links. These events may be linked to the recipient within the platform; we do not describe them as anonymous data.
We consult these results to evaluate campaigns. We do not use them to automatically decide prices, terms or order acceptance or to carry out individual commercial actions based on these metrics.
Permission to receive advertising does not itself mean consenting to any tracking. Where recording opens or clicks requires consent, specific consent must be obtained before applying that tracking; this policy does not replace that obligation. You may write to info@satine.es to withdraw consent or object to processing based on legitimate interest.
Protecting the form
We use Cloudflare Turnstile to prevent spam and abuse of the form. Our legitimate interest is protecting the service's availability and security, limiting processing to what is necessary for that purpose.
Cloudflare processes technical signals to provide protection on Satine's behalf and also acts as an independent controller to improve bot detection, under its specific notice. We do not send Turnstile the content of your enquiry.
Cloudflare Turnstile Privacy Notice
Who can access the data
Enquiries are handled by authorised personnel within Satine, including the administration team. We do not pass them to distributors or other companies to handle. The info@satine.es mailbox receives enquiries and distributes them internally to nacional@satine.es and tiziana@satine.es.
We use the following technical providers, which may process the data needed to deliver their services:
- IONOS: website hosting, domain management and email services.
- Resend: sending contact form messages to our contact mailbox.
- Cloudflare Turnstile: bot checks and protection against abuse.
- Gespymes: managing contacts and following up on business relationships.
- MailerLite: sending campaigns, managing subscribers and unsubscribes and campaign statistics.
These providers' access is limited to their services and governed by the applicable terms and data protection agreements. We may also disclose necessary data to competent public bodies and authorities where required by law.
International transfers
Some services involve processing or access outside the European Economic Area. Resend states that data is stored in the United States; selecting a European sending region does not itself change that storage location. Cloudflare operates international infrastructure. MailerLite publishes European hosting for its current platform, although its contractual relationships and subprocessors may also involve international transfers.
Resend, MailerLite and Cloudflare processing agreements provide for European Commission standard contractual clauses for the transfers to which they apply. These safeguards govern the importer's obligations and affected individuals' rights. You may request information about transfers affecting your data and a copy of the applicable safeguards at info@satine.es, subject to the limits needed to protect confidential information and third parties' rights.
Resend Data Processing Agreement
MailerLite Data Processing Agreement
Cloudflare Data Processing Agreement
Automated decisions
We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. Campaign statistics are not used for such decisions about customers.
Retention criteria
Our retention policy establishes the following limits and reviews. These criteria do not mean that every tool performs automatic deletions; they must be applied to the mailboxes and systems where data is kept.
- Enquiries and opportunities without a purchase: up to 12 months from the individual's last meaningful interaction, unless an obligation or documented need to handle a claim requires retention. Campaign sends, opens, clicks and internal notes do not restart this period.
- Spam and unsolicited offers with no useful purpose: deletion within 30 days of classification.
- Customers and transactions: while managing the relationship and thereafter for the statutory retention and liability periods applicable to each document. Where appropriate, data will be blocked or access restricted to meet those obligations.
- Advertising: sending stops after unsubscribing or objecting, with quarterly reviews of lawfulness and necessity. After 24 months without a relevant purchase or valid permission update, exclusion from campaigns will be reviewed. That review does not expand permission or authorise sending without a sufficient basis.
- Suppression lists: only the minimum data needed to prevent further sends or improper reimports, while that risk exists and subject to annual review.
Backups are for recovery and must not be used to reactivate deleted processing. If data is restored, prior unsubscribes and erasure requests must be respected. Technical logs and providers' backups are also subject to their service retention periods; for example, Resend publishes 30 days for emails and logs on the Free plan we use. That period does not delete messages received in our mailboxes.
Your rights
You may request access, rectification, erasure, objection, restriction and portability where applicable. You may also withdraw consent and object at any time to the use of your data for advertising.
Send your request to info@satine.es or Satine's postal address, stating the right you wish to exercise and the minimum details needed to find your information. We will only request additional identity information where necessary and proportionate; we do not generally require a copy of your identity document.
We will handle your request within the general one-month period. If an extension is permitted under the GDPR, we will notify you during that first month and explain why. You may lodge a complaint with the Spanish Data Protection Agency if you consider that the processing infringes your rights.
Spanish Data Protection Agency
Cookies and changes to this policy
The cookie policy explains the technologies used on the website and the available management options. We will update this policy when the processing described changes and inform you of significant amendments. If a new purpose requires your consent, we will ask for it before processing data for that purpose.