Legal information
Privacy policy
Last updated: September 2026
Clays of the World processes the personal data of people who contact us or visit the Website transparently and with full safeguards, in accordance with the General Data Protection Regulation (EU) 2016/679 and Spanish data protection law. This policy explains who the controller is, for what purposes and on what legal bases data is processed, who it is shared with, how long it is kept and how to exercise the rights granted by data protection law.
1. Data controller
- Owner
- CLAYS OF THE WORLD 2026 SL
- Tax ID (NIF / CIF)
- B24775272
- Registered address
- C. Dinamarca, 21, 12006 Castelló de la Plana (Castellón), Spain
- info@clays.es
- Phone
- +34 687 24 69 65
- Registry details
- Commercial Registry of Castellón, Section 8, Sheet CS-50248, Entry 1
- Activity
- Extraction and transport of clays; marketing, purchase, sale, import, export and storage of all kinds of clay and raw materials. CNAE 0899 — Other mining and quarrying n.e.c.
2. Data we process
We process the data you send us yourself when you fill in the contact form on the Website, write to us or call us:
- Identification and contact details you provide: name, email address and, optionally, telephone number and company.
- The content of your message and any information about your technical requirements that you choose to share.
When you submit the contact form, a security check provided by Cloudflare Turnstile analyses technical signals from your browser, such as browser type, screen resolution and interaction timing, solely to tell people apart from automated bots. It does not use cookies and is not used to track you.
Please send only the data needed to deal with your enquiry. Do not include special categories of data or confidential information that is not essential for us to answer you.
If you accept analytics cookies, we also collect browsing data through Google Analytics: pages visited, time spent on the Website, approximate location (country or city), and device and browser type. It is used in aggregate and does not identify you directly.
3. Purposes and legal bases
- Answering your enquiry. Managing and responding to enquiries received through the contact form, by email or by telephone. Legal basis: your consent, given by ticking the box on the contact form, and steps taken at your request prior to entering into a contract.
- Protecting the contact form against abuse. Checking that submissions come from a person and not from an automated bot. Legal basis: our legitimate interest in keeping the Website secure.
- Managing the commercial relationship. Handling quotations, orders, deliveries and technical documentation with customers and suppliers. Legal basis: performance of a contract and compliance with legal obligations.
- Measuring how the Website is used. Producing aggregate statistics on visits in order to improve the Website. Legal basis: your consent, given through the cookie panel, which you can withdraw at any time from Privacy preferences.
We do not use your data for automated decision-making or profiling, and we do not send commercial communications without a separate, express consent.
4. Recipients and processors
Personal data is not disclosed to third parties except where required by law. To operate the Website and to correspond with you we rely on providers acting as data processors on our behalf — web hosting, email, and business management tools — under the contracts required by data protection law.
The Website is hosted by Vercel Inc.
Messages sent through the contact form are delivered to us by email through Brevo (Sendinblue SAS, France), which acts as a data processor.
The security check on the contact form is provided by Cloudflare, Inc., which acts as a data processor.
If you accept analytics cookies, Google Ireland Limited processes browsing data as a data processor in order to provide the Google Analytics service.
5. International transfers
Some of those providers may involve a transfer of personal data outside the European Economic Area. Where that is the case, the safeguards required by data protection law are applied — adequacy decisions or standard contractual clauses.
Google Analytics may involve transfers to Google LLC in the United States, which is certified under the EU-US Data Privacy Framework.
Cloudflare, Inc. is based in the United States. Where the security check involves a transfer of data outside the European Economic Area, the safeguards required by data protection law are applied.
6. Retention
Data is kept for as long as needed to deal with your enquiry and, thereafter, for the periods required by law in order to address any liabilities that may arise. Once those periods have elapsed, the data is securely deleted.
Messages received through the contact form are not stored on the Website: they are delivered to our inbox and kept there for as long as needed to deal with your enquiry, and thereafter for the periods required by law.
Analytics data is kept for no longer than 14 months, the maximum period Google Analytics allows.
7. Your rights
You may exercise the rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent given, by writing to the email address given above and stating which right you wish to exercise.
If you consider that your data has not been processed in accordance with the applicable rules, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, loss or disclosure.
9. Changes to this policy
This policy may be updated when our processing activities or the applicable rules change. The date of the last revision appears at the top of this page.