Data privacy policies
What personal data is collected, for what purpose, how long it is kept and how to exercise your rights over it.
1. Data controller
| Company | ISC Plastic Parts, S.L. |
| Tax ID (NIF) | B62140579 |
| Address | Paseo de Gracia 12, 1º, 08007 Barcelona (España) |
| gdpr@iscsl.eu |
ISC is not required to appoint a Data Protection Officer; privacy enquiries are handled directly by the company at the address above.
2. What data we process
We process the data you provide through the website, email, telephone or chat:
- Identification and contact data: name, company, position, email, telephone, tax ID and delivery and invoicing addresses.
- Commercial data: quotations, orders, deliveries, invoices and communications with us.
- Browsing data, only if you accept it: see our Cookie Policy.
We do not process special categories of data. Card details for card payments are handled directly by the bank’s payment gateway; ISC has no access to them.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Registration and customer area (sign-up, login and account management) | Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR). |
| Quotations, orders, shipping, invoicing and payment | Performance of the contract (Art. 6(1)(b)) and compliance with commercial and tax obligations (Art. 6(1)(c)). |
| Handling enquiries and technical support by form, email, telephone or chat | Pre-contractual measures at your request (Art. 6(1)(b)) and our legitimate interest in answering your enquiries (Art. 6(1)(f)). |
| Product news and commercial communications, sent only to customers and registered users who have agreed to receive them at registration or by email | Consent (Art. 6(1)(a) GDPR and Art. 21 LSSI). You can unsubscribe at any time from any communication or by writing to us. |
| Compliance with legal obligations and requests from authorities | Legal obligation (Art. 6(1)(c)). |
4. Retention period
We keep your data for as long as the business relationship or your customer account remains active. Since our customers often reorder the same components after several years, we consider the relationship to have ended when there have been no orders or account logins for 10 years, or when you request the closure of your account. From then on, the data is kept blocked for the statutory limitation periods (generally 6 years for commercial records under the Spanish Commercial Code and 4 years for tax records) and then deleted.
Data used for commercial communications is kept until you withdraw your consent.
5. Recipients
We do not sell or pass on your data to third parties for marketing purposes. Data is only disclosed:
- To transport companies, limited to what is needed to deliver your orders.
- To public authorities, courts and official bodies, when required by law or upon their request.
- To banks, to process payments and collections.
- To technology providers that provide services to us (support chat, WhatsApp messaging, web analytics), acting as processors on behalf of ISC under a contract pursuant to Art. 28 GDPR.
6. International transfers
Some providers (Zendesk, WhatsApp/Meta, Google) may process data in the USA under the EU-US Data Privacy Framework. For shipments to countries outside the European Economic Area, we give the carrier the data needed for delivery, as this is necessary to perform the contract (Art. 49(1)(b) GDPR).
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw any consent given at any time, by writing to gdpr@iscsl.eu or by post to Paseo de Gracia 12, 1º, 08007 Barcelona (España), stating the right you wish to exercise and proving your identity.
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the data protection authority of your country.
8. Security and accuracy of data
ISC applies appropriate technical and organisational measures to protect your data against loss, misuse or unauthorised access. You guarantee that the data you provide is accurate and undertake to inform us of any changes.
9. Minors
Our website and services are aimed at companies and professionals. We do not knowingly collect data from minors under 14.
10. Changes to this policy
We may update this policy to reflect legal changes or changes to our services. The current version is always the one published on this page.
Last updated: October 2026.
