Privacy policy

At LEKOLAN ZUMAIA, S.L. (hereinafter Calderería Lekolan or the provider), we strive to ensure the best possible experience through our products and services. In some cases, this requires information to be collected. We care about your privacy, and believe that we should be transparent about it.

Therefore, and for the purposes of the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 (hereinafter, "GDPR") on the protection of natural persons with regard to the processing of personal data and the free movement of such data, Act 3/2018 of 5 December, on the Protection of Personal Data and guarantee of digital rights, and Act 34/2002 of 11 July, on Information Society Services and Electronic Commerce (hereinafter, "LSSI"), Calderería Lekolan hereby informs the user that, as the data controller, it will place on file all data provided by users.

This Privacy Policy governs the collection and processing of personal data of each user obtained through the registration forms on this website or via email. These data are necessary to manage and maintain some of the services provided and are included in the specific files of users of the services of Calderería Lekolan.

The user undertakes to provide true, accurate and complete information about his or her identity. The user shall at all times be responsible for the veracity of the data provided, with Calderería Lekolan having the right to exclude any users who have provided false data from its services, without prejudice to any other legal measures. Furthermore, the user certifies that he or she is at least 14 years old and has the legal capacity to consent to the processing of his or her personal data.

Our commitment begins by explaining the following:

  • Your data are collected in order to improve your user experience, based on your interests and needs.
  • We are transparent about what data we collect about you and why.
  • Our intention is to offer you the best experience possible. In consequence, we shall always use your personal information in accordance with legislation, asking for consent wherever necessary.
  • We understand that your data belong to you. You may therefore choose not to authorise such processing and ask us to stop processing your data.
  • Our priority is to ensure your security and to process your data in accordance with European regulations.

Please see the privacy policy detailed below if you require further information on the processing of your data:

Who is the data controller for your personal data?

Calderería Lekolan, S.L., holder of tax document (NIF) B75028076 and registered office at Polígono Sansinenea, Parcela A.1 - 2.2 C.P. 20740 Zestoa (Gipuzkoa), telephone 00 (34) 943 14 85 82 and email

Calderería Lekolan undertakes to apply the computer security measures envisaged in legislation, in order to prevent any access, misuse, manipulation, damage or loss of data.

What personal data do we collect?

Personal data provided by the user:

  • Name, surname and address.
  • Telephone number and email address.
  • Any other information or data you decide to share with us.

In some cases, not providing the requested personal data or not accepting this data protection policy will make it impossible to complete the contact form on the website.

Why do we process your data, and what for?

All technical operations, transactions and procedures performed automatically or non-automatically that allow personal data to be collected, stored, altered, transferred, or otherwise affected are considered to be processing.

Calderería Lekolan processes the information provided by data subjects for the following purposes:

  • To manage the sending of any information requested and respond to queries or questions sent by the user via the website, in turn offering services that may be of interest.
  • To carry out commercial actions, maintain and manage the relationship with the user, and manage the information and services offered on the website.

All fields must be completed for Calderería Lekolan to fulfil the purposes set out above.

What is the legitimation for processing your data?

The personal data provided by the user are processed based on the following legitimisation:

  • Free, specific, informed, unequivocal consent, which is obtained through a statement or other clear affirmative action (e.g. checking a box) after reading and accepting the Privacy Policy.
  • Legitimate interest in the processing of customer data for marketing purposes and the express consent of the data subject.
  • Compliance with legal obligations for fraud prevention, communication with public authorities and third-party claims.

Any failure by the data subject to accurately provide the aforementioned data will make it impossible for us to respond to his or her request and provide the requested information or carry out the associated services. The data controller, Calderería Lekolan, shall therefore be released from any liability that may arise from failure to perform the professional assignment or from the consequences deriving from any inaccurate or erroneous information.

How long do we keep your data?

Calderería Lekolan, as the data controller, undertakes to store and manage all personal data and information collected through this website with due confidentiality throughout the duration of the professional relationship or until the data subject asks for them to be erased. However, the data controller may keep the data, duly protected, in order to comply with any administrative or legal responsibilities.

Who will your data be made known to?

In general, Calderería Lekolan shall not communicate any personal data to third parties unless a particular service requires a contractual relationship with a data processor in order to manage and maintain the relationship between the user and the aforementioned company, and only with the user’s express authorisation. This shall be done only for the time necessary for performance of the assignment, and under the same conditions and with the same liabilities as those required of the data controller. Once the assignment is complete, the data processor shall return the personal data to the controller and delete any copies in its possession. In some cases, disclosing personal data to public bodies or other parties may be required by law, but only to the extent necessary to comply with such legal obligations.

Where are your data stored?

Generally speaking, the data are stored within the EU. Whenever data are to be sent to third parties outside the EU, we shall ensure that they offer a sufficient level of protection.

What are your rights, and how can they be exercised?

Anyone has the right to obtain confirmation as to whether or not Calderería Lekolan is processing their personal data.

Data subjects are entitled to access their personal data and to request the rectification of any inaccurate data or, where appropriate, to ask for them to be erased whenever, among other reasons, the data are no longer necessary for the purposes for which they were originally collected.

In certain circumstances, the data subjects may request a restriction on the processing of their data, in which case we shall retain them solely in order to exercise or defend against any claims.

In certain circumstances and for reasons specific to their situation, the data subjects may object to their data being processed. In such cases, Calderería Lekolan shall stop processing the data, unless otherwise required by law or in order to exercise or defend against any claims.

The user shall have the right to portability, i.e. to have his or her personal data transmitted directly to another data controller in a structured, commonly used and machine-readable format, whenever technically possible.

The data owner, or his/her legal representative, with proof of identity, may exercise the aforementioned rights by sending an email to or by post to: Lekolan Zumaia, S.L. Registered office at Polígono Sansinenea, Parcela A.1 - 2.2 C.P. 20740 Zestoa (Gipuzkoa)

Further information about your rights can be found at the Spanish Data Protection Agency at or the corresponding authority in your country. Any data holder who is not satisfied with the exercise of his or her rights may lodge a complaint with the Spanish Data Protection Agency (or the corresponding authority) by submitting a Claim for Protection of Rights (