Privacy & Cookies

1. Who is responsible for your data

The data controller is:

EVA INSTRUMENTS, S.L. — Sociedad Unipersonal (S.L.U.)
Trading name: EVA Instruments
NIF: B93959021
Registered office: Urbanización Campos de Guadalmina, Edificio Avia, 1, Bajo, Puerta D, Marbella, Málaga, Spain
Registered with the Mercantile Registry of Málaga, Sheet MA-200827, First Registration
Privacy and customer enquiries: support@evainstruments.com
General and legal enquiries: info@evainstruments.com
Website: https://evainstruments.com

2. What data we may process

Account and identification data

• name and surname;
• email address;
• account username or account identifier;
• account and login information needed to operate your account.

We do not need a customer to create an account for every purchase.

Order and transaction data

• products ordered;
• order number, date, price and order status;
• country and, where required for checkout or payment, locality, region or postal code;
• payment method;
• transaction and payment-status information supplied by the payment provider;
• where supplied by PayPal or another payment provider, a payer account identifier or payer email address.

EVA Instruments does not receive or store full payment-card numbers, card security codes or equivalent complete card credentials.

Support and communication data

When you contact us, we may process your email address and name, the content of your message, order or technical information relevant to your request, and attachments or other information you voluntarily provide.

Newsletter and marketing-subscription data

If you actively subscribe to EVA Instruments news or marketing communications, we may process your email address, subscription status and consent information, unsubscribe information, and campaign delivery, open and click information where such measurement is enabled by our email provider.

A purchase by itself does not subscribe you to marketing email. Marketing email is sent only where the recipient has subscribed or another valid legal basis applies.

Website, device and technical data

When you use the website, our systems and service providers may process limited technical information such as IP address, browser and device information, timestamps, security and server logs, pages or website functions used, and cookie and consent preferences.

Campaign-attribution data

To understand which advertising and marketing campaigns lead to visits and purchases, the website may store limited first-party attribution information associated with a visit, such as advertising click identifiers, campaign parameters, landing-page information, referring source and attribution timestamps.

Our current first-party campaign-attribution records may be retained for up to 90 days and, where an order is placed, relevant attribution values may be associated with the order for advertising-performance measurement and internal reporting.

These attribution records are intended to measure campaign performance. They do not contain full payment-card details or the content of customer communications.

3. Why we process personal data and our legal bases

To provide purchases, accounts, downloads and support

We process information necessary to process and administer orders, provide digital downloads, maintain customer accounts, verify purchases, restore access to purchased products, provide support, and handle refunds and order-related requests.

Legal basis: performance of a contract or steps requested before entering into a contract.

To comply with legal obligations

We may retain and process information where necessary for accounting and tax obligations, commercial record-keeping, fraud and legal-compliance obligations, and responding to lawful requests from competent authorities.

Legal basis: compliance with a legal obligation.

To operate, secure and improve the website and business

We may process limited technical, security, order and service information to keep the website and customer accounts secure, prevent abuse, maintain technical logs, diagnose faults, measure the operation and effectiveness of our services and business, and establish, exercise or defend legal claims.

Legal basis: our legitimate interests in operating and protecting our business and services, except where consent is required by law for a particular technology such as a non-essential cookie.

Marketing email

We send EVA Instruments marketing email to subscribers who have chosen to receive it.

Legal basis: consent, unless another legal basis is clearly applicable under the law in a particular case.

You can unsubscribe at any time using the unsubscribe mechanism in the email or by contacting us.

Analytics, preferences and advertising technologies

Where legally required, we rely on your consent before using non-essential analytics, preference or advertising cookies and similar technologies.

You can accept, reject or adjust cookie categories using the cookie controls on the website and can change your preferences later.

4. Payment processing

Payments are processed by third-party payment service providers made available at checkout.

At present, PayPal may be offered as a payment provider. A payment provider may receive the information necessary to process the transaction and may independently process information for payment security, fraud prevention, legal compliance and its own regulatory obligations.

EVA Instruments receives transaction information needed to administer the order but does not receive or store complete payment-card credentials.

If the website later uses a Merchant of Record such as a third-party ecommerce provider, that provider may process transaction, billing, tax, fraud-prevention and refund information as the seller of record for the relevant transaction. Its own privacy notice and buyer terms will apply to the processing for which it acts as an independent controller.

5. Accounts and purchase history

If you create an EVA Instruments account, we use account information to provide login, purchase-history and download functionality.

Purchases may also be associated with the email address used for the order. If an account is later created with the same verified email address, eligible purchase information may become available through that account.

Please keep your account credentials secure. If you lose access to an account or email address, support may request information reasonably necessary to verify ownership of a purchase before restoring access.

6. Newsletter and Mailchimp

EVA Instruments uses Mailchimp to manage marketing subscriptions and email campaigns.

When you subscribe, information such as your email address, subscription status and campaign-interaction data may be processed through Mailchimp for maintaining the mailing list, sending requested marketing communications, processing unsubscribe requests and measuring campaign delivery and engagement where enabled.

We do not add a customer to marketing email merely because that person made a purchase.

Every marketing email includes an unsubscribe method. You may also contact support@evainstruments.com to withdraw your subscription consent.

7. Analytics, advertising and campaign measurement

EVA Instruments uses website measurement and advertising technologies to understand traffic and campaign performance.

The website currently uses or may use technologies provided by Google, including Google Tag Manager, analytics or advertising measurement technologies, as configured on the website.

Advertising and analytics providers may process online identifiers, device information and information about website interactions in accordance with the user's cookie choices and the provider's own privacy terms.

Separately, EVA Instruments uses limited first-party campaign-attribution information, described above, to connect campaign visits with resulting orders for internal advertising-performance reporting.

Where other advertising platforms are activated on the website, they will be managed through the applicable cookie category and consent controls where required by law.

8. Google reCAPTCHA and website security

The website uses Google reCAPTCHA or related Google security technology to help protect forms and website functions against spam, abuse and automated activity.

Google may receive technical information needed to provide that security service. Google's own privacy terms apply to its processing.

9. Who may receive personal data

We do not sell customer personal data.

Personal data may be disclosed or made available, only as necessary, to categories of recipients such as:

• hosting and website-infrastructure providers;
• payment providers and future Merchants of Record;
• email and newsletter providers, including Mailchimp;
• analytics, advertising and tag-management providers where those services are enabled;
• anti-spam, security and fraud-prevention providers;
• professional advisers, accountants or service providers where necessary for business administration and legal compliance;
• public authorities, courts or regulators where disclosure is legally required.

Service providers receive only the information reasonably necessary for the relevant service and process it under their applicable contractual and legal obligations.

10. International data transfers

Some service providers used by an international online business may process information outside Spain or outside the European Economic Area.

Where the GDPR requires safeguards for an international transfer, the transfer must rely on an applicable lawful mechanism, which may include an adequacy decision, approved contractual safeguards such as the European Commission's Standard Contractual Clauses, or another mechanism permitted by data-protection law.

Some third-party providers may also act as independent controllers for part of their processing. Their own privacy notices provide further information about their international-processing arrangements.

11. How long we keep information

• Orders and transaction records: retained for as long as needed to provide purchase history and support and for the periods required by applicable accounting, tax, commercial and legal obligations.
• Customer accounts: retained while the account remains active, subject to retention of order or legal records that must be kept independently of the account.
• Support correspondence: retained for as long as reasonably necessary to resolve the request, maintain relevant support history and establish or defend legal claims.
• Newsletter data: retained while the subscription remains active. Where a person unsubscribes, limited suppression information may be retained to ensure that the unsubscribe request continues to be respected and to demonstrate compliance.
• Security and technical logs: retained for periods reasonably necessary for security, troubleshooting and system administration.
• First-party campaign-attribution data: current attribution cookies or visit records may be retained for up to 90 days; attribution information attached to an order may be retained with that order where needed for internal reporting and record integrity.
• Third-party cookies and identifiers: retention depends on the relevant technology, provider and user preference.

When information is no longer required, it is deleted, anonymised or restricted as appropriate, subject to legal-retention obligations.

12. Your data-protection rights

Subject to the conditions provided by applicable law, you may have the right to access your personal data, correct inaccurate or incomplete data, request deletion, request restriction of processing, object to certain processing, receive or transfer certain data in a portable format, withdraw consent at any time where processing is based on consent, and object to decisions based solely on automated processing where the legal conditions apply.

To exercise a privacy right, contact support@evainstruments.com. We may request information reasonably necessary to verify your identity before acting on a request.

You also have the right to lodge a complaint with a competent supervisory authority. In Spain, the supervisory authority is the Agencia Española de Protección de Datos (AEPD).

13. Automated decision-making

EVA Instruments does not use customer personal data to make decisions based solely on automated processing that produce legal effects or similarly significant effects on the customer.

Third-party payment or fraud-prevention providers may independently use automated systems to assess payment security or fraud risk under their own legal responsibilities and privacy notices.

14. Data security

We use reasonable technical and organisational measures intended to protect personal data against unauthorised access, alteration, disclosure or loss.

No internet service can guarantee absolute security. Customers should use appropriate account security practices and should not send payment-card credentials or other unnecessary sensitive information through support messages.

15. Children

EVA Instruments products and ecommerce services are not directed specifically at children.

Where a person does not have legal capacity under applicable law to enter into a purchase or provide a required consent independently, the involvement or authorisation of a parent or legal guardian may be required.

We do not knowingly use the website to solicit sensitive personal information from children.

16. Third-party links and embedded services

The website may contain links to third-party websites or may display third-party content.

When you follow an external link or interact with third-party content, the third party may process information under its own privacy policy. EVA Instruments is not responsible for the independent privacy practices of third-party websites.

Where third-party embedded content uses non-essential cookies or similar technologies, it should be subject to the website's applicable consent controls where required by law.

17. Changes to this Privacy Policy

We may update this Privacy & Cookies Policy where our services, providers, website functionality or legal obligations change.

The current version and its last-updated date will be made available on this page.

18. What cookies are

Cookies are small files or similar storage technologies used by websites to remember information, operate functionality, protect sessions, save preferences and, depending on the technology, measure usage or advertising performance.

Some technologies are necessary for the website to work. Others are optional and may require your consent.

19. Cookie categories used on EVA Instruments

Functional / strictly necessary

These technologies support shopping cart and checkout operation, account login and authentication, security, remembering consent choices, maintaining website sessions and providing functions specifically requested by the user.

Where a cookie or similar technology is strictly necessary to provide a requested service or to operate essential website functionality, consent may not be required.

Preferences

Preference technologies may remember optional choices that are not essential to the basic service. Where required by law, optional preference technologies are used only after the relevant consent.

Statistics

Statistics technologies help us understand how the website is used and how it performs. Where these technologies are not strictly exempt under applicable law, they are used on the basis of the user's cookie choice.

Marketing and advertising

Marketing technologies may be used to measure advertising performance, attribute visits or purchases to marketing campaigns, measure conversions and support advertising activities.

Non-essential third-party advertising cookies or similar technologies are used subject to consent where required by law.

In addition, EVA Instruments currently stores limited first-party campaign-attribution information associated with tagged visits for up to 90 days, as explained in this Privacy Policy.

20. Current technologies and providers

• WordPress / WooCommerce: session, account, cart and ecommerce functionality.
• Cookie-consent system: records and applies cookie-category preferences.
• Google Tag Manager: manages website tags and may load configured analytics or advertising technologies according to the site's configuration.
• Google analytics/advertising technologies: website and campaign measurement where enabled.
• Google reCAPTCHA: anti-spam, abuse-prevention and website-security functionality.
• Mailchimp: newsletter subscription management and email-campaign measurement.
• EVA first-party attribution: campaign parameters, advertising click identifiers, landing/referrer information and timestamps, currently with a visit-attribution period of up to 90 days.
• Payment providers: may use cookies or other technical information when their checkout or payment functions are used.

The exact cookies present can vary depending on the page, whether a user is logged in, the payment method, the consent choices made and changes made by third-party providers.

21. Managing your cookie choices

When the cookie banner is shown, you can Accept optional cookie categories, Deny optional cookie categories, or open View preferences to choose categories individually.

Accepting optional cookies is not required to browse the main content of the site or purchase EVA Instruments products.

You can reopen the website's cookie-preference control to change your choices. You can also delete or block cookies through your browser settings. Blocking strictly necessary cookies may prevent account, cart, checkout or other requested website functions from working correctly.

22. Contact

Questions about privacy, personal data or cookies can be sent to support@evainstruments.com.