Privacy policy

1Who are we?

Dimay LED is a trading name of LEDS DO IT Import S.L., located at Lugar Quilin 498, 29120 Alhaurín el Grande (Málaga), Spain, VAT number ESB75251629. LEDS DO IT Import S.L. is the controller of the personal data processed through the Dimay LED webshops. We comply with the General Data Protection Regulation (GDPR) and Spanish data protection law.

For any questions about privacy, you can reach us at info@dimay.com.

2What data we process

When you place an order or create an account, we process your name, company name, billing and delivery address, email address, telephone number and, for business orders, your VAT number. We also keep the details of your order, such as the products purchased, amounts, payment status and shipping details. Your full payment details, such as credit card numbers, never reach us, because our payment provider processes them directly.

When you contact us via the contact form, email, WhatsApp or the chat on our website, we process the information you share yourself, such as your name, contact details, order number and the content of your question. If you sign up for our newsletter, we keep your email address and the time you signed up.

When you visit our website, technical data is also processed, such as your IP address, browser and device type, the pages you visit and the time of your visit. We use this data to keep the website working properly and securely, to prevent abuse by bots and, if you give your consent, to analyse how the website is used.

3Purposes and legal bases

We only process your data when there is a legal basis for doing so. The table below shows the legal basis for each purpose.

The mandatory fields in the checkout are needed to process your order. Signing up for the newsletter is never required to buy from us, and you can withdraw any consent at any time.

4Chat, WhatsApp and email

The chat on our website

On our website you can ask questions to our digital assistant. This chat uses an AI service provided by Anthropic. Your question is sent to that service to generate an answer, and if you ask about the status of an order, the chat looks up that order using the order number and email address you provide. We do not store the content of chat conversations; only the number of messages per IP address is briefly recorded to prevent abuse. Please do not share sensitive information in the chat that is not needed for your question.

WhatsApp and email

If you contact us via WhatsApp, the conversation runs through the WhatsApp service (Meta). Emails to us are received and stored in our Microsoft email service. We only use these conversations to answer your question and handle your order.

5Who we share data with

We only share your data with parties we need to provide our services, and only to the extent necessary. With parties that process data on our behalf, we make agreements about the security and confidentiality of your data.

6Transfers outside the EU

Some of the parties above, such as Google, Anthropic, Microsoft and Meta, are based in the United States or may process data there. In that case we make sure that appropriate safeguards apply, such as certification under the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. This ensures your data keeps a level of protection comparable to that in the European Union.

7Cookies and similar technologies

Cookies are small text files stored on your device when you visit our website. We use three types of cookies and similar technologies, such as local storage in your browser.

Necessary cookies

These cookies are needed for the webshop to work, for example to remember your shopping cart, keep you logged in, save your language and store choice and protect forms with Google reCAPTCHA. No consent is required for these cookies.

Analytical cookies

With Google Analytics we see how visitors use our website, which pages are popular and where the website can be improved. We only place these cookies after you have given your consent.

Marketing cookies

With Google Ads we measure whether our advertisements lead to a visit or order, so that we can improve our advertising. We also only place these cookies with your consent.

You can change or withdraw your cookie choice at any time. You can also delete or block cookies in your browser settings. Please note that the webshop may then not work as well.

8How long we keep data

We do not keep personal data longer than necessary for the purpose for which it was collected. We keep order and invoice data for as long as Spanish law requires, generally six years. Your customer account remains active until you ask us to delete it; we will still keep your invoices for the statutory period. We keep customer service correspondence for as long as needed to handle your question, return or warranty claim. We keep your newsletter subscription until you unsubscribe, after which we only record that you have unsubscribed. Technical log files used to secure the website are automatically deleted after a short time.

9Security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. Our website uses an encrypted HTTPS connection, your account is protected by a personal password and only staff who need it for their work have access to your data. We recommend using a strong password and logging out on a shared computer. If you suspect misuse of your data, please contact us immediately.

10Your rights

You have the right to access, correct or delete your personal data. You can also ask us to restrict processing, object to processing based on our legitimate interest and have your data transferred to another party. You can always withdraw any consent you have given, for example for the newsletter or cookies. You can always object to direct marketing, and we will then stop immediately.

Send your request to info@dimay.com. We will respond within one month, and requests are free of charge in principle. Only if we have doubts about your identity will we ask for additional information, so please do not send us a copy of your ID unsolicited. Sometimes we cannot delete data, for example because we are legally required to keep invoices. In that case we will explain why.

11Filing a complaint

If you are not satisfied with how we handle your data, please let us know and we will work with you to find a solution. You also always have the right to lodge a complaint with a supervisory authority, such as the Agencia Española de Protección de Datos (AEPD) in Spain or the data protection authority in your own country, such as the Information Commissioner's Office (ICO) in the United Kingdom. You do not need to complain to us first.

12Changes and contact

We may update this privacy policy, for example when our services or the law change. The most recent version is always available on this page, with the date of the last change at the top. If you have any questions about this privacy policy or how we handle your data, please feel free to contact us.