Privacy Policy

At Eisy, we are aware of the importance of the privacy and security of your data. We therefore commit to complying with the legislation in force in this regard at all times.

Data will be processed in accordance with Regulation (EU) 2016/679 of 27 April (GDPR) and Organic Law 3/2018 of 5 December (LOPDGDD) on Data Protection.

Who is the controller of your personal data?

WU YE, HENG is the CONTROLLER of your personal data as a USER.

• Address: Calle Alfarería nº 8, Planta 1, 28933 Móstoles, Madrid
• Email: arco@eisy.es
• Website: eisy.es

Why do we process your personal data?

Data is processed to maintain a commercial relationship in accordance with the terms and conditions on our website. We only collect data that you voluntarily provide to us as a customer.

The processing operations envisaged, within the framework of Article 6 GDPR, are as follows:

• To send you commercial communications by email, SMS, social media or any other electronic or physical means that makes this possible, provided that you give us your explicit consent, either by subscribing on our website or during the purchasing process. These communications will be sent by us as CONTROLLER and will relate to the products and services we offer, or those of our partners or suppliers with whom we have reached a promotional agreement. In this case, third parties will never have access to personal data.
• To carry out market research and statistical analyses to improve your shopping experience on our website.
• To process your orders or requests, or respond to enquiries or any type of request that you make as a USER through the various contact methods available on our website.
• To contact you to communicate, manage or resolve any issue that may arise with the order (missing information, incidents) or after it has been placed (refunds, returns).
• To measure the effectiveness of our advertising campaigns and optimise ad delivery on Facebook and Instagram, provided that you have accepted marketing cookies in the consent banner. Details are provided below in the section “Advertising measurement and Conversions API”.
• To analyse how the website is used through behavioural metrics, heatmaps and Microsoft Clarity session recordings, only if you have accepted the analytics category in the consent banner.

If you do not want us to contact you by any of the means listed above, please contact us before placing your order. The shopping experience may be affected, as the requested data is generally mandatory for us to provide you with an optimal service.

How long will we keep your personal data?

Your data will be kept only for the time strictly necessary to maintain the purpose of the data processing or when we are required by law to retain it.

When it is no longer required, it will be erased using appropriate security measures to ensure that the data is anonymised or completely destroyed.

Who do we disclose your personal data to?

Your data is yours, and we will not sell or market your data to third parties. Nor is any disclosure of personal data to third parties envisaged unless it is necessary for the development and fulfilment of the purposes of the data processing:

• Partners involved in the purchasing process so that your orders reach you, such as the payment services, warehouses or transport companies we use.
• Service providers related to advertising, analytics and campaign measurement — in particular, Meta Platforms Ireland Ltd. (Facebook / Instagram, Meta Pixel and Conversions API), Google Ireland Ltd. (Google Analytics 4), Microsoft Ireland Operations Limited and Microsoft Corporation (Microsoft Clarity), always in accordance with the consent settings applicable in each case. The categories of data shared with Meta and the applicable safeguards are detailed in the section “Advertising measurement and Conversions API” below.
• Companies involved in providing proper access to our online shop and maintaining its functionality (hosting, CRM and process automation).

Advertising measurement and Conversions API (Meta / Facebook)

If you have accepted marketing cookies in our consent banner, Eisy may use the Meta Pixel and Meta Conversions API to measure the effectiveness of its Facebook and Instagram ads, better understand campaign performance and improve the delivery of future ads.

Specifically, when you interact with our website or complete a form, we may process and disclose to Meta Platforms Ireland Ltd. certain information relating to that interaction, always in connection with advertising measurement and optimisation purposes.

• Technical browser and advertising click identifiers: Meta Pixel cookies such as _fbp and _fbc, as well as the fbclid parameter when you arrive at our website from an ad. These cookies are only installed if you accept the marketing category in the consent banner.
• Conversion events: information about actions performed on the website, such as visiting certain pages, submitting a contact form or requesting information about our products or services.
• Lead quality events: if you have submitted a contact form, we may internally record the progress of that enquiry — for example, whether the contact fits a real project, requests a call or is not qualified — and send Meta an event associated with that milestone to improve the measurement and optimisation of our campaigns.
• Pseudonymised contact details: for some events, we may send Meta your email address and/or telephone number using SHA-256 hashing, together with the technical identifiers above. This process transforms the data before it is sent to facilitate matching with Meta users, but does not necessarily mean that it ceases to be personal data under the applicable regulations.

We do not share with Meta the content of your conversations, private messages, any documents you may send us, your full postal address or special categories of personal data.

Purpose: to measure how many contacts our campaigns generate, analyse the quality of those contacts, attribute conversions to specific campaigns and allow Meta to optimise ad delivery towards people who may be interested in our products or services.

This optimisation is carried out for advertising and statistical purposes. Eisy does not use this data to make automated individual decisions that produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR.

Legal basis: processing associated with the Meta Pixel, Conversions API and cookies or similar marketing technologies is based on your consent, in accordance with Article 6(1)(a) GDPR. This consent is given by accepting the marketing cookies category in the website's consent banner.

You may withdraw your consent at any time by reopening the cookie settings panel from the website footer or by writing to us at arco@eisy.es. The withdrawal of consent will not affect the lawfulness of processing carried out before that withdrawal.

Data recipient: Meta Platforms Ireland Ltd., as the provider of measurement and advertising services on Facebook and Instagram. Meta may subsequently process certain information in accordance with its own terms and privacy policies.

International transfers: Meta Platforms Ireland Ltd. may transfer data to Meta Platforms, Inc. or other group entities located outside the European Economic Area, including the United States. Where these transfers take place, they will be made in accordance with the safeguards provided for in the GDPR, such as standard contractual clauses approved by the European Commission and, where applicable, the EU-U.S. Data Privacy Framework.

Details of the cookies used, including Meta Pixel cookies, are available in our Cookie Policy.

Experience analytics with Microsoft Clarity

If you accept the analytics category in the cookie banner, we use Microsoft Clarity to observe in aggregate how eisy.es is navigated and to identify experience issues. Clarity may generate behavioural metrics, heatmaps and session recordings from interactions such as clicks, scrolling, device type, pages visited and technical performance.

We do not send Clarity names, telephone numbers, email addresses or the content of WhatsApp messages. The custom events on this landing page do not include personal data either. By default, Clarity masks content that it classifies as sensitive; even so, we avoid identifying users through its API.

Purpose and legal basis: to improve the website's design, usability and performance. The legal basis is your consent under Article 6(1)(a) GDPR, given by accepting the analytics category in Klaro.

Who processes this data and in what role: the service is provided by Microsoft Ireland Operations Limited (MIOL), the entity with which European Union customers contract. It is important that you know this: for Clarity, Microsoft acts as a controller in its own right, not as a provider that processes the data solely on Eisy's behalf. This means that Microsoft also determines its own purposes and means for that information, in accordance with its Privacy Statement, which we recommend that you read.

International transfers: the data is hosted in the Microsoft Azure cloud and transferred to the United States. Microsoft documents that MIOL has standard contractual clauses (SCCs) with Microsoft Corporation (United States) to safeguard these transfers between its entities. Clarity does not offer an exclusive European Union hosting option.

Retention: session recordings are retained for 30 days. Aggregated click and heatmap data is retained for 9 months. Please note that a session that our team marks or labels in the Clarity dashboard is retained for 9 months instead of 30 days. After those periods, Microsoft deletes the data, including backups.

A limitation you should know about your right to erasure: Clarity does not allow the data of a specific user to be deleted. Microsoft only allows the entire project to be deleted. Therefore, if you ask us to erase your Clarity data while the retention period is still running, the only way to comply is to delete the entire analytics project, which we will do if you ask us to. In practice, session recordings disappear automatically after 30 days.

You can withdraw consent at any time through “Cookie settings”. Klaro communicates both consent and withdrawal to Clarity through ConsentV2, and on eisy.es the Clarity script is not loaded at all until you accept the analytics category. See also our Cookie Policy.

Information about Clarity verified against Microsoft's public documentation on 5 August 2026. Microsoft sets the retention periods and terms, and they may change; we review this section periodically.

What are your rights as a USER?

You have the right to withdraw your consent at any time; to exercise your right of access, rectification, portability and/or erasure of your data; or to restrict or object to its processing. Unless you inform us otherwise, we will understand that the data you have provided is accurate and, if it changes, you will notify us of any amendment to it.

You also have the right to lodge a complaint with the supervisory authority (the State Data Protection Agency — www.aepd.es) if you consider that the processing of your data does not comply with the regulations in force.

You can contact us with any questions or to exercise your rights as a USER at: arco@eisy.es or by post at: Calle Alfarería nº 8, Planta 1, 28933 Móstoles, Madrid. Always attaching a photocopy of your Spanish national identity document (DNI) or documentation proving your identity.

Principles we apply to data processing

• Lawfulness, fairness and transparency: We only process your data when we have a legal basis for doing so (for example, your consent, a contract or our legitimate interests) and always in a clear and transparent manner.
• Purpose limitation: We collect your data only for specific, legitimate and clearly disclosed purposes, such as processing your order, responding to your enquiries or sending you news if you authorise us to do so.
• Data minimisation: We only collect the data strictly necessary for the stated purpose.
• Accuracy: We take reasonable steps to ensure that the data is correct and up to date.
• Storage limitation: Data is not kept for longer than necessary.
• Integrity and confidentiality: We apply technical and organisational measures to protect your data against unauthorised access, loss or accidental destruction.