This Legal Notice is intended to inform you of your rights and obligations as a user of this website. Here you will find all the information you need about this website, its activity, the personal data it collects and its purpose, as well as the rules of use that regulate the use of this website.

At the moment you access this website , you assume the condition of user, so the content of this Legal Notice affects you directly. Therefore, it is important that you read it to dispel any doubts you may have and to be aware of the conditions you are accepting.

To begin with, you should know that this website complies with current regulations on data protection, in order to provide you with the guarantees, security and transparency that, as a user, correspond to you when using this website.

The GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons) which is the new European Union regulation that unifies the regulation of the processing of personal data in the different EU countries.

The LOPD(Organic Law 15/1999, of December 13, on the Protection of Personal Data and Royal Decree 1720/2007, of December 21, the Regulation of development of the LOPD) that regulates the treatment of personal data and the obligations that those responsible for a website or a blog must assume when managing this information.

The LSSI(Law 34/2002, of July 11, 2002, on Information Society Services and Electronic Commerce) which regulates economic transactions through electronic means, as is the case of this blog.

The use of the Web site implies the acceptance of this Privacy Policy as well as the conditions included in the terms and conditions.


  • The company name is: Engtech Composites Lab S.L (hereinafter "the responsible party").
  • VAT Number: B70518550
  • The registered office is: Rua Barbanza, 2ª. Nave 5B. 15171 Iñás (A Coruña). Spain
  • The business activity is: Sale of bicycles.
  • E-mail:
  • Purpose of the website: Sale and dissemination of bicycles.

How to exercise your rights: You can send a written communication to the registered office of the responsible party or to the e-mail address indicated in the heading of this legal notice, including in both cases a photocopy of your ID card or other similar identification document, to request the exercise of the following rights:

  • Right to request access to personal data: you may ask the controller if this company is processing your data.
  • Right to request their rectification(in case they are incorrect).
  • The right to request the limitation of their processing, in which case they will only be kept by the data controller for the exercise or defense of claims.
  • Right to object to the processing: The data controller will stop processing the data in the way you indicate, unless for compelling legitimate reasons or the exercise or defense of possible claims must continue to be treated.
  • Right to data portability: in case you want your data to be processed by another firm, the data controller will facilitate the portability of your data to the new data controller.
  • Right to erasure of data: unless otherwise required by law, data will be erased after your confirmation.

Forms, forms and more information about your rights: Official website of the Spanish Data Protection Agency.

Possibility of withdrawing consent: if you have given consent for a specific purpose, you have the right to withdraw it at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

How to complain to the Control Authority: If you consider that there is a problem with the way in which the data controller is handling your data, you can address your complaints to the Security Officer of (indicated above) or to the corresponding data protection authority, being the Spanish Data Protection Agency, the one indicated in the case of Spain.



At any time you have the right to review, retrieve, anonymize and/or delete, in whole or in part, the data stored on the website. Just send an email to and request it.


Disaggregated data: Disaggregated data will be kept with no deletion period.

Data of the customers of the online store: The period of conservation of personal data will vary depending on the service that the customer contracts in our online store. In any case, it will be the minimum necessary, and may be kept until:

  • 4 years: Law on Infractions and Penalties in the Social Order (obligations regarding affiliation, registrations, cancellations, contributions, payment of salaries, etc.); Arts. 66 et seq. of the General Tax Law (accounting books, etc.);
  • 5 years: Art. 1964 Civil Code (personal actions without special time limit)
  • 6 years: Art. 30 Commercial Code (accounting books, invoices...)
  • 10 years: Art. 25 Prevention of Money Laundering and Terrorist Financing Act.

Email feed subscriber data: From the time the user subscribes until the user unsubscribes.

Newsletter subscriber data: From the time the user subscribes until the user unsubscribes.

User data uploaded by the responsible party to pages and profiles on social networks: From the time the user gives his consent until he withdraws it.


Secrecy and security of the data
The data controller undertakes in the use of the data, to respect your confidentiality and to use them in accordance with the purpose of the same, as well as to comply with its obligation to save them and adapt all measures to prevent alteration, loss, treatment or unauthorized access, in accordance with the provisions of EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 (RGPD) and the Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights.

You guarantee that the personal data provided through the form are truthful, being obliged to communicate any modification of the same.

Likewise, you guarantee that all the information provided corresponds to your real situation, that it is up to date and accurate. You must also keep your data updated at all times, being solely responsible for the inaccuracy or falsity of the data provided and the damages that may be caused by it to the responsible as the owner of, or third parties on the occasion of the use of such.


Security breaches

The responsible party adopts reasonably adequate security measures to detect the existence of viruses, brute force attacks and code injections.

The IP address of visitors, the ID of logged-in users and the username of access attempts are conditionally logged to check for malicious activity and protect the site from specific types of attacks. Examples of conditions that are logged are access attempts, logout requests, requests for suspicious URLs, changes to site content, and password changes. This information is retained for 180 days.

This site has also been scanned for malware and potential vulnerabilities using Sucuri's SiteCheck. We do not submit personal information to Sucuri; however, Sucuri may find personal information posted publicly (such as in comments) during its scanning.

However, you should be aware that the security measures of computer systems on the Internet are not entirely reliable and, therefore, the responsible cannot guarantee the absence of viruses or other elements that may cause alterations in the computer systems (software and hardware) of the User or in their electronic documents and files contained therein.

However, to try to ensure the security and privacy of your personal data, has an active security monitoring system that reports every user activity and possible security breaches of user data.



All products and services offered on the website refer to contact forms, comment forms and forms for user registration, newsletter subscription and / or purchase orders.

This website always requires the prior consent of users to process their personal data for the purposes indicated. You have the right to revoke your prior consent at any time.


Record of data processing activity

Web and hosting: has a SSL TLS v.1.2 encryption that allows the secure sending of personal data through standard contact forms, hosted on servers that the responsible has contracted RAIOLA NETWORKS, S.L, CAvda. de Magoi, 66, SS, Dcha., C.P. 27002 Lugo (Lugo).


Data collected through the web: The personal data collected will be subject to automated processing and incorporated into the corresponding files of which the responsible party is the owner.

  • We will receive your IP, which will be used to check the origin of the message in order to provide you with information, protection against SPAM comments and to detect possible irregularities (e.g. opposite sides of the same case write to the website from the same IP), as well as data concerning your ISP.
  • You may also provide us with your data via e-mail and other means of communication indicated in the contact section.

Comments form: On the web there is the possibility for users to leave comments to the site's publications. There is a cookie that stores the data provided by the user so that you do not have to re-enter them on each new visit and also collects internally the email address, name, web and IP address.

The data is stored in the servers of RAIOLA NETWORKS, S.L, .

User registration: Not allowed unless expressly requested.

Purchase form: To access the products and services offered in our online store, the user has a purchase form subject to the terms and conditions specified in our terms and conditions where you will be required contact details and payment.

The data is stored on RAIOLA NETWORKS, S.L. servers.

We collect information about you during the checkout process in our store. This information may include, but is not limited to, your name, address, email address, telephone number, payment details and other information necessary for us to process your orders. The management of this data allows us to:

  • Send you important information about your account/order/service.
  • Respond to your requests, complaints and refund requests.
  • Process payments and avoid fraudulent transactions.
  • Set up and manage your account, provide customer and technical service, and verify your identity.

In addition, we may also collect the following information:

  • Location and traffic data (including IP address and browser) if you place an order, or if we need to estimate taxes and shipping costs based on your location.
  • Product pages visited and content viewed while your session is active.
  • Your comments and product reviews if you choose to leave them.
  • Shipping address if you request shipping costs before making the purchase while your session is active.
  • Essential cookies to keep track of the contents of your cart while your session is active.
  • Your account email and password to allow you to access your account, if you have one.
  • If you create an account we store your name, address and phone number for future orders.

Newsletter subscription forms: The data controller will use Newsletter subscription forms.

Email: Our email service provider is Google, Inc. through Google Apps for Business.

Instant messaging: the responsible party does not provide service through instant messaging such as, for example, WhatsApp, Facebook Messenger or Line.

Payment service providers: Through, you can access, through links, to third party websites, such as PayPal or Stripe, to make payments for the services provided by the responsible. At no time does the staff of the responsible party have access to the bank details (e.g. credit card number) that you provide to these third parties.

Content embedded from other websites

Articles on may include embedded content (e.g. videos, images, articles, etc.). Content embedded from other websites behaves in the same way as if the visitor has visited the other website. These sites may collect data about you, use cookies, embed third party tracking, and monitor your interaction with the embedded content, including tracking your interaction with the embedded content if you have an account or are logged in to that site.

Other services: Certain services provided through the website may contain special conditions with specific provisions on the protection of personal data. It is essential to read and accept them prior to requesting the service in question.

Purpose and legitimacy: The purpose of the processing of this data will be solely to provide you with the information or services you request from us.

Social networks

  • Presence in networks: The manager has profiles in some of the main Internet social networks.
  • Purpose and legitimacy: The treatment that the responsible will carry out with the data within each of the referred networks will be, at most, the one that the social network allows to the corporate profiles. Thus, the data controller may inform, when the law does not prohibit it, its followers by any means that the social network allows about its activities, presentations, offers, as well as provide personalized customer service.
  • Data extraction: Under no circumstances will the responsible party extract data from social networks, unless the user's consent to do so was obtained promptly and expressly.
  • Rights: When, due to the very nature of social networks, the effective exercise of the follower's data protection rights is subject to the modification of the follower's personal profile, the responsible party will help and advise you to that end to the best of its ability.


Processors outside the EU

  • Storage and encryption. The responsible uses encrypted storage services of Google Inc. through Google Drive.
  • E-mail. The email service of the responsible is provided using the services of Google Inc. through Google Apps.
  • Social Networks. The responsible makes use of American social networks YouTube, Facebook and Twitter, to whom an international transfer of data, analytical and technical type in relation to the website is performed on their servers in which the responsible treats the data that, through them, users, subscribers or browsers delivered to the firm the responsible or share with this.
  • Payment providers. In order for you to pay through PayPal or Stripe, the responsible will send the strictly necessary data of those to these payment processors for the issuance of the corresponding payment request. Your information is protected in accordance with our privacy and cookie policy.

By activating a subscription or providing your payment details, you understand and accept our privacy and cookies policy. You always have the right to access, rectification, deletion, limitation, portability, and oblivion of your data.

From the moment you register as a user on this website, the responsible has access to: User name and email, IP address, postal address, ID/CIF and payment details. In any case the responsible reserves the right to modify, at any time and without prior notice, but informing, the presentation and configuration of the website as this legal notice.

Commitment and obligations to our users

The access and/or use of attributes to the user the condition of user, accepting, from this very moment, fully and without reservation, the present legal warning in relation to certain services and contents of

In the use of the user agrees not to carry out any conduct that could damage the image, interests and rights of the responsible party or third parties or that could damage, render useless or overload the portal or that could impede, in any way, the normal use of