1. Name and contact details of the person responsible


Managing Director: Mihai Grosu (Miguel)

Address: C\ Santa Ana 37 , 2 5 | 12513 Catí Castellón | Spain | +34600849155 | info@grosmac.com

Contact Information for the Data Protection Officer:

You can get in touch with our Data Protection Officer via postal mail at the responsible person’s address or through email at hello@grosmac.com

2. Scope and purpose of processing personal data

2.1 Accessing the website

When you access this website, the Internet browser that the visitor uses automatically sends data to the server of this website and stores it in a log file for a limited time. Until it is automatically deleted, the following data will be stored without further input from the visitor:

  • IP address of the visitor’s device
  • Capturing the geo-location
  • Date and time of access by the visitor,
  • Name and URL of the page accessed by the visitor,
  • Website from which the visitor accesses the website (so-called referrer URL),
  • Browser and operating system of the visitor’s device as well as the name of the access provider used by the visitor.
  • Browser language

The processing of this personal data is justified in accordance with Article 6 Paragraph 1 Sentence 1 Letter f) GDPR. We have a legitimate interest in data processing for the purpose of:

  • to quickly establish the connection to the website,
  • to enable user-friendly use of the website,
  • to identify and ensure the security and stability of the systems and
  • to facilitate and improve the administration of the website.

This processing is expressly not carried out for the purpose of identifying the visitor to the website.

2.2 Contact form

Visitors can send messages to us via an online contact form on the website. In order for us to answer your request, we need your name and a valid email address. The person making the request can provide all further information voluntarily. By using the contact form, you confirm that you have read this declaration and consent to the processing of the transmitted data. . Data processing is carried out exclusively for the purpose of processing and answering inquiries via the contact form. This is done on the basis of the voluntarily given consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a) GDPR. If the reasons for storage no longer apply, the data will be deleted.

Registration as a customer

If you register for our webshop, we collect the following data:

Address details
, contact details,
log-in details

The reservation of permission for the collection of this data is Article 6, paragraph 1, letter b 

This data is stored for 10 years in accordance with legal regulations. If there are no other reasons for storage after this period, this data will be deleted.

Order in the web shop

When you place an order in the online shop, the following data is collected about you:

If you are registered as a customer, the address and contact details provided will be used for your order after you log in. If you do not live in Germany, you must also provide your VAT ID number. indicate.

If you order as a guest, the following data will be collected from you:

details Contact details
If applicable, your VAT ID number.

This data will be stored for 10 years in accordance with regulations.

Complaint form

If you use our complaint form, we collect the following data:

Address data
contact data
contract data

This data will be deleted after the statutory storage periods have expired.

3. Sharing of data

Your personal data will not be shared with 3rd party entities and passwords will be stored encrypted in the database. You can change or modify your personal data any time by entering into your account page.

4. Cookies 

So-called cookies are used on the website. These are data packets that are exchanged between the website server and the visitor’s browser. These are saved by the devices used (PC, notebook, tablet, smartphone, etc.) when you visit the website. Cookies cannot cause any damage to the devices used. In particular, they do not contain any viruses or other malware. The cookies store information that arises in connection with the specific end device used. Under no circumstances can we gain direct knowledge of the identity of the visitor to the website.

Cookies are largely accepted according to the browser’s basic settings. The browser settings can be set up so that cookies are either not accepted on the devices used, or that a special message is displayed before a new cookie is created. However, it should be noted that deactivating cookies may mean that not all functions of the website can be used in the best possible way.

The use of cookies serves to make the use of our website more convenient. For example, session cookies can be used to determine whether the visitor has already visited individual pages on the website. After you leave the website, these session cookies are automatically deleted.

Temporary cookies are used to improve user-friendliness. They are stored on the visitor’s device for a temporary period of time. When you visit the website again, it is automatically recognized that the visitor has already accessed the page at an earlier point in time and what entries and settings were made so that they do not have to be repeated. No personal data is processed here.

Cookies are also used to analyze visits to the website for statistical purposes and to improve the offering. These cookies make it possible to automatically recognize when you visit again that the website has already been accessed by the visitor before. The cookies are automatically deleted after a set period of time.

The data processed by cookies is justified for the above-mentioned purposes to protect the legitimate interests of the company in accordance with Art. 6 Para. 1 Sentence 1 Letter f) GDPR.

5. Analysis services for websites, tracking

Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. We would like to point out that on this website Google Analytics has been extended by the code “gat._anonymizeIp();” was expanded,
Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. http://tools.google.com/dlpage/gaoptout?hl=de
Further information on terms of use and data protection can be found at  http://www.google.com/analytics/terms/de.html

The legal basis for the use of the analysis tools is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR. Website analysis is in the legitimate interest of our company and serves to statistically record page usage in order to continually improve our website and the range of services we offer.

Google Remarketing

We use the remarketing or “similar target groups” function of Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”) on our website. This function serves the purpose of analyzing visitor behavior and visitor interests.
Google uses cookies to carry out the analysis of website usage, which forms the basis for creating interest-based advertisements. The cookies record visits to the website as well as anonymized data about the use of the website. There is no storage of personal data of visitors to the website. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that most likely take into account previously accessed product and information areas.

Your data may also be transmitted to the USA. There is an adequacy decision from the European Commission for data transfers to the USA.
The processing is carried out on the basis of Art. 6 (1) lit. f GDPR in the legitimate interest of targeting visitors to the website with advertising by displaying personalized, interest-based advertising for visitors to the provider’s website when they visit other websites on the Google Display Network.

For reasons arising from your particular situation, you have the right to object at any time to this processing of your personal data based on Art. 6 (1) f GDPR .
You can permanently deactivate Google’s use of cookies by following the following link and downloading and installing the plug-in provided there:  https://support.google.com/ads/answer/7395996?hl=de
Alternatively, you can You can deactivate the use of cookies by third parties by visiting the deactivation page of the Network Advertising Initiative at  https://www.networkadvertising.org/choices/  and implementing the further opt-out information provided there.
Further information about Google Remarketing and the associated data protection declaration can be found at: https://www.google.com/privacy/ads/

Google Ads

We use the online advertising program “Google Ads” on our website and, in this context, conversion tracking (visit action evaluation). Google Conversion Tracking is an analysis service provided by Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”). If you click on an ad placed by Google, a cookie for conversion tracking will be stored on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to that page. Each Google Ads customer receives a different cookie. Therefore, there is no possibility

The information collected using the conversion cookie is used to create conversion statistics. Here we find out the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users. The processing is carried out on the basis of Art. 6 (1) lit. f GDPR based on the legitimate interest in targeted advertising and the analysis of the effect and efficiency of this advertising.
For reasons arising from your particular situation, you have the right to object at any time to this processing of your personal data based on Art. 6 (1) f GDPR .
To do this, you can prevent the storage of cookies by selecting the appropriate technical settings in your browser software. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You will then not be included in the conversion tracking statistics.

You can also deactivate personalized advertising for you in the Google advertising settings. Instructions can be found at  https://support.google.com/ads/answer/2662922?hl=de  In addition, you can deactivate the use of cookies by third parties by visiting the Network Advertising Initiative deactivation page at  https Go to ://www.networkadvertising.org/choices/  and implement the further information about the opt-out mentioned there.
Further information and Google’s privacy policy can be found at:  https://www.google.de/policies/privacy/

Facebook remarketing/retargeting

Remarketing tags from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA are integrated into our pages. When you visit our pages, a direct connection is established between your browser and the Facebook server via the remarketing tags. Facebook thereby receives the information that you have visited our site with your IP address. This allows Facebook to assign your visit to our pages to your user account. We can use the information obtained in this way to display Facebook Ads. We would like to point out that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook. Further information can be found in Facebook’s data protection declaration at  https://www.facebook.com/about/privacy/ . If you do not want data to be collected via Custom Audience, you can  deactivate Custom Audiences here .

Conversion measurement with Facebook’s visitor action pixel

With your consent, we use the “visitor action pixel” from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) within our website. This allows us to track users’ actions after they have seen or clicked on a Facebook ad. This allows us to record the effectiveness of Facebook advertisements for statistical and market research purposes. The data collected in this way is anonymous to us, which means we do not see the personal data of individual users. However, this data is stored and processed by Facebook, about which we will inform you according to our level of knowledge. Facebook can connect this data to your Facebook account and also use it for its own advertising purposes, in accordance with Facebook’s data usage policy https://www.facebook.com/about/privacy/ . You can enable Facebook and its partners to place advertisements on and outside of Facebook. A cookie may also be stored on your computer for these purposes.

This consent may only be given by users who are older than 13 years old. If you are younger, we ask that you ask your guardians for advice.

6. Your rights as a data subject

If your personal data is processed when you visit our website, you as the “data subject” within the meaning of the GDPR have the following rights:

6.1 Information

You can request information from us as to whether we are processing your personal data. There is no right to information if the provision of the requested information violates a duty of confidentiality. would be violated or the information must be kept secret for other reasons, in particular because of an overriding legitimate interest of a third party. Deviating from this, there may be an obligation to provide information if your interests outweigh the interest in confidentiality, particularly taking into account the threat of damage. The right to information is also excluded if the data is only stored because because they may not be deleted due to legal or statutory retention periods or serve exclusively for data backup or data protection control purposes, provided that providing information would require a disproportionate amount of effort and processing for other purposes is excluded by appropriate technical and organizational measures. If the right to information is not excluded in your case and your personal data is processed by us, you can request information from us about the following information:

  • purposes of processing,
  • Categories of personal data processed by you,
  • Recipients or categories of recipients to whom your personal data is disclosed, in particular recipients in third countries,
  • if possible, the planned period for which your personal data will be stored or, if this is not possible, the criteria for determining the storage period,
  • the existence of a right to rectification or deletion or restriction of the processing of personal data concerning you or a right to object to this processing,
  • the existence of a right to lodge a complaint with a data protection supervisory authority,
  • if the personal data was not collected from you as the data subject, the available information about the origin of the data,
  • if necessary, the existence of automated decision-making including profiling and meaningful information about the logic involved as well as the scope and intended effects of automated decision-making,
  • If necessary, in the case of transfer to recipients in third countries, unless there is a decision by the EU Commission on the adequacy of the level of protection in accordance with Art. 45 Para. 3 GDPR, information about which appropriate guarantees in accordance with Art. 46 Para. 2 GDPR are available for protection of personal data are provided.

6.2 Correction and completion

If you discover that we have incorrect personal data about you, you can request that we correct this incorrect data immediately. If your personal data is incomplete, you can request that it be completed.

6.3 Deletion

You have a right to erasure (“right to be forgotten”) unless processing is necessary to exercise the right to freedom of expression, the right to information or to fulfill a legal obligation or to perform a task carried out in the public interest and one of the following reasons applies:

  • The personal data are no longer necessary for the purposes for which they were processed.
  • The basis for justification for the processing was solely your consent,    which you revoked.
  • You have objected to the processing of your personal data that we have made public.
  • You have objected to the processing of personal data that we have not made public and there are no overriding legitimate reasons for the processing.
  • Your personal data has been processed unlawfully.
  • The deletion of personal data is necessary to fulfill a legal obligation to which we are subject.

There is no right to deletion if, in the case of lawful, non-automated data processing, deletion is not possible or only possible with disproportionate effort due to the special type of storage and your interest in deletion is low. In this case, deletion is replaced by restriction of processing.

6.4 Restriction of processing

You can request that we restrict processing if one of the following reasons applies:

  • You dispute the accuracy of the personal data. In this case, the restriction can be requested for the period of time that enables us to check the accuracy of the data.
  • The processing is unlawful and you request the restriction of the use of your personal data instead of deletion.
  • We no longer need your personal data for the purposes of processing, but you need it to establish, exercise or defend legal claims.
  • You have lodged an objection in accordance with Article 21 Paragraph 1 GDPR. Restriction of processing can be requested as long as it is not yet clear whether our legitimate reasons outweigh your reasons.

Restriction of processing means that the personal data will only be processed with your consent or for the establishment, exercise or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest. Before we lift the restriction, we have a duty to inform you about it.

6.5 Data portability

You have a right to data portability if the processing is based on your consent (Article 6 Paragraph 1 Sentence 1 Letter a) or Article 9 Paragraph 2 Letter a) GDPR) or on a contract to which you are a party and the processing takes place using automated procedures. In this case, the right to data portability includes the following rights, provided that this does not affect the rights and freedoms of other persons: You can request from us to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format . You have the right to transmit this data to another person responsible without hindrance on our part. As far as technically feasible, you can request from us:

6.6 Objection

If the processing is based on Art. 6 Para. 1 Sentence 1 Letter e) GDPR (performing a task in the public interest or in the exercise of official authority) or on Art. 6 Para. 1 Sentence 1 Letter f) GDPR (legitimate interest of the controller). or a third party), you have the right to object at any time to the processing of personal data concerning you for reasons relating to your particular situation. This also applies to profiling based on Article 6 Paragraph 1 Sentence 1 Letter e) or Letter f) GDPR. After exercising your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert:

You can object to the processing of your personal data for direct advertising purposes at any time. This also applies to profiling that is associated with such direct advertising. After exercising this right of objection, we will no longer use the relevant personal data for direct advertising purposes.

You have the option of informing us of your objection informally by telephone, email, if necessary by fax or to our company’s postal address listed at the beginning of this data protection declaration.

6.7 Revocation of consent

You have the right to revoke your consent at any time with future effect. The revocation of consent can be communicated informally by telephone, email, if necessary by fax or to our postal address. The revocation does not affect the lawfulness of the data processing that took place based on the consent until the revocation was received. Once your revocation has been received, data processing based solely on your consent will be discontinued.

6.8 Complaint

If you believe that the processing of your personal data is unlawful, you may lodge a complaint with a data protection supervisory authority responsible for your place of residence or work or for the place of the alleged infringement.