Last updated: 31 July 2026
1. Data controller
The controller responsible for the processing of personal data through PilatesSpareParts.com is:
Iker Villanueva
Spanish tax identification number, NIF: 14612395N
Address:
Avenida Basagoiti 70
48993
Spain
Email: info@pilatesspareparts.com
2. Scope of this Privacy Policy
This Privacy Policy explains how personal data may be collected and processed when a user:
- visits PilatesSpareParts.com;
- contacts the website by email;
- publishes a comment where comments are enabled;
- interacts with the website and its security systems.
The website currently provides technical and educational information.
It does not currently operate an online shop or sell products through the website.
It does not currently operate a newsletter or email-marketing subscription service.
3. Personal data that may be processed
3.1 Contact enquiries
When a user sends an email to the contact address published on the website, the following information may be processed:
- name;
- email address;
- company or organisation, where voluntarily supplied;
- subject and message content;
- any information voluntarily included in the enquiry.
Users should not submit special-category, confidential or sensitive personal information unless it is strictly necessary for their enquiry.
The contact email address is intended for general questions concerning the website, Pilates equipment, components, maintenance and related professional enquiries.
3.2 Website comments
Where comments are enabled, the website may collect:
- the name or username supplied by the commenter;
- email address;
- website address, where supplied;
- comment content;
- IP address;
- browser or user-agent information;
- information used to identify spam or abusive activity.
This information may be used to display, administer and moderate comments and to detect spam, abuse, unlawful material or security threats.
Comments may be reviewed before or after publication.
3.3 Website analytics
PilatesSpareParts.com uses Google Analytics (GA4) to understand how visitors use this website. Google Analytics is configured and consent-gated through Complianz, and only operates after the visitor has given consent for statistics cookies through the cookie banner.
IP addresses are anonymized by design for GA4 properties. Full details of the cookies placed, including by Google Analytics, are listed in the Cookie Policy.
3.4 Technical logs and website security
The hosting infrastructure, WordPress, Wordfence and other necessary technical services may process information such as:
- IP address;
- date and time of access;
- requested URL;
- browser and device information;
- failed login attempts;
- suspicious requests;
- malicious traffic patterns;
- security events;
- technical error logs.
This information is processed to operate, maintain, diagnose and protect the website.
4. Purposes and legal bases
4.1 Contact enquiries
Purpose:
To receive, manage and respond to questions, requests or professional communications submitted by the user.
Legal basis:
Taking steps at the user’s request and the legitimate interest in responding to communications relating to the website and its subject matter.
4.2 Comments
Purpose:
To publish and manage comments and prevent spam, abusive content or unlawful activity.
Legal basis:
The user’s voluntary decision to submit a comment and the legitimate interest in operating and moderating the website.
4.3 Website security
Purpose:
To prevent unauthorised access, fraud, malware, attacks, abuse and disruption of the website.
Legal basis:
The legitimate interest in ensuring the security, integrity and availability of the website and its systems.
4.4 Analytics
PilatesSpareParts.com uses Google Analytics (GA4) to process limited, statistics-category personal data (such as anonymized IP-derived location and usage patterns) about how visitors use this website.
This processing only takes place on the basis of the user’s consent, which may be refused or withdrawn at any time through the website’s cookie settings.
4.5 Legal obligations and claims
Personal data may also be processed where necessary to comply with a legal obligation or to establish, exercise or defend legal claims.
5. Recipients and service providers
Personal data is not sold to advertisers or other third parties.
Access to personal data may be granted, where necessary, to service providers acting on behalf of the data controller, including:
- website-hosting providers;
- email-service providers;
- website-security providers;
- backup and technical-maintenance providers;
- anti-spam providers, where enabled.
These providers may only process information necessary to provide their respective services and must be subject to the applicable contractual and data-protection obligations.
Personal data may also be disclosed where required by law, a court, a supervisory authority or another competent public authority.
6. International data transfers
Some technology or hosting-related services used by the website may process information outside the European Economic Area.
Where an international transfer takes place, it must be based on a mechanism recognised by applicable data-protection law, such as:
- an adequacy decision;
- approved standard contractual clauses;
- or another legally recognised safeguard.
If analytics or other international technology services are introduced in the future, their use will be subject to the applicable data-processing terms and legal transfer safeguards implemented by the relevant provider.
7. Data retention
Contact enquiries will be retained for the time reasonably necessary to respond to and manage the enquiry and, where necessary, for applicable legal limitation periods.
Comments may be retained while they remain published or while necessary for moderation, security or legal purposes.
Security and server logs will be retained according to the operational and security periods applied by the relevant provider or security system.
Cookie-consent choices will be retained for the period configured in Complianz.
Data may be retained for a longer period where required to comply with a legal obligation or to establish, exercise or defend a claim.
8. Data-protection rights
Subject to the conditions established by applicable data-protection law, users may exercise the following rights:
- access their personal data;
- request correction of inaccurate or incomplete data;
- request deletion of their data;
- request restriction of processing;
- object to processing based on legitimate interests;
- request data portability where applicable;
- withdraw consent at any time;
- lodge a complaint with a competent supervisory authority.
Requests may be sent to:
info@pilatesspareparts.com
The requester may be asked to provide sufficient information to verify their identity and identify the relevant personal data.
Users may lodge a complaint with the Spanish Data Protection Agency if they consider that their personal data has been processed unlawfully.
9. Withdrawal of cookie consent
Users can accept, reject or configure non-essential cookies through the website’s consent banner.
They can subsequently change or withdraw their choice through the cookie-preferences mechanism available on the website.
Withdrawal of consent does not affect processing lawfully carried out before withdrawal.
10. Automated decision-making
PilatesSpareParts.com does not currently make decisions producing legal or similarly significant effects based solely on automated processing.
11. Children’s data
The website is not specifically directed at children and does not knowingly seek to collect personal data from children.
Users who are not legally able to provide valid consent should not submit personal information without the involvement of a parent or legal guardian.
12. Data security
Reasonable technical and organisational measures are used to protect personal data against unauthorised access, alteration, loss, disclosure or destruction.
These measures include appropriate website-security, access-control, backup and maintenance procedures.
However, no internet-based system can guarantee absolute security.
13. Third-party websites
The website may contain links to external websites.
This Privacy Policy does not apply to third-party websites, which are governed by their own privacy policies and practices.
Users should review the relevant privacy information before providing personal data to another website.
14. Changes to this Privacy Policy
This Privacy Policy may be updated to reflect legal, technical or operational changes.
The current version and its last-updated date will be displayed on this page.
15. Contact
Questions or requests relating to privacy may be sent to:
info@pilatesspareparts.com