Effective Date: October 4, 2026
Welcome to the privacy policy of EL PAÑO DE ORO SL, a company registered and operating under the laws of Spain, with its registered office located at Calle Olegario Domarco Seller 120, 3, 03206 Elche, Alicante, Spain. This privacy policy applies to all personal data processing activities conducted through our official e-commerce website www.panooro.com, and it is designed to inform you clearly and transparently about how we collect, use, store, share and protect your personal information when you browse, register, make purchases or interact with our online platform. We take the protection of your personal privacy extremely seriously, and we comply fully with all applicable data protection regulations, including the Spanish Organic Law 3/2018 of December 5 on Personal Data Protection and Guarantee of Digital Rights, the General Data Protection Regulation (EU) 2016/679 (GDPR), and all other relevant local and European legislative frameworks that govern the handling of user personal information for e-commerce businesses. If you have any questions, concerns or requests related to your personal data and this privacy policy, you can contact our data protection team at any time by sending an email to lumis@panooro.com, or by calling our customer service line on +34 966 673 902 during our working hours, from 9:00 AM to 6:00 PM CET, Monday to Friday, excluding official public holidays in the Valencian Community.
1. Data Controller Identification
For the purposes of all applicable data protection laws, the data controller responsible for your personal information processed via the www.panooro.com platform is EL PAÑO DE ORO SL. Our full contact details are as follows:
- Full registered company name: EL PAÑO DE ORO SL
- Physical mailing and operational address: Calle Olegario Domarco Seller 120, 3, 03206 Elche, Alicante, Spain
- Official contact email for privacy and data related enquiries: lumis@panooro.com
- Contact telephone number: +34 966 673 902
- Registered company identification number: B75795328
We are the exclusive operator and manager of the www.panooro.com e-commerce platform, and we do not outsource full control of your personal data to any third party without your explicit prior consent, except for the limited scenarios that are clearly outlined in later sections of this policy.
2. Types of Personal Information We Collect
We only collect personal information that is strictly necessary for the operation of our e-commerce platform, to fulfill our contractual obligations to you, and to deliver the highest possible quality of products and services you request from us. We do not collect any unnecessary or excessive personal data without your explicit knowledge. The categories of personal information we may collect from you include the following:
2.1 Information You Provide Voluntarily
This refers to all information that you actively submit to us when interacting with our website:
- Account registration information: When you create a user account on www.panooro.com, we collect your full name, valid email address, chosen account password, preferred contact telephone number, and default delivery and billing address.
- Purchase and order information: When you place an order on our platform, we collect the full details of the products you select, your payment information (including billing address, payment card billing details, and transaction confirmation information), special delivery instructions you provide, and any customized product requirements you submit for your order.
- Customer support correspondence: When you contact us via email, online chat form, telephone, or any other communication channel to ask product questions, request after-sales support, submit a return or refund application, or send any other feedback, we collect the full content of your messages, your contact details associated with the correspondence, and all relevant notes our support team makes regarding your request.
- Marketing preference information: When you subscribe to our promotional newsletter, sign up for exclusive member discount alerts, or participate in our online survey activities, we collect your consent preferences for marketing communications, your stated interests in specific product categories, and any feedback you share about your shopping experience with us.
2.2 Information We Collect Automatically When You Use Our Website
When you browse and access www.panooro.com, our server systems automatically collect certain technical information to ensure the stable, secure and optimized operation of our e-commerce platform:
- Device and connection information: This includes your IP address, browser type and version, operating system, device type and model, unique device identification codes, and your internet service provider information.
- Website usage data: This includes the timestamp of your visit, pages you viewed on our website, links you clicked, search terms you entered on our platform, time spent on each page, page interaction metrics, and the previous website domain that directed you to our e-commerce site.
- Cookie and similar tracking technology data: We use standard cookie technologies, web beacons, and local storage tags to remember your login status, save your shopping cart contents across browsing sessions, remember your preferred language and currency settings, analyze website traffic patterns, and deliver personalized product recommendations that match your browsing habits. You can adjust your browser settings at any time to refuse or disable cookies, but please note that disabling essential cookies may impact the normal functionality of our website, and you may not be able to complete the checkout process or access certain member-exclusive features.
2.3 Information We Collect From Third Party Sources
In limited circumstances, we may receive supplementary information about you from trusted third parties to verify the accuracy of the data we hold, prevent fraudulent transaction activities, and improve our service quality:
- Payment service providers: Our authorized payment partners will share necessary transaction confirmation and anti-fraud verification data with us, to confirm that the payment for your order is legitimate and authorized by the legitimate card holder.
- Logistics and courier partners: Our delivery service providers share delivery status updates, signature confirmation records, and updated delivery address information (if you request to modify your delivery location through the courier platform) with us, so that we can keep you informed of the real-time status of your order shipment.
- Social media platforms: If you choose to register or log in to our www.panooro.com account via a third party social media service such as Facebook, Google or Instagram, the platform will share your public profile name, public profile picture, and verified email address with us, only after you explicitly grant the permission for this data sharing through the social media authorization prompt.
3. Legal Bases for Processing Your Personal Data
All of our personal data processing activities are based on one or more of the legal grounds defined in the GDPR, and we will never process your personal information without a valid legal justification:
- Performance of Contract: Most of our data processing activities are necessary to fulfill the sales contract we form with you when you place an order on our website. This processing includes managing your orders, processing your payments, arranging product shipment, handling after-sales returns and warranty services, and all other activities required to fulfill our contractual obligations to deliver the products you purchase.
- Legitimate Interests: We process a limited set of your personal data based on our legitimate business interests, provided that these interests do not override your fundamental privacy rights. These legitimate interests include: ensuring the cybersecurity of our e-commerce platform, preventing fraudulent transactions and payment scams, optimizing the performance of our website to deliver a better shopping experience to all users, conducting anonymized statistical analysis of sales trends to improve our product inventory planning, and sending you service-related updates about your order status that you have requested to receive. We will always conduct a strict balancing test before carrying out any processing based on legitimate interests, to ensure that your privacy rights are fully protected.
- Your Explicit Consent: For any processing activities that are not covered by the two legal bases listed above, we will only process your personal data after you provide clear, explicit, freely given and revocable consent. This includes sending you non-essential promotional newsletters and personalized marketing alerts, using non-essential analytical cookies to track your browsing habits for marketing purposes, and sharing your personal data with third party partner brands for co-promotion activities. You have the full right to withdraw your consent at any time, by sending an email to lumis@panooro.com, and this withdrawal of consent will not affect the lawfulness of any processing activities we have already carried out based on your consent before you submitted the withdrawal request.
- Compliance with Legal Obligations: We are required to process certain categories of your personal data to comply with our legal obligations as a Spanish registered company, including retaining transaction records for tax and accounting compliance purposes, providing necessary information to competent judicial and regulatory authorities when we receive a legally valid court order or official investigation request, and verifying user identities to comply with local anti-money laundering regulations.
4. Purposes For Which We Use Your Personal Information
We only use your personal data for the specific, clearly stated purposes that we have disclosed to you at the time of data collection, and we will never process your personal information in a way that is incompatible with these purposes without providing you with new notification and obtaining the required new consent. The core purposes of our data processing are as follows:
- To create, manage and maintain your user account on www.panooro.com, so that you can save your delivery addresses, view your historical order records, track ongoing orders, and access exclusive member discount benefits.
- To process, confirm, fulfill and deliver the orders you place on our e-commerce platform, including verifying your payment information, arranging product packaging and shipment, coordinating with our courier partners, and resolving any delivery related issues that may arise.
- To provide you with responsive customer support and after-sales services, including handling your product enquiries, processing your return and refund applications, managing product warranty claims, and resolving any disputes that may arise in the course of our business relationship.
- To personalize your shopping experience on our website: we use your browsing history, purchase records and stated preference information to recommend products that match your interests, display the correct currency and shipping cost information based on your location, and send you targeted notifications about restocks of items you have previously viewed.
- To ensure the security and integrity of our website and business operations: we use your technical connection data, device information and transaction patterns to detect, prevent and investigate fraudulent activities, unauthorized access attempts, payment scams, and other malicious activities that may threaten the safety of our platform and other users.
- To comply with all our legal and regulatory obligations: we retain transaction, sales and user records for the period required by Spanish tax law, respond to valid official requests from public authorities, and cooperate with regulatory audits when required by law.
- To send you service updates and non-promotional administrative notifications: these include emails about changes to our terms of service, updates to this privacy policy, security alerts for your user account, and important announcements about temporary website maintenance that may impact your shopping experience.
- To conduct anonymized market research and business performance analysis: all data used for this purpose will be fully anonymized and aggregated, so that no individual user can be identified from the statistical results. We use this analysis to understand overall shopping trends, optimize our product inventory, improve our website user interface design, and develop new product lines that better meet the needs of our customers.
- If you have given us explicit consent to receive marketing communications, we will send you periodic newsletters, exclusive discount offers, new product launch announcements, and promotional campaign information via email, SMS or other contact methods you have selected. You can opt out of these marketing communications at any time, by clicking the unsubscribe link included at the bottom of every promotional email we send, or by sending a request to our customer support team at lumis@panooro.com.
5. Disclosure and Sharing of Your Personal Information
EL PAÑO DE ORO SL will never sell, rent or lease your personal information to any unrelated third parties for their own commercial marketing purposes, without your explicit written consent. We only share your personal data with carefully selected third parties in the limited scenarios outlined below, and all of these third parties are required to comply with strict data protection contractual clauses that ensure the full security and confidentiality of your information:
- Our authorized service providers: We share necessary personal information with trusted third party service providers who perform critical business functions on our behalf, to support the operation of our e-commerce platform. These service providers include: payment processing companies that handle your secure payment transactions, courier and logistics partners that deliver your purchased products to the delivery address you provide, cloud hosting service providers that store our website data and user information on secure encrypted servers, email service providers that deliver our order confirmation and support emails to you, and IT maintenance providers that assist us with website technical support and cybersecurity management. All of these service providers are only permitted to access your personal data to perform their specific tasks for us, and they are contractually prohibited from using your information for any of their own independent purposes.
- Legal and competent public authorities: We may disclose your personal information if we are required to do so by a legally binding court order, official government investigation request, regulatory audit requirement, or to protect our legal rights, property and safety, as well as the rights, property and safety of our employees, customers and the general public. This includes cooperating with law enforcement authorities to investigate and prevent fraudulent activities, cybercrimes and other illegal acts that may cause harm to any party.
- Business transfer scenarios: In the event of a future merger, acquisition, asset sale, or full or partial transfer of our business operations, your personal data stored in our systems may be transferred to the relevant succeeding entity. We will notify you at least 30 days in advance before any such transfer takes place, via a prominent announcement on our www.panooro.com website and an email sent to your registered contact address, and we will ensure that the succeeding entity agrees to abide by the terms of this privacy policy to protect your personal data rights.
- With your explicit prior consent: In any other scenario that is not covered by the above listed exceptions, we will only share your personal information with any third party after we have obtained your clear, explicit and freely given consent.
6. International Transfers of Personal Data
Our e-commerce platform and associated data storage systems are primarily hosted on secure servers located within the territory of the European Union, so most of your personal data is processed and stored within the European Economic Area (EEA). In very limited cases, some of our third party service providers may process your personal data in countries located outside of the EEA. When this situation occurs, we will take all necessary measures to ensure that the international data transfer complies fully with the requirements of the GDPR, and that an adequate level of protection for your personal data is guaranteed. These protective measures include: signing standard contractual clauses that are formally approved by the European Commission with the relevant third party service provider, verifying that the non-EEA country in question has an official adequacy decision issued by the European Commission, or implementing other appropriate legally valid safeguards to protect your personal information. If you wish to obtain a full copy of the documentation related to our international data transfer safeguards, you can submit a request to us via email at lumis@panooro.com at any time.
7. Data Retention Period
We will never retain your personal information for longer than it is necessary to achieve the specific purposes for which we originally collected the data. We define our standard data retention periods in line with applicable Spanish and European legal requirements, as follows:
- For order and transaction related data: We retain all your order information, payment records, delivery documents and after-sales service records for a minimum period of 10 years after the completion of your order, to comply with Spanish tax and accounting legal obligations. After this period expires, we will anonymize or securely delete all of this data, in compliance with secure data erasure protocols.
- For registered user account data: We will retain all your account profile information for as long as you keep your user account active on our www.panooro.com platform. If you choose to permanently delete your user account, we will securely erase all your personal profile data within 15 working days, except for the transaction records that we are legally required to retain for tax and regulatory compliance purposes.
- For marketing communication related data: We will retain your contact information for marketing purposes until you choose to withdraw your consent and opt out of receiving our marketing messages. After you submit an opt-out request, we will remove your contact details from all our marketing distribution lists within 7 working days.
- For automatically collected website usage and cookie data: We retain this type of data for a maximum period of 12 months, after which we will anonymize or permanently delete it.
At the end of the applicable retention period, your personal data will be either irreversibly anonymized (so that you can no longer be identified from the data) or securely deleted, using industry-standard encrypted data erasure methods that prevent any unauthorized parties from recovering the information.
8. Your Rights Under Applicable Data Protection Law
Under the GDPR and Spanish national data protection regulations, you have a comprehensive set of legally enforceable rights related to your personal data. You can exercise all of these rights free of charge, by submitting a request to us via email at lumis@panooro.com, or by sending a written request to our physical address at Calle Olegario Domarco Seller 120, 3, 03206 Elche, Alicante, Spain. We will respond to your request within a maximum of one month from the date we receive your valid identity verification. The rights you are entitled to exercise include:
- Right of Access: You have the right to request a full copy of all the personal data we hold about you, as well as detailed information about how we process your personal information.
- Right to Rectification: If you find that any of the personal data we hold about you is inaccurate, incomplete or out of date, you have the right to request that we correct and update that information immediately. You can also modify most of your profile information directly via the account settings page on our www.panooro.com website.
- Right to Erasure (“Right to be Forgotten”): You have the right to request that we securely delete your personal data from our systems, under circumstances including when the data is no longer necessary for the original purposes we collected it for, when you have withdrawn your consent to the processing and there is no other valid legal ground for us to retain the data, or when you object to the processing and there are no overriding legitimate grounds to continue the processing. Please note that we may not be able to delete certain data that we are legally obligated to retain for tax, accounting or regulatory compliance purposes.
- Right to Restriction of Processing: You have the right to request that we temporarily restrict the processing of your personal data, under circumstances including when you contest the accuracy of the data (to allow us time to verify its accuracy), when the processing is unlawful but you do not want us to delete the data, when we no longer need the data for our original processing purposes but you require the data to establish, exercise or defend legal claims, or when you have objected to our processing based on legitimate interests, during the period while we verify whether our legitimate grounds override your rights.
- Right to Data Portability: You have the right to receive all the personal data you have provided to us, in a structured, commonly used, machine-readable format, and you have the right to request that we transmit this data directly to another data controller of your choice, where this is technically feasible.
- Right to Object: You have the right to object at any time to any processing of your personal data that is based on our legitimate interests, including profiling activities that we carry out based on legitimate interests. If you submit an objection, we will stop processing your personal data immediately, unless we can demonstrate compelling legitimate grounds for the processing that override your privacy rights, or the processing is necessary for the establishment, exercise or defence of legal claims. You also have the absolute right to object at any time to the processing of your personal data for direct marketing purposes, and we will immediately stop sending you all marketing communications once you submit such an objection.
- Right to Withdraw Consent: For any processing activity that you previously gave us consent to carry out, you have the full right to withdraw that consent at any time. The withdrawal of consent will not affect the lawfulness of any processing we completed before your withdrawal request.
- Right to Lodge a Complaint: If you believe that our processing of your personal data violates applicable data protection regulations, and you are not satisfied with the response we provide to your privacy related request, you have the right to lodge a formal complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), which is the competent supervisory authority for data protection matters in Spain.
9. Security Measures for Your Personal Data
EL PAÑO DE ORO SL implements industry-standard, state-of-the-art technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, destruction, disclosure or misuse. These security measures include: end-to-end 256-bit SSL encryption for all data transmitted between your browser and our website servers, encrypted storage for all sensitive personal information including payment details and contact addresses, regular periodic security audits and vulnerability assessments of our IT systems, role-based access control policies that restrict access to your personal data only to authorized employees who need to access the information to perform their job duties, regular cybersecurity training for all our staff who handle user personal data, automated backup systems that store encrypted copies of our data in geographically separated secure locations, and strict incident response protocols that we activate immediately in the unlikely event of a personal data breach. In the event that we detect a personal data breach that is likely to pose a high risk to your rights and freedoms, we will notify you and the relevant competent supervisory authority of the breach in full compliance with the 72-hour notification requirement set out in the GDPR.
10. Minors’ Privacy
Our www.panooro.com e-commerce website is not intended for use by individuals under the age of 16, and we do not knowingly collect any personal information from children under the age of 16. If you are a parent or legal guardian and you become aware that your child under 16 has submitted personal data to our platform without your appropriate consent, please contact us immediately via email at lumis@panooro.com. We will take immediate steps to securely delete all relevant personal information from our servers, and we will ensure no further processing of that data takes place.
11. Third Party Links
The www.panooro.com website may contain hyperlinks to external third party websites, including social media platforms, partner brand websites, and other related resources that are not operated or controlled by EL PAÑO DE ORO SL. We do not have any control over the privacy policies, data handling practices or content of these external third party websites. This privacy policy only applies to the personal data processing activities conducted by our own platform, so we strongly recommend that you review the full privacy policy of every external website you visit after leaving our e-commerce site, before you provide any of your personal information to those platforms. We do not take any responsibility or liability for the personal data processing practices of any third party websites.
12. Updates to This Privacy Policy
We may occasionally update and modify this privacy policy to reflect changes in our business operations, new regulatory requirements, or improvements to our data processing practices. When we make any material changes to this policy, we will update the “Effective Date” at the top of this page, and we will publish a prominent notification on the homepage of www.panooro.com to inform you of the upcoming changes at least 15 days before the new revised policy comes into effect. We will also send a notification email to your registered user email address, if you have an active account on our platform. Your continued use of our e-commerce website after the effective date of the revised privacy policy will constitute your acknowledgement and acceptance of the updated terms.
13. Contact Information
If you have any questions, comments, concerns, or requests related to this privacy policy or our personal data processing practices, you can contact us at any time using the following details:
- Company name: EL PAÑO DE ORO SL
- Email address: lumis@panooro.com
- Telephone number: +34 966 673 902
- Postal address: Calle Olegario Domarco Seller 120, 3, 03206 Elche, Alicante, Spain
