Privacy Policy

1. Data Controller

Invermae Solutions, S.L. (hereinafter, «SecondLife Hardware») is the entity responsible for processing personal data collected through this website.

• Legal name: Invermae Solutions, S.L.
• VAT ID: ESB85940211
• Registered address: Calle Zurbano 45, 1ª Planta, 28010 Madrid, Spain
• Contact email: info@secondlifehardware.com

2. Legal framework

This processing is governed by:

• EU Regulation 2016/679 — GDPR
• Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD)
• Spanish Information Society Services Act (LSSI-CE)

3. Data we process and purposes

3.1 Customer accounts and orders

Data: first/last name, email, phone, address, VAT/Tax ID, company info, hashed password, order history.

Purpose: contractual relationship management, order processing, invoicing, after-sales support and tax obligations.

Legal basis: contract performance (Art. 6.1.b GDPR) and legal obligation for tax recordkeeping (Art. 6.1.c).

3.2 Quote requests and contact form

Data: name, email, company, phone, message.

Purpose: respond to the inquiry and, if applicable, formalise a commercial proposal.

Legal basis: consent (Art. 6.1.a) or pre-contractual measures (Art. 6.1.b).

3.3 Newsletter

Data: email.

Purpose: sector news, stock offers and technical updates. We use double opt-in: a confirmation email is sent before adding you to the list.

Legal basis: explicit consent (Art. 6.1.a). You can unsubscribe with one click from any email received.

3.4 Intra-EU VAT validation (VIES)

Data: VAT number, company name.

Purpose: verify registration with the EU VIES service to apply the correct VAT exemption.

Legal basis: legal obligation (Art. 6.1.c).

3.5 Technical logs and analytics

Data: IP address, user-agent, referrer, page views, session.

Purpose: service security, fraud prevention, aggregate usage analysis.

Legal basis: legitimate interest (Art. 6.1.f) limited to the minimum necessary to operate the site.

4. Retention period

• Accounting and invoicing data: 6 years (Spanish Tax General Law, Commercial Code).
• Customer accounts: while active plus 3 years from the last activity.
• Newsletter: until you unsubscribe.
• Technical and search logs: 12 months.
• Contact/quote requests: 3 years if no contractual relationship is formed.

5. Processors

We share data only with the providers strictly required to deliver the service, all under data processing agreements (Art. 28 GDPR):

• Payment gateways: Redsys (BBVA), Stripe, PayPal — for payment processing. We never store card numbers.
• Hosting: EU-based cPanel provider.
• Transactional email: EU-based SMTP provider.
• VIES: EU Commission public service for intra-EU VAT validation.
• Shipping: courier company for order delivery.

6. International transfers

Stripe and PayPal may process data outside the EEA under EU Commission Standard Contractual Clauses. Any other transfer will be performed with adequate safeguards and documented in this section.

7. Your rights

You can exercise the following rights at any time by emailing info@secondlifehardware.com with a copy of your ID:

• Access, rectification, erasure.
• Restriction of and objection to processing.
• Data portability.
• Withdrawal of consent at any time (no retroactive effect).
• File a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider the processing does not comply with regulations.

8. Cookies

For detailed information about cookies and similar technologies, see our Cookie Policy.

9. Security

We apply appropriate technical and organisational measures: TLS 1.3 encryption on all connections, passwords stored with bcrypt hashing, network segregation, role-based access control, encrypted backups, activity logging. Payment gateways are PCI-DSS Level 1 compliant.

10. Changes to this policy

We reserve the right to update this policy to reflect legal or operational changes. Previous versions are available on request. Substantial changes are notified to registered users by email.