Privacy policy
This policy explains how we process the personal data of the people who visit this website, contact us, apply for a trade account or buy from us, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Data controller
- Company
- MAISON SIMA S.L.
- Tax ID
- ESB56472947
- Registered office
- Calle Palo, 15, 45710 Madridejos (Toledo), Spain
- contact (at) simonemarcel.com
- Phone
- +34 925 30 84 77
- Commercial Registry
- Commercial Registry of Toledo, volume 1771, folio 23, section 8, sheet TO-46427.
What data we process and why
- Contact form: your name, email, phone, company and message, to answer your enquiry. Legal basis: your request and our legitimate interest in answering it (art. 6.1.b and 6.1.f GDPR).
- Trade account application: company details, VAT or resale number, the documents you upload and the contact person's details, to check that you are a professional and to open your account. Legal basis: pre-contractual measures taken at your request (art. 6.1.b GDPR).
- Customers: identification, contact, delivery and billing data and order history, to manage the portal account, orders, payments, deliveries, guarantees and invoices. Legal basis: performance of the contract and our tax and commercial obligations (art. 6.1.b and 6.1.c GDPR).
- Information about our products: if you are a customer, we may send you information about products similar to those you have bought. You can object at any time, free of charge, with the link in each message or by writing to us. Legal basis: legitimate interest (art. 21.2 LSSI and art. 6.1.f GDPR).
- Website security and cookies: technical data needed for the website to work and to protect it, and optional cookies only with your consent. See our cookie policy.
The fields marked with an asterisk in our forms are required: without them we cannot handle your request. We do not make decisions based solely on automated processing or create profiles.
How long we keep your data
- Enquiries: until they are resolved and, at most, one year afterwards.
- Trade applications that are not approved: one year, then deleted together with the documents.
- Customers: while the commercial relationship lasts and, afterwards, for the periods required by law (six years for accounting records and invoices under article 30 of the Spanish Commercial Code).
Who we share your data with
We do not sell your data. We only share it with the service providers we need to run our business, which process it on our behalf under a data processing agreement, and with the authorities when the law requires it:
- Odoo S.A. (Belgium): website, online shop and management software.
- Microsoft Ireland Operations Ltd.: email.
- Banks and payment providers: to process payments. Card details are entered directly on the payment provider's secure page and never reach us.
- Carriers and shipping platforms: name, address and phone of the delivery, to deliver your order.
- Our tax and accounting advisers, and the tax and customs authorities.
- Simone & Marcel Corp. (United States), our related company, for orders delivered in the United States.
Some of these recipients may process data outside the European Economic Area (for example carriers for international shipments or our company in the United States). In that case the transfer is based on an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework), on standard contractual clauses, or on being necessary to perform your order (art. 45, 46 and 49.1.b GDPR).
Your rights
You can ask for access to your data, its rectification or erasure, the restriction of its processing, its portability, and object to its processing, as well as withdraw your consent at any time. Write to the email address above, indicating the right you wish to exercise. We will answer within one month.
If you think we have not processed your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the data protection authority of your country.
Security and minors
We apply technical and organisational measures to protect your data, such as encrypted connections, access limited to the staff who need it and backups. This website is not intended for people under 14, and we do not knowingly collect their data.
Last updated: 3 October 2026.