Nidec Privacy Policy
Last reviewed: 22 October 2026
This policy explains who processes your personal data, what they use it for, who they may share it with and how to exercise your rights when you use Nidec's website or customer service channels.
1 Scope of this policy
This policy explains how Nidec processes personal data relating to www.nidec.es, enquiries received through its customer service channels, user accounts, and purchases, deliveries, returns and complaints concerning the online store. It applies to customers and any other individuals whose data is necessary for these activities.
Reading this policy, browsing the website or accepting the terms of purchase does not amount to consent to marketing or other optional processing. Each processing activity requires its own legal basis; where your consent is necessary, it will be requested in a specific and informed manner.
2 Data controller and contact details
The data controller is NIDEC, S.L.U., with tax identification number (NIF) B61293841 and address at Travessera de Can Pàmies 11 nave 13, 08470 Sant Celoni (Barcelona), hereinafter Nidec.
For privacy matters and to exercise your rights, you can write to administracion@nidec.es. For general assistance, you can use info@nidec.es or call 93 301 67 76.
For order issues and to provide additional information needed to manage your order, you can send a WhatsApp message to +34 678 56 26 26. This number accepts written messages only, not calls. You can also use email. To exercise your data protection rights, contact administracion@nidec.es or write to the address above.
3 What data is processed and where it comes from
The data comes mainly from the information you provide when making an enquiry, registering, purchasing, subscribing or reporting an issue: identification and contact details; login credentials; professional and company details; delivery and billing addresses; necessary tax details; products and order amounts; information on payment, delivery, returns and warranties; the content of your communications and relevant optional attachments; and subscription information, such as the date, IP address and subscribed or unsubscribed status.
For tax identification on invoices, the DNI or CIF number is collected where necessary, without requesting a photograph, PDF or other copy of the document for this purpose. Optional attachments to an enquiry or issue report must be limited to what is necessary to explain and resolve the enquiry.
The scope of the payment data Nidec receives depends on the payment method and payment service used. Do not send full bank details or sensitive information through text fields or attachments if they are not necessary to handle the matter.
The technical operation of the website may involve processing IP addresses, dates, access logs and browser or device information. Payment or delivery data may also come from the operators involved in the order. If you provide another person's data for a delivery or when acting as their representative, limit the information to what is necessary and inform them. Nidec will provide them with the required information about the source and processing of their data within the statutory time limits and, where applicable, at the first contact.
4 Required and optional data
Data marked as mandatory is necessary to handle the relevant matter. If you do not provide data needed to respond, create the account you have requested or process a purchase, it may not be possible to complete that activity. Optional data and attachments should only be provided if relevant.
Subscribing to marketing communications is optional and separate from purchasing and handling enquiries. Refusing marketing or non-essential cookies does not, in itself, prevent you from making a purchase.
5 What the data is used for and on what legal basis
Pre-purchase enquiries and orders. We use the data necessary to prepare a quotation you have requested, process the purchase and collect payment, coordinate delivery, send operational communications and manage returns, warranties and issues. Where you are a party to the contract, the basis is taking pre-contractual steps at your request or performing that contract —Article 6(1)(b) of the GDPR—, together with any applicable legal obligations. These activities do not require marketing consent.
User account. If you request an account, the necessary data is used to create it, allow access and manage the associated service, on the basis of the contractual relationship you have requested —Article 6(1)(b)—. Registration does not mean subscribing to marketing communications.
Professional contacts and representatives. If you act on behalf of a company or another entity, we use the data necessary to maintain the relationship with that entity on the basis of the legitimate interest in managing that relationship, under Article 6(1)(f) of the GDPR and, where applicable, Article 19 of Spain's Organic Law on Data Protection and the Guarantee of Digital Rights (LOPDGDD). Processing is limited to the data necessary to contact you in your professional capacity and your role or position, for the purpose of maintaining relations with the entity. This basis does not authorise indiscriminate marketing.
Order communications. To resolve issues or request additional information necessary to process an order, we may contact you by WhatsApp at the number you provided in your customer record, if that number has the service, or by email. These are order management communications, not marketing, and are based on the contractual or professional relationship described above, or on the relevant legal obligation. You can request email as an alternative. Nidec uses the WhatsApp Business mobile app and its linked desktop version. It does not use WhatsApp to send marketing.
General enquiries. Where an enquiry is not related to pre-contractual steps, a contract or compliance with a legal obligation, handling it will be based on the informed consent you give when requesting a response —Article 6(1)(a)—. That consent is limited to handling your enquiry, not sending you promotions. You may withdraw it, although doing so may prevent us from continuing an activity that depends exclusively on it.
Legal obligations. We process the information necessary for invoicing, accounting, tax compliance, responding to the exercise of rights and other applicable obligations —Article 6(1)(c)—. The rules applicable to the transaction determine which documents must be retained; this basis does not allow them to be used indiscriminately for other purposes.
Subscriptions and optional marketing. Subscriptions are managed through Mailchimp. As of the review date of this policy, no campaigns are being run; the subscriber database is retained for possible future authorised email communications. Retention and use for this purpose are based on express, separate consent, without pre-ticked boxes —Article 6(1)(a) of the GDPR—. Making a purchase or contacting us does not amount to giving that consent. You can withdraw it at administracion@nidec.es or through the unsubscribe mechanism in each communication, free of charge and without affecting your orders. Necessary notices about a purchase are not a marketing subscription. This subscription does not authorise marketing through WhatsApp.
Security and claims. Processing that is strictly necessary to protect the website against unauthorised access or fraudulent use, and to bring or defend claims, may be based on Nidec's legitimate interest in the security of the service and the defence of its rights —Article 6(1)(f)—, following an assessment of necessity, proportionality and individuals' rights. You may object under the conditions laid down by law. Where the purpose is compliance with a legal obligation, that basis will apply rather than a generic reliance on legitimate interest.
6 How long the data is retained
Enquiries: while they are being handled and until they are resolved; afterwards, only the information necessary to address liabilities or claims for as long as these may be pursued. Accounts: while the requested service is being provided; when an account is closed, data with no other continuing purpose will be deleted, without deleting purchase documents that must lawfully be retained.
Orders, invoices, returns and warranties: while they are being managed and for the retention or liability periods applicable to the transaction, taking into account commercial, tax and consumer protection obligations.
Subscriptions and marketing: for as long as you maintain your consent and the purpose for which it was obtained remains valid. A temporary absence of campaigns does not prevent you from requesting to unsubscribe. After withdrawal, the minimum information necessary to demonstrate consent and its withdrawal and prevent further communications may be retained for a period justified by the applicable obligations and liabilities, not indefinitely. Technical logs will be retained according to their operational or security purpose and the need to investigate specific incidents.
Once the purpose has ended, the data will be erased or, where legally appropriate, retained in a blocked state: not used in the ordinary course and made available only to those entitled to establish or enforce liability. At the end of those periods, it will be deleted. Backups do not justify extending retention indefinitely.
7 Who may receive the data
To manage purchases, the necessary data is disclosed to transport and delivery operators and to banks or payment providers. Web hosting, website maintenance, IT support, and accounting, tax or legal advisory providers may also access information to the extent necessary to provide their services. Their role determines whether they act on behalf of Nidec as processors or as controllers of their own operations; not all recipients have the same role.
Nidec uses Microsoft 365 for business email. Microsoft processes the data included in the service on behalf of Nidec under the terms of its data protection agreement. That agreement distinguishes certain processing for ancillary business operations, for which Microsoft acts as an independent controller.
The subscriber database is managed in Mailchimp, a service of The Rocket Science Group LLC in the United States. The information associated with subscriber records may include identification and contact details, company details, tax and address data, and subscription records such as the date and IP address. Its data processing agreement establishes its role as processor for data processed on behalf of Nidec and distinguishes processing for which Mailchimp acts as controller for its own purposes.
The WhatsApp Business service used in the European Economic Area is provided by WhatsApp Ireland Limited. Its terms provide for it to act as processor in respect of customer contact data processed to enable communication with the business. That role does not extend generally to all messages and metadata: WhatsApp also processes information relating to the account, use of the service, logs and support for its own purposes, in accordance with its terms and policies.
Where a provider acts on behalf of Nidec, its processing is subject to the data processor and confidentiality obligations required by law. Data will also be provided to public administrations, courts or other authorities where there is a legal obligation or a lawful request. Fulfilling an order and complying with these obligations are not conditional on generic consent to disclose data.
WhatsApp Business App Terms · WhatsApp Business Data Processing Terms
8 International transfers
Using Microsoft 365, Mailchimp and WhatsApp Business involves processing or access that may take place outside the European Economic Area. A provider or part of its infrastructure being located in Europe does not mean that all data remains exclusively within that territory. The public contractual frameworks for these services describe the following destinations and mechanisms.
Microsoft 365. Microsoft's data protection agreement provides for transfers to the United States and other countries where Microsoft and its subprocessors operate. It provides for the European Commission's 2021 standard contractual clauses and applicable adequacy mechanisms, including the EU–U.S. Data Privacy Framework for covered transfers. Commitments to locate data in Europe have a defined scope and exceptions; they do not mean that there are no international transfers.
Mailchimp. The Rocket Science Group LLC is established in the United States, and Mailchimp states that its servers are located in that country. Its agreement provides for the EU–U.S. Data Privacy Framework as the mechanism for receiving covered data and, where that framework does not apply or is no longer valid, for standard contractual clauses. Intuit's public listing includes Mailchimp.
WhatsApp Business. WhatsApp Ireland Limited's transfer addendum provides for transfers to WhatsApp LLC and Meta Platforms, Inc. in the United States, and onward transfers to subprocessors. It states that it relies on the EU–U.S. Data Privacy Framework for covered transfers to those entities and provides for alternative mechanisms recognised by the GDPR, such as the processor-to-processor standard contractual clauses, Module 3.
These mechanisms apply within the scope and on the conditions specified for each transfer, together with any necessary supplementary measures. You can consult the public texts linked in this section and request further information or a copy of the safeguards applicable to your data from administracion@nidec.es, subject to confidentiality and the rights of third parties.
Microsoft Data Protection Addendum · Microsoft Privacy and Security Terms · Transfers and safeguards in Mailchimp's agreement · Mailchimp information on the GDPR and its servers · Intuit and Mailchimp listing in the Data Privacy Framework · WhatsApp Business International Data Transfer Addendum
9 Cookies and similar technologies
The cookie policy contains specific information about these technologies, their purposes and the choices available. Cookies that are strictly necessary to provide the requested service are distinguished from those that require your prior consent. Merely browsing does not constitute consent to non-essential cookies.
For cookies that require consent, you have the right to accept them, reject them or choose the categories you authorise. If you have given your consent, you can withdraw it at any time and have the right to do so as easily as you gave it, without affecting the lawfulness of prior use. Your decision about non-essential cookies is independent of accepting the terms of purchase. Consult the cookie policy for the published information and management options.
10 Your rights and how to exercise them
You may request access to your data and information about its processing; rectification of inaccurate data; erasure where applicable; restriction in the cases provided for by law; and object to processing based on legitimate interest on grounds relating to your particular situation. An objection to direct marketing prevents continued use of your data for that purpose.
You may also request portability of the data you have provided where processing is based on consent or a contract and carried out by automated means, in a structured, commonly used and machine-readable format, and its direct transmission where technically feasible. Under the conditions set out in the GDPR, you have the right not to be subject to decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.
You can withdraw consent at any time, without affecting the lawfulness of previous processing or removing other lawful retention obligations. To exercise your rights, write to administracion@nidec.es or to Nidec, Travessera de Can Pàmies 11 nave 13, 08470 Sant Celoni (Barcelona), stating your request and how we can respond. You may act through a duly authorised representative. A copy of your DNI is not automatically required; proportionate additional information will only be requested if there are reasonable doubts about your identity.
Exercising your rights is free of charge, subject to the exceptions provided for by law for manifestly unfounded or excessive requests. We will respond without undue delay and, in any event, within one month of receipt. If the complexity or number of requests requires more time, this period may be extended by up to two further months; the extension and its reasons will be communicated within the first month. If a request is not acted upon, the reasons and avenues for complaint will be explained.
You may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) if you consider that the processing infringes the law. This right is not conditional on accepting this policy.
Spanish Data Protection Agency
11 Security and confidentiality
Data protection requires technical and organisational measures appropriate to the risk and the characteristics of each processing activity. There is no absolute guarantee of security. If a personal data breach occurs, Nidec will assess the risk and notify the supervisory authority and communicate with affected individuals in the cases and within the time limits required by law.
Protect your credentials and report any suspected unauthorised use. This recommendation does not transfer Nidec's security obligations or liability to users.
12 Third-party links and minors
Links to third-party services may lead to environments with their own terms and privacy policies. Review them before providing data. This policy describes Nidec's processing; processing carried out by those services as controllers is described in their own policies.
The store and its purchasing accounts are not directed at minors. The age of 14 provided for in Spain for consenting to certain data processing does not equate to legal capacity to purchase: you must be at least 18 to place orders, in accordance with the terms of contract. Where processing requires consent and the individual is under 14, the consent of the person with parental responsibility or guardianship will be required, subject to statutory exceptions. If inappropriate collection of minors' data is detected, appropriate measures will be taken to stop processing and erase the data, while respecting applicable obligations.
13 Changes and current version
This policy will be updated when processing activities or the law change. The review date appears at the beginning and, where appropriate, significant changes will be communicated by suitable means. Changes do not retroactively authorise new uses of the data: if a new purpose requires consent, it will be requested before processing. Merely publishing the changes or continuing to browse does not replace that consent.