In compliance with Regulation (EU) 2016/679, the General Data Protection Regulation —hereinafter, the “GDPR”—, and Spanish Organic Law 3/2018 on Personal Data Protection and the guarantee of digital rights —hereinafter, “LOPDGDD”—, users of this website are informed about the processing of their personal data.
1. Data Controller
The data controller is:
Manufacturas Tomás, S.A.U
Registered address: Calle Budapest, 19-29, Polígono Industrial Cabezo Beaza, 30353 Cartagena, Murcia, Spain.
Contact email: info@mthelmets.com
Telephone: +34 968 16 69 91
Hereinafter, “MT Helmets”, “the company” or “the controller”.
2. Personal data we process
MT Helmets may process the personal data provided by the user through the forms available on the website, including, among others:
- Name and surname.
- Email address.
- Telephone number, where requested in a form.
- Country, language or communication preferences.
- Data related to enquiries, requests or communications submitted by the user.
- Browsing data, online identifiers and cookies, under the terms set out in the Cookie Policy.
Each form will indicate which data are mandatory in order to manage the corresponding request. Failure to provide mandatory data may prevent the processing of the request or the registration for the requested service.
3. Purposes of processing
The personal data provided by the user may be processed for the following purposes:
a) Management of enquiries and requests
We will process personal data to respond to enquiries, information requests, commercial requests, incidents or any communication sent through the contact forms or channels enabled on the website.
b) Management of newsletter subscription
When expressly requested by the user, we will process their email address and, where applicable, other data provided, to manage their subscription to the MT Helmets newsletter.
This purpose includes the sending of informative and commercial communications about products, news, promotions, campaigns, events, content, launches and news related to MT Helmets.
c) Sending of commercial communications
If the user gives their consent, MT Helmets may send commercial communications by electronic means, including email or equivalent channels, about products, services, promotions, news and content related to the brand.
The sending of commercial communications by electronic means requires that they have been requested or previously authorised, except in cases legally permitted by applicable regulations.
d) Management of purchases, orders or business relationships
If the website allows purchases, product requests, warranty management, incidents or after-sales services, we will process the data necessary to manage these operations and comply with the corresponding contractual and legal obligations.
e) Compliance with legal obligations
MT Helmets may process personal data to comply with legal, tax, accounting, administrative, consumer protection, data protection, e-commerce or other applicable obligations.
f) Analysis and improvement of the website
We may process technical or browsing data to analyse the use of the website, improve its operation, ensure its security and optimise the user experience, in accordance with the Cookie Policy and the preferences configured by the user.
4. Legal basis for processing
The legal bases that legitimise the processing of personal data are as follows:
a) User consent
Consent shall be the legal basis for:
- Subscription to the newsletter.
- The sending of commercial communications where no other applicable legal basis exists.
- The installation of non-technical cookies, where applicable.
- Any other processing for which the user’s consent is expressly requested.
The user may withdraw their consent at any time, without affecting the lawfulness of processing carried out prior to such withdrawal.
b) Performance of a contractual or pre-contractual relationship
When the user makes a purchase, requests commercial information, processes a warranty, requests support or maintains a contractual relationship with MT Helmets, the processing may be necessary to manage such relationship.
c) Compliance with legal obligations
MT Helmets may process personal data when necessary to comply with applicable legal obligations.
d) Legitimate interest
MT Helmets may process certain data on the basis of its legitimate interest, for example, to maintain the security of the website, prevent abuse or manage communications with existing customers within the legally permitted limits.
Where there is a prior contractual relationship, MT Helmets may send commercial communications about its own products or services similar to those previously contracted, provided that the user has not objected and is offered the possibility to unsubscribe in each communication, in accordance with applicable regulations.
5. Commercial communications and newsletter
The user will only receive newsletters or commercial communications if they have given their express consent by ticking the corresponding box, or if another legal basis allows it.
The newsletter subscription box will not be pre-ticked and will be independent from the acceptance of the Privacy Policy or other legal terms.
Each commercial communication sent by MT Helmets will include a free, simple and visible mechanism allowing the user to unsubscribe or withdraw their consent at any time.
MT Helmets will keep evidence of the consent given, including, where possible, the date and time of subscription, email address, IP address, form used, legal text accepted and version of the applicable policy.
6. Data retention period
Personal data will be retained for as long as necessary to fulfil the purpose for which they were collected.
In particular:
- Data processed to respond to enquiries will be retained for the time necessary to manage the request and, subsequently, for the applicable legal periods.
- Data processed to manage the newsletter will be retained while the user keeps their subscription active or until they withdraw their consent.
- Data related to purchases, orders, invoicing, warranties or contractual relationships will be retained for the time necessary to manage the relationship and comply with the corresponding legal obligations.
- Data processed on the basis of legal obligations will be retained for the periods required by applicable regulations.
- Once the purposes have been fulfilled, the data may remain blocked for the periods necessary to address possible legal liabilities.
7. Data recipients
As a general rule, MT Helmets will not disclose the user’s personal data to third parties, unless required by law or where necessary to manage the relationship requested by the user.
However, in order to provide certain services, MT Helmets may use providers that process personal data on behalf of the company, such as:
- Web hosting providers.
- Email marketing or newsletter sending platforms.
- Technology service providers.
- Transport or courier companies, where necessary to manage orders.
- Support, maintenance, analytics or security providers.
- Advisors, financial institutions, public administrations or other third parties where there is a legal obligation or where necessary for the provision of the service.
These providers shall act as data processors where applicable and shall process the data following MT Helmets’ instructions.
8. International data transfers
If MT Helmets uses providers located outside the European Economic Area, or providers that may deliver services from third countries, appropriate safeguards will be adopted in accordance with the GDPR, including, where applicable, the signing of standard contractual clauses approved by the European Commission or other legally established mechanisms.
In particular, if email marketing, analytics, hosting or technology service platforms located outside the European Union are used, the user may obtain further information by requesting it at info@mthelmets.com.
9. User rights
The user may exercise the following rights recognised by data protection regulations at any time:
- Right of access to their personal data.
- Right to rectification of inaccurate or incomplete data.
- Right to erasure of their data.
- Right to object to processing.
- Right to request restriction of processing.
- Right to data portability.
- Right to withdraw consent at any time.
To exercise these rights, the user may send a request to:
Or by postal mail to:
Manufacturas Tomás, S.A.
Calle Budapest, 19-29
Polígono Industrial Cabezo Beaza
30353 Cartagena, Murcia, Spain
The request must clearly indicate the right the user wishes to exercise. Where necessary, MT Helmets may request additional information to verify the identity of the applicant.
The user also has the right to lodge a complaint with the Spanish Data Protection Agency if they consider that the processing of their personal data does not comply with current regulations:
10. Data security
MT Helmets will apply appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, disclosure or destruction.
However, the user should bear in mind that no electronic transmission or storage system is completely secure. Therefore, MT Helmets cannot guarantee the absolute security of information transmitted over the Internet.
11. Minors
The forms on this website are not intended for children under 14 years of age.
Any user who provides personal data declares that they are over 14 years of age. If MT Helmets detects that it has received personal data from a minor without the legally required authorisation, it will take appropriate measures to delete such data.
If a higher age is required for certain services, promotions or commercial actions, this will be expressly indicated in the corresponding terms and conditions.
12. Cookies
The website may use cookies and similar technologies to enable its operation, analyse browsing, personalise content or display tailored communications, where applicable.
The user can obtain detailed information about the use of cookies, their purposes, configuration and withdrawal of consent in the Cookie Policy.
13. Changes to the Privacy Policy
MT Helmets may modify this Privacy Policy when necessary to adapt it to legislative changes, criteria of the Spanish Data Protection Agency, technical changes, changes in the processing carried out or changes in the company’s activity.
Where changes are relevant, the user will be informed through appropriate means.
Last updated: 05/2026