In compliance with the current regulations on the protection of personal data according to Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, regarding the protection of individuals with regard to the processing of personal data and the free circulation of such data (GDPR), KM ZERO WATER, S.L., with registered office at (08018 – Barcelona, Calle Joan d’Austria, number 126, floor 3, door 1, hereinafter referred to as (KM ZERO), hereby clearly informs about how data of individuals who contact our Organization are collected, used, and safeguarded:

  • Data Controller
  • Purposes of Data Processing
  • Duration of Data Processing
  • Legal Basis for Data Processing
  • Data Disclosure Your Rights
  • Third-party Data


KM ZERO WATER, SL VAT: B-66.713.363 Calle Joan d’Àustria, No. 126, Floor 3, Door 1, Barcelona (08018) Email:


At KM ZERO, data processing is carried out for the following purposes, depending on the reason for which the data has been provided to us:

1st – Provision of services and/or sale of products. 2nd – Manage and control the customer and supplier portfolio. 3rd – Contact the sender of the information, respond to their request, inquiry, or consultation, or for general information purposes.


Data for the management of services, inquiries, and requests will be kept for the time necessary to respond to them. After the relationship ends, the data may be kept for the time required by applicable legislation and for a maximum of (10) ten years depending on anti-money laundering legislation.

Data for the management of the customer relationship and invoicing and collection of services and/or products will be kept for as long as the contract is in force. After the relationship ends, the data may be kept for the time required by applicable legislation, until the potential responsibilities arising from the contract expire, and for a maximum of (10) ten years depending on anti-money laundering legislation.


The legal basis for processing your data for the purposes set forth in this document is the execution of the corresponding service provision contract and/or sale of products.


Data will not be transferred to third parties, except as required by legal or administrative obligations, or when necessary to provide the services or sell the products under our service provision and/or product sales relationship.


Any individual who provides their data has the following rights:

Any person has the right to obtain confirmation as to whether we are processing their personal data, and they have the right to ACCESS their personal data, as well as request the RECTIFICATION of inaccurate data or, where appropriate, request their DELETION when the data is no longer necessary for the purposes for which it was collected.

Under the conditions of the General Data Protection Regulation, data subjects may request the LIMITATION of the processing of their data or their PORTABILITY (sending to a designated recipient), in which case we will only retain the data for the exercise or defense of claims.

In certain circumstances and for reasons related to their particular situation, data subjects may OBJECT to the processing of their data. If you have given consent for a specific purpose, you have the right to withdraw it at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal. In such cases, we will cease processing the data for the specific purpose, unless there are compelling legitimate grounds or for the exercise or defense of potential claims.

The aforementioned rights may be exercised through the contact information provided in the “Data Controller” section of this Privacy Policy.

In the event of any violation of your rights, especially if you have not obtained satisfaction in their exercise, you may file a complaint with the Spanish Data Protection Agency (accessible data at or another competent supervisory authority.


Regarding any data of third parties that you provide to us, you assume the responsibility to inform them in advance of everything provided for in the General Data Protection Regulation under the conditions established for this purpose.