Your data

Privacy policy

What we collect when you visit www.mft-dev.eu, write to us or order from the shop, why, how long we keep it, and how to exercise your rights.

Last updated: 11 November 2026MFT DEV, S.L. · Andorra la Vella

At a glance

Never sold
We never sell or rent your data. We use it to answer you, process your orders and improve the website.
Cookies: your choice
Analytics and advertising only with your consent. Change your mind at any time with “Manage cookies”.
Protected payment
Card payments are made on our bank’s secure page: we never see your card number.
Your rights in one e-mail
Access, rectification, erasure, objection… Write to contact@mft-dev.eu: we answer within one month at most.

01Who is responsible for your data?

The data controller is MFT DEV, S.L., a company incorporated under Andorran law that publishes www.mft-dev.eu and its shop.

Address: Carrer Callaueta, 7, 1r 1a, AD500 Andorra la Vella, Principality of Andorra
NRT (tax number): L-719990-R
E-mail: contact@mft-dev.eu
Phone: +376 629 190

For any question about your data, write to us with the subject “Personal data”.

02Legal framework

MFT Dev is established in Andorra. We apply Andorran Law 29/2021 of 28 October on the protection of personal data (LQPD), supervised by the Andorran Data Protection Agency (APDA). This law follows the principles of the European regulation (GDPR), which we also respect for our customers in the European Union.

The European Commission recognises that Andorra ensures an adequate level of protection of personal data (Decision 2010/625/EU): your data moves between the European Union and Andorra just as it does within the Union.

03What we collect, and why

We only collect what is useful in each situation. Required fields are marked in the forms.

Situation	Data	Why	Legal basis
Order in the shop	Name, company, tax number (NRT, VAT), billing and delivery addresses, e-mail, phone, products, amounts, serial number of your tools if an activation requires it	Prepare, ship and invoice the order, activate your licences, provide warranty and after-sales service	Performance of the contract; accounting and tax obligations
Customer account	Username, e-mail, password (encrypted), order history, courses purchased	Track your orders, find your invoices, access your online courses	Performance of the contract
Contact form, e-mail, phone, WhatsApp	Name, company, country, e-mail, phone, message and details given (tool, budget, serial number…)	Answer you, advise you and follow up on your request	Pre-contractual steps; legitimate interest in answering requests
Payment in instalments	Details of the company and its representative, identity document, company registration extract, balance sheet or tax return above €5,000 excl. VAT, schedule and payments	Assess the request, manage the payment schedule and reminders	Pre-contractual steps and performance of the contract; legal obligations
Browsing the website	Pages viewed, device, browser, language, origin of the visit (advertising, search engine), cookie identifiers	Measure traffic, improve the website, measure the performance of our advertising	Your consent (cookie banner); essential cookies: legitimate interest
Offers and news	Name, e-mail, phone, previous purchases	Tell you about our offers (Black Friday, new tools, training)	Legitimate interest for our customers, otherwise your consent; unsubscribe at any time from each message
Security	IP address, server logs, spam protection	Protect the website, accounts and payments against abuse and fraud	Legitimate interest

Files Service and Diag Expert platform: if you open a garage account on the MFT Dev platform, we also process your account, vehicle and file data to provide the service. The same principles apply: no resale, access limited to the team handling your requests, same rights.

04Cookies and analytics

Essential cookies (cart, login, language, remembering your choice) are always active. Analytics cookies (Google Analytics, WooCommerce and Jetpack statistics) and advertising cookies (Google Ads, Meta, TikTok) are only set with your consent, given or refused in the banner. Change your mind at any time: .

Before you consent, no analytics or advertising cookie is set and the Meta and TikTok pixels are not loaded. Google tags may send signals without cookies or identifiers (Google consent mode).

To measure sales coming from our advertising, the details of an order (products, amount) and your e-mail or phone number, turned into an irreversible fingerprint (hashing), may be sent to Google and Meta.

We keep proof of your choice (random identifier, date, choice, version, language, no IP address) for 13 months. Full list of cookies and their durations: cookie policy.

05Who receives your data?

We never sell or rent your data. It is only shared with the MFT Dev team and the providers who need it:

Recipient	Purpose	Country
DigitalOcean	Hosting of the website, the shop and the databases	US company
Our bank, via Redsys	Card payment: your card number is entered on their side, never on ours	Andorra, Spain
Carriers	Delivery of your orders (name, address, phone)	Depending on the destination
Tool manufacturers (Alientech and others)	Licence activation, updates and warranty: tool serial number and company name	Manufacturer’s country
Google (Analytics, Ads, Merchant Center)	Analytics and advertising with your consent; showing our products on Google	Ireland, United States
Meta (Facebook, Instagram, WhatsApp)	Advertising with your consent; conversations if you write to us on WhatsApp	Ireland, United States
TikTok	Advertising, with your consent	Ireland, outside the European Union
Automattic (WooCommerce, Jetpack)	Shop statistics, with your consent	United States
MFT Hub	Our customer management tool: requests, orders, payments in instalments	MFT Dev’s own tool
IT providers, accountant	E-mail, maintenance, accounting	Depending on the provider, with the safeguards below

We may also have to disclose data to the authorities (tax administration, courts) when the law requires it.

06Transfers outside Andorra and the European Union

Some providers (DigitalOcean, Google, Meta, TikTok, Automattic) are established in the United States or process data there. These transfers rely on an adequacy decision of the European Commission, recognised by Andorran law (article 43 of the LQPD), in particular the EU–US Data Privacy Framework for certified companies, or otherwise on the European Commission’s standard contractual clauses.

Information sent to a manufacturer established outside the European Union to activate a licence is limited to what is strictly necessary to fulfil your order.

07How long we keep your data

Data	Retention period
Orders and invoices	6 years from the end of the financial year (Andorran law on business accounting), longer in the event of a dispute
Customer account	As long as your account is open; you can ask us to close it at any time (invoices are kept for the legal period)
Contact requests	As long as needed to answer you and follow up; at most 3 years after our last exchange if you do not become a customer
Payment in instalments	Supporting documents deleted from the website 21 days after being sent to our management tool; deleted if the request is not approved; otherwise kept until the last payment, then for the legal period
Offers and news	Until you unsubscribe, and at most 3 years after your last purchase or contact
Cookie choice	Your choice: 6 months; proof of it: 13 months; each cookie: see the cookie policy
Analytics (Google Analytics)	14 months at most
Server logs	A few weeks, for security

08Your rights

At any time, you can:

AccessFind out what data we hold about you and get a copy.
RectificationHave inaccurate or incomplete data corrected.
ErasureHave your data deleted, except what the law requires us to keep (invoices).
RestrictionHave processing suspended while something is being checked.
ObjectionObject to processing based on our legitimate interest, and always to marketing.
PortabilityReceive the data you gave us in a common format, or have it sent to another provider.
Withdrawal of consentWithdraw a consent you gave (cookies, marketing), without affecting what was done before.
Human decisionNot be subject to a fully automated decision: we make none about you.

To exercise a right, write to contact@mft-dev.eu (subject “Personal data”) from the address linked to your account or order. If we have doubts about your identity, we may ask for proof. It is free, and we answer within one month at most (which may be extended by two months for a complex request; we will tell you if so).

If you believe your rights are not being respected, you can lodge a complaint with the Andorran Data Protection Agency (www.apda.ad, C/ Doctor Vilanova, 15-17, planta -5, AD500 Andorra la Vella) or with the data protection authority of your country of residence in the European Union.

09Security

Website and payments over HTTPS; your card number is entered on the bank’s page, never on ours.
Encrypted passwords, restricted and protected administration access.
Documents for payment-in-instalments requests stored out of public reach, sent through signed, time-limited links, then deleted from the website.
Security updates applied, backup before every website update.
If a data breach presents a risk, we notify the APDA within 72 hours and, if the risk is high, the people concerned.

10Other points

Minors: our products and services are intended for professionals and adults; we do not knowingly collect data about minors.
Links to other websites: the websites and social networks we link to (manufacturers, Facebook, Instagram, LinkedIn, WhatsApp) apply their own rules.
Google reviews: the rating shown on the website is read from our Google Business Profile; no visitor data is sent for this.
Changes: we update this policy when our services change; the date at the top of the page shows it. In the event of an important change, we will let you know (banner or e-mail).