This privacy policy governs the processing of the personal data that users provide through the VANTAG website, in compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD).
The controller is not required to appoint a Data Protection Officer (DPO) under Article 37 of the GDPR, as none of the circumstances requiring it apply.
Data we process and purpose
We process the personal data that the user voluntarily provides through the website's contact form, for the following purposes:
- Handling enquiries and contact requests. Data processed: name, email address and the content of the message. The purpose is to respond to the communication initiated by the user.
- Statistical analysis of browsing. We use a web analytics tool hosted on our own servers (Umami), which collects usage data in an aggregated and anonymous form, without installing cookies or allowing individual identification of the user. The purpose is to understand the performance and use of the website.
Legal basis for processing
- Handling enquiries: the user's consent when submitting the contact form (Article 6.1.a of the GDPR). If the enquiry leads to a contractual relationship, the basis shall be the performance of that contract (Article 6.1.b of the GDPR).
- Web analytics: the controller's legitimate interest in understanding the use of the site and improving it (Article 6.1.f of the GDPR), processing anonymous data that does not allow users to be identified.
Retention periods
The data provided through the contact form will be kept for as long as necessary to handle the enquiry and, where applicable, for as long as the resulting relationship is maintained. Once concluded, the data will be kept blocked for the legally required periods to address any potential liabilities, after which it will be deleted. Aggregated statistical data, being anonymous, is not subject to a specific retention period.
Recipients of the data
Data will not be transferred to third parties, except where legally required. The data may be processed by service providers acting as processors (for example, the website's hosting provider), with whom the corresponding processing agreements have been signed in accordance with Article 28 of the GDPR.
International transfers
No international data transfers are made outside the European Economic Area. Should a provider involving such transfers be used in the future, users will be informed and the safeguards required by the GDPR will be adopted.
User rights
The user may exercise the following rights at any time:
- Access to their personal data.
- Rectification of inaccurate data.
- Erasure of the data when it is no longer necessary.
- Restriction of processing in certain circumstances.
- Objection to processing.
- Data portability.
- Withdrawal of the consent given, without this affecting the lawfulness of prior processing.
To exercise these rights, the user may send a communication to hq@vantag.es, indicating the right they wish to exercise. The controller will handle the request within the periods established by the applicable regulations.
Complaint to the supervisory authority
If the user considers that the processing of their data does not comply with the regulations, they have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), located at C/ Jorge Juan, 6, 28001, Madrid, and website www.aepd.es.
Security and accuracy of the data
The controller applies appropriate technical and organisational measures to guarantee the security of personal data and prevent its alteration, loss, unauthorised processing or access. The user guarantees that the data provided is truthful and undertakes to communicate any changes to it.
Cookies
The use of cookies and similar technologies is detailed in the Cookies policy.