Privacy Policy

Vittablue Innovation SL

© 2021 SIGPAC® - Gen. 10-02-2026 for Vittablue Innovación SL

---

The Privacy Policy forms part of the Legal Notice that governs the Website: https://www.vittablue.com/ together with the Cookie Policy.

The website https://www.vittablue.com/ is owned by Vittablue Innovación SL and complies with the requirements derived from Law 34/2002, of July 11, on Information Society Services and Electronic Commerce, and current regulations relating to the protection of personal data and, in particular, Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and Organic Law 3/2018, of December 5, on the Protection of Personal Data and the guarantee of digital rights.

Vittablue Innovación SL reserves the right to modify or adapt this Privacy Policy at any time. Therefore, we recommend that you review it each time you access the Website. If a user has registered on the website and accesses their account or profile, they will be notified upon accessing it if there have been substantial modifications regarding the processing of their personal data.

---

Download the official document

📄 You can view and download the official PDF version here:

Open Privacy Policy (PDF)

---

Who is RESPONSIBLE FOR THE PROCESSING?

The data collected or voluntarily provided to us through the Website, whether through browsing, or any data you may provide in contact forms, via email or by telephone, will be collected and processed by the Data Controller, whose details are indicated below:

If, for any reason, you wish to contact us regarding any matter related to the processing of your personal data or privacy (with our Data Protection Officer), you can do so through any of the means indicated above.

---

When, why, who, how, for what purpose and for how long do we process your personal data?

When and why?

You can browse most of our web pages without providing any personal information, but in some cases this information is necessary to provide you with the electronic services you request from us.

If we need to collect personal data to provide you with the service, we will process the information according to the policy set out in this document and in the specific conditions of the particular service in question (if any), which contain specific privacy statements about the use of the data and inform you of why, for what purpose, how, for how long we process your personal data and what security measures we implement.

Who collects your data?

The collection and processing of personal data that you may provide to us is carried out by our entity or, where applicable, its data processors.

In relation to the latter case, these processors are third parties who are contractually required to ensure that their activity respects the law and implements appropriate security measures to protect said data.

So that?

The personal data that we request from you, or that you provide to us as a result of your browsing, is used to manage, provide and improve the services you have requested from us.

For example, we will process your personal data in order to manage the queries you send us, to manage your participation in personnel selection processes, to send you electronic communications if you request them, and, where applicable, to compile statistics.

Therefore, we ask for your email address when you use our contact forms on the website. We only collect the sender's personal data necessary to respond to you.

When you subscribe to our newsletters, we also ask for your email address in order to provide you with the service; in any case, you can unsubscribe from the service whenever you wish, and we provide you with the means to do so.

How do we process your data?

We collect personal information only to the extent necessary to achieve a specific purpose. The information will not be used for a purpose incompatible with the one described.

We only disclose information to third parties if it is necessary for the purpose of providing the service, and only to those who need to know it. This is all done so that we can provide the service while treating your personal data with confidentiality and discretion, in accordance with current legislation.

In any case, our organization adopts security measures to protect data against possible misuse or unauthorized access, alteration or loss.

How long do we keep your data?

We only store data for as long as necessary to fulfill the purpose for which it was collected or subsequently processed. The data retention period will depend on the service, and each service will specify the duration of personal data processing.

At the end of this document we provide you with a table with the specific conservation periods.

---

For what purposes will we process your personal data?

- Customers:
We process your personal data for the purposes of (1) managing your purchase or service; (2) maintaining the contractual and pre-contractual relationship for invoicing, preparing quotes, and following up on them, as well as sending you information electronically regarding your request; (3) sending you commercial information electronically that may be of interest to you, provided you have given your express consent; (4) creating a commercial profile based on the information you provide in order to offer you products and services tailored to your interests. No automated decisions will be made based on this profile.

- Suppliers:
We process your personal data for the purpose of (1) billing, (2) maintaining business contact, and, where applicable, (3) sending you information by electronic means about our products or services.

- Website and/or email contacts:
We process your personal data for the purposes of (1) answering your inquiries and requests; (2) managing the requested service or processing your order; (3) sending you commercial information by electronic means that may be of interest to you, provided you have given your express consent; (4) we may create a commercial profile based on the information you provide us in order to offer you products and services tailored to your interests. No automated decisions will be made based on this profile.

- Social media contacts:
We process your personal data for the purpose of (1) answering your queries and requests, (2) managing the requested service, responding to your request or processing your order and (3) interacting with you and creating a community of followers.

- Website users:
By browsing our website, we collect information about your browser, your device, and your website usage data, as well as any information you provide while using our website. In anonymized or aggregated form, we may record your IP address (the device's Internet access identification number, which allows devices, systems, and servers to recognize and communicate with each other).

The purpose of the processing is (1) to gain practical knowledge about how users use our website to help us improve it; (2) to perform statistical analysis to help us improve our business strategy; (3) to perform website performance analytics; and (4) for technical security and system diagnostics.

The data we obtain is not related to a specific user and will be stored in our databases.

The aforementioned data, as well as any personal data you may provide, are stored using cookies that are collected in a pseudonymized format and are subject to objection to the processing of this personal data, as detailed in the Cookie Policy.

You can consult the Cookies Policy in the corresponding section.

Your browsing information may be stored using Google Analytics, so we refer you to Google's Privacy Policy, as they collect and process this information.

Similarly, our website may utilize Google Maps, which could access your location, if you grant permission, to provide you with more specific information about the distance and/or routes to our offices. In this regard, please refer to Google Maps' privacy policy to understand how this data is used and processed.

In order to offer information or services of interest based on the User's location, we may access data relating to the geolocation of the User's device in those cases where the user's configuration for this purpose allows it.

The Portal may offer features for sharing content through third-party applications, such as Facebook, Instagram, or Twitter. These applications may collect and process information related to the user's browsing activity on different websites. Any personal information collected through these applications may be used by other users of those applications. Your interactions with them are subject to the privacy policies of the companies that provide the applications.

The Portal may host blogs, forums, and other social networking applications or services to facilitate the exchange of knowledge and content. Any personal information provided by the user may be shared with other users of that service, over whom we have no control.

---

What is the LEGAL BASIS for processing your data?

- Customers:
The legal basis for processing your data is (1) the execution of a contract and maintenance of the contractual relationship and (2) your consent, which is requested for the sending of offers of products and services through electronic means, without the withdrawal of this consent in any case conditioning the execution of the contract.

- Suppliers:
The legal basis for processing your data is the performance of a contract to which you are a party or for the application of pre-contractual measures.

- Website or email contacts:
The legal basis for processing your data is the consent of the interested party.

In those cases where to make a request it is necessary to complete a form and click on the "submit" button, doing so will necessarily imply that you have been informed and have expressly given your consent to the content of the clause attached to said form or acceptance of the privacy policy.

All our forms have a checkbox that must be ticked to access the services offered.

The purposes of the treatment will be the following:
a) To manage the queries or requests for information that you send us through the Website, email or telephone.
b) Sending communications, special offers, news, or information that may be of interest to you or that you request, including via electronic means. As this is a secondary purpose to the main one, you must tick the box provided for this purpose.

The personal data you provide through this means will not be communicated to third parties, with Vittablue Innovación SL directly responding to these types of inquiries.

- Social media contacts:
The legal basis for processing your data is the acceptance of the contractual relationship with the corresponding social network provider, expressed when registering on its application and in accordance with its privacy policies, which are external to us.

- Sending newsletters:
The website allows you to subscribe to the Vittablue Innovación SL newsletter. To do so, you need to provide us with an email address to which it will be sent.

Such information will be stored in a database of Vittablue Innovación SL in which it will remain registered until the interested party requests its removal or, where appropriate, Vittablue Innovación SL ceases sending it.

The legal basis for processing this personal data is the express consent given by all those interested parties who subscribe to this service by checking the box designated for this purpose.

Email data will only be processed and stored for the purpose of managing the sending of the newsletter to users who request it.

• Website users:
  The legal basis for processing the data is our (1) legitimate interest in understanding our users' browsing habits to adapt to their interests and improve our relationship with them; as well as (2) their consent when browsing our website and accepting the terms of use of cookies.

We also use the Meta Pixel (Facebook and Instagram) and similar technologies to analyze user behavior on our website and optimize our advertising campaigns.

This tool may collect information related to browsing, pages visited, products viewed, purchases made, and device technical data. Some of this information may be shared with Meta Platforms Ireland Ltd. for measurement, analysis, and personalized advertising purposes.

The processing of this data is based on the consent given through the cookie management system.

---

To which RECIPIENTS will your data be communicated?

Your data will not be shared with third parties unrelated to the service we provide, except where legally required. Specifically, it will be shared with the Spanish Tax Agency, banks, and financial institutions for the collection of payment for the service provided or product purchased.

Your data may also be shared with our service providers when necessary for the performance of the contract. In these cases, the data processor has contractually agreed to use the data only for the purpose that justifies the processing and to maintain appropriate security measures.

---

What SECURITY MEASURES do we apply?

You can rest assured, we have adopted appropriate technical and organizational measures to guarantee the confidentiality, integrity and availability in the processing of your personal data that we carry out, specifically those that prevent the loss, misuse, alteration, unauthorized access and theft of personal data.

---

What are your RIGHTS when you provide us with your data?

You can exercise your rights of access, rectification, erasure, portability, limitation or objection to the processing of your data, including the right to withdraw your consent, as detailed below:

Right of access: You can ask us if we are processing your data and how.

Right of rectification: You can ask us to update your personal data if it is incorrect, and delete it if you wish.

Right to limit processing: In this case, they will only be kept by us for the exercise or defense of claims.

Right to object: After your request to object to the processing, we will stop processing the data in the way you indicate, unless for compelling legitimate reasons, the exercise or defense of possible claims has to continue processing.

Right to data portability: If you wish your data to be processed by another company, we will facilitate the portability of your data to the new controller.

Right to erasure: You can request that we delete your data when it is no longer necessary for processing, you withdraw your consent, the processing is unlawful, or there is a legal obligation to do so. We will analyze the situation and apply the law.

If you need more information about what rights you have under the Law and how to exercise them, we recommend that you contact the Spanish Data Protection Agency (AEPD), which is the supervisory authority for data protection.

You may, if necessary, contact the Data Protection Officer before filing a complaint against the data controller with the Spanish Data Protection Agency (AEPD).

If we have not addressed your request to exercise your rights, you may file a complaint with the Spanish Data Protection Agency (AEPD).

We have forms available for exercising your rights, which can be requested by email at the address above. You can also use forms provided by the Spanish Data Protection Agency (AEPD) or third parties. These forms must be signed electronically or accompanied by a photocopy of your national identity document (DNI). If you are acting through a representative, the form must also be accompanied by a copy of their DNI or an electronic signature.

The forms must be submitted in person or sent by mail or email to the addresses shown in the "Responsible Party" section.

The maximum time limit for resolution is one month from the date of receipt of your request.

---

How long will we keep your data?

Personal data will be kept for as long as you maintain a relationship with us.

Upon completion of the processing, the personal data processed for each of the purposes indicated will be retained for the legally prescribed periods. If no such legal period exists, the data will be retained until the data subject requests its deletion or revokes the consent granted, or for the period that a judge or court may require, taking into account the statute of limitations for legal actions.

For each type of data processing, we provide a specific period, which you can consult in the following table:

Conservation chart