Privacy policy
How we handle the personal data you give us through this website, by email or on WhatsApp, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
- Controller: Visionharbor Technologies S.L. (trade name: VisionHarbor Local)
- Tax ID (NIF): B-26605329
- Address: Calle Huéscar 16, 29007 Málaga (Spain)
- Email: [email protected]
We have not appointed a data protection officer because we are not required to. For any privacy question, email us at [email protected].
2. What data we process
Consultation form
Your name; your business name (optional); your email address or phone number; your town or postcode; the service you are interested in; your message; and, if you give them, your meeting preferences (place, date and language). Please do not include passwords, payment details or sensitive client information.
Email and WhatsApp
The data you send us: your name, email address or phone number, the content of your messages and any attachments. On WhatsApp we also see your profile name and, if visible, your profile photo.
Technical visit data
Our hosting provider automatically logs technical data such as your IP address, date and time, the page requested and your browser, to deliver the website and protect it against abuse. We do not use web analytics or build browsing profiles.
Customers
If your business hires us, we process the contact details of people at your business, billing details and the information needed to provide the service.
3. Purposes, legal basis and retention
| Purpose | Legal basis | Retention |
|---|---|---|
| Replying to your request or message and, if you ask, arranging a meeting or preparing a proposal. | Your consent (art. 6.1.a GDPR) and steps taken at your request before entering into a contract (art. 6.1.b GDPR). | 12 months from the last contact if you do not become a customer. |
| Providing the contracted services and managing our relationship with your business. | Performance of the contract (art. 6.1.b GDPR). For contact people at the client business, our legitimate interest (art. 6.1.f GDPR and art. 19 LOPDGDD). | For as long as the contract lasts. |
| Invoicing, accounting and tax obligations. | Compliance with legal obligations (art. 6.1.c GDPR). | Six years (art. 30 of the Spanish Commercial Code) or the applicable tax limitation period. |
| Running the website securely. | Our legitimate interest in providing a secure website (art. 6.1.f GDPR). | The short period for which the hosting provider keeps its technical logs. |
When these periods end, we block the data for as long as legal claims may arise (art. 32 LOPDGDD) and then delete it.
We do not send marketing communications, build profiles or make automated decisions using your data.
Giving us your data is voluntary, but without your name, a way to contact you and your location we cannot handle your request.
4. Recipients and processors
We do not disclose your data to third parties unless required by law (for example, to the Spanish Tax Agency or the courts). To operate, we use providers that process data on our behalf under data processing agreements in line with article 28 GDPR:
| Provider | Role | Location and safeguards |
|---|---|---|
| Cloudflare, Inc. | Website hosting and receiving the form. | USA. European Commission standard contractual clauses and, where applicable, the EU-US Data Privacy Framework. |
| Resend (Plus Five Five, Inc.) | Emailing form requests to us. | USA. European Commission standard contractual clauses and, where applicable, the EU-US Data Privacy Framework. |
| Microsoft Ireland Operations Ltd. (Microsoft 365 / Outlook) | Receiving and managing email. | European Union. Possible transfers to the USA under the EU-US Data Privacy Framework and standard contractual clauses. |
If you message us on WhatsApp, the service is provided by WhatsApp Ireland Limited, which also processes data under its own privacy policy. That data may be transferred to the USA; Meta Platforms, Inc. participates in the EU-US Data Privacy Framework. If you would rather not use WhatsApp, email us or use the form.
5. Your rights
You can exercise the following rights at any time:
- Access: find out what data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask us to delete your data.
- Objection and restriction of processing.
- Portability: receive your data in a structured format.
- Withdraw your consent, without affecting the lawfulness of earlier processing.
To exercise them, email [email protected] or write to Calle Huéscar 16, 29007 Málaga, Spain, stating which right you wish to exercise. If we have reasonable doubts about your identity, we may ask for additional information to confirm it. We will reply within one month.
If you believe we have not handled your rights properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
6. Other people’s data
If you give us data about other people, such as colleagues at your business, you must have informed them first and be entitled to share it with us.
7. Security
We apply appropriate technical and organisational measures to protect your data, such as encrypted connections (HTTPS), restricting access to the people who need the data and choosing providers with security guarantees.
8. Changes to this policy
We may update this policy when our services or the law change. The date of the latest update is shown at the top. This policy is available in Spanish and English; in case of any discrepancy, the Spanish version prevails.