Privacy policy

Controller

Arturo Guasp Vicedo, tax ID (NIF) 21798350P, trading as Vizator. Address: Calle Jorge Comín Metge Pediatre 6, 46015 Valencia (Valencia), Spain. Contact for any privacy matter: [email protected] · +34 722 70 26 70.

No data protection officer has been appointed because it is not mandatory for this activity; queries are handled at the email above.

What data we process, why and on what basis

Demo requests and inquiries: name, email, phone, company, sector, message and the origin of the visit that generated it (campaign, the page you came from —without the parameters in its address— and landing page). To reply and, if you ask, prepare a proposal. Basis: pre-contractual steps at your request (Art. 6(1)(b) GDPR).

Customers and platform users: name, email, job title and phone of the people who use the dashboard, the activity needed to provide the service, the company’s billing data and, when subscribing, the record that the terms were accepted (version, date and time, IP address and browser), as proof of the purchase. To provide the service, manage the team, give support and send service emails. Basis: performance of the contract (Art. 6(1)(b)).

Invoicing and accounting: the company’s tax and payment data. Basis: compliance with legal obligations (Art. 6(1)(c)).

Business relationships: professional contact details of people at customer companies or companies we seek a business relationship with, and notes about that relationship. Basis: legitimate interest in maintaining and developing business-to-business relationships (Art. 6(1)(f) GDPR and Art. 19 LOPDGDD). You can object at any time.

Security: technical access and error logs to protect the platform and detect failures. Basis: legitimate interest in keeping the service secure (Art. 6(1)(f)).

Social media: if you comment on a Vizator post or message us on Instagram or LinkedIn, we process your username, your message and its date to reply from Vizator’s account, and we keep an internal log of our replies for one year. We do not use it for advertising or share it with third parties, and you can ask us to delete it at [email protected]. Basis: legitimate interest in answering people who contact us (Art. 6(1)(f)).

Analytics of this website: aggregate usage data with Google Analytics, only if you accept it. Basis: your consent (Art. 6(1)(a)), which you can withdraw from the Cookie policy.

Visitors to our customers’ websites that use the 3D viewer: we process that data on behalf of each customer, as a processor; this is explained in the Data processing agreement. If you have questions about it, contact the company whose website you visited.

Where the data comes from

You provide it when you contact us or use the platform. A customer’s users are provided by the company that invites them. Professional contact details may come from the business relationship itself or from publicly available sources, such as the company’s website.

How long we keep it

Demo requests that do not lead to a contract: up to one year after the last contact.

Service data: for the duration of the contract. Afterwards it is kept blocked for the periods in which liabilities may be claimed (generally up to five years), and invoicing data for six years (Art. 30 of the Spanish Commercial Code).

A customer’s 3D library is kept for at least 90 days after cancellation so it can be downloaded or the account reactivated; after that we may delete it, as stated in the Terms of service.

Technical access and error logs: 90 days. Analytics data of this website: as set out in the Cookie policy.

Encrypted database backups: up to 6 months. Deleted data disappears from the backups when the last backup containing it expires; if a backup had to be restored after a failure before then, that data is deleted again.

Who we share it with

We do not sell personal data or disclose it to third parties unless required by law. We rely on providers that process it on our behalf under a processing contract: Hostinger (hosting, European Union), Cloudflare (delivery network and file storage), Backblaze (database backups and fallback copy of the viewer’s files, European Union), Microsoft (email with Microsoft 365), Stripe (subscription payments and billing), Google (analytics of this website, only with consent) and Telegram (internal notifications to the owner about new requests, without name, email or message). The approximate location of visits is calculated on our own servers, without sending the IP to third parties, using the "IP Geolocation by DB-IP" database (db-ip.com, CC BY 4.0 license).

International transfers

Some providers may process data outside the European Economic Area. When they do, the transfer is covered by a European Commission adequacy decision (such as the EU-US Data Privacy Framework for certified companies) or by standard contractual clauses. You can request information about these safeguards at the controller’s email.

Your rights

You can access your data, rectify it, erase it, object to its processing, ask for it to be restricted and, where applicable, take it to another controller (portability), by writing to [email protected] and stating which right you are exercising. We will reply within one month, extendable by two more in complex cases (we will let you know within the first month). If you gave consent, you can withdraw it at any time without affecting prior processing.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).

Other information

The data marked as mandatory in forms is needed to deal with your request; without it we cannot do so. We do not take automated decisions or build profiles with legal effects on people.

We apply technical and organizational measures appropriate to the risk: encrypted connections, per-user and per-company access control, hashed passwords and hosting backups.