How we process the personal data of people who visit the website, write to us or have a client account.
1. Data controller
VIUZI ESP, S.L., with tax ID B05735576 and registered address at Calle Alejandro Dumas 17 - Oficinas, 29004 Málaga, España. For any privacy matter you can write to privacidad@viuzi.com.
2. Data we process
Identification and contact data you give us: name, company, email and phone.
Data from your quote requests, from your conversations with the team and from the notices the console shows you about them.
Technical data needed to provide and protect the service: IP address, access dates and security logs.
The fields marked as required in the forms are needed to handle your request; without them we cannot process it.
3. Purposes and legal bases
Managing your client account and your quote requests, based on taking pre-contractual steps at your request (article 6.1.b GDPR).
Answering messages of the contact form, based on your consent (article 6.1.a GDPR).
Ensuring the security of the service and preventing abuse, based on our legitimate interest (article 6.1.f GDPR).
Complying with legal, accounting and tax obligations when a request becomes a contract (article 6.1.c GDPR).
4. Retention periods
We keep account data while the account is active. If you delete it, we anonymise it immediately, except for the data of accepted requests that we must keep by law for the periods set by commercial and tax legislation.
The audit records of the team's actions, which may include your email and the reference of your requests, are deleted automatically after two years. Contact messages are deleted automatically one year after they arrive. Console notices are deleted after ninety days. Open sessions are deleted when they expire, after 30 days in the client console and after 12 hours in the team console.
5. Recipients
We do not share your data with third parties unless the law requires it. We rely on providers that process data on behalf of Viuzi, such as the hosting of the platform and the sending of emails, under data processing agreements.
6. International transfers
We host the platform and its data in data centres in the European Union, and we do not transfer personal data outside the European Economic Area as part of the service.
If a provider ever had to process data outside the European Economic Area, it would only do so in a country with an adequacy decision of the European Commission or with the safeguards of Article 46 of the GDPR, such as the standard contractual clauses. We would update this policy before that processing began.
7. Your rights
You can exercise the rights of access, rectification, erasure, objection, restriction and portability by writing to privacidad@viuzi.com. From the client console you can also download your data and delete your account yourself.
You can withdraw your consent at any time. Withdrawing it does not affect the lawfulness of the processing carried out before.
We do not make automated decisions or build profiles with your data: a person of the Viuzi team studies and answers every request.
If you believe we have not handled your rights properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security
We apply appropriate technical and organisational measures: encrypted communications, passwords protected with Argon2id, access control for the team and an audit log of its actions.