Skip to content

Privacy Policy

VAYCOM

Last updated: 7 October 2026

In compliance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and the guarantee of digital rights (LOPDGDD), this policy explains how the personal data of the users of this website are processed.

1. Data controller

2. Purposes of the processing

  • Handling the enquiries and requests sent through the contact form, by email or by phone.
  • Managing the relationship with customers: quotations, orders, provision of the service, invoicing and the related legal obligations.
  • Keeping a record of the user's choice about cookies (accepting or rejecting the Google Maps map), so that consent can be demonstrated. The option chosen, the version of the notice, the page, the date, the IP address (with its last block anonymised) and the browser are recorded.

No automated decisions are made and no profiles are built with the data.

3. Legal basis

  • Enquiries: the data subject's consent (Art. 6.1.a GDPR), which may be withdrawn at any time.
  • Customer management: performance of a contract or pre-contractual measures (Art. 6.1.b GDPR).
  • Tax and accounting obligations: compliance with a legal obligation (Art. 6.1.c GDPR).
  • Record of the cookie choice: compliance with the obligation to demonstrate consent (Arts. 5.2 and 7.1 GDPR) and the legitimate interest in defending against possible claims (Art. 6.1.f GDPR).

4. Data retention

Enquiry data are kept for the time needed to answer them and, at most, one year. Customer data are kept for as long as the relationship lasts and, afterwards, for the legal periods (generally six years for accounting and tax documentation). The record of the cookie choice is kept while that choice remains valid (12 months) and, afterwards, for the limitation periods of possible liabilities.

5. Recipients

Data are not disclosed to third parties, except where legally required (for example, to the Tax Authority or to judges and courts). Providers that supply services to the controller as processors (web hosting, email, advisory services) may access them, under a contract in accordance with Article 28 GDPR.

6. International transfers

If the user accepts the Google Maps map on the contact page, Google LLC (United States) may process data outside the European Economic Area. Google is certified under the EU-US Data Privacy Framework, which the European Commission has declared adequate, and also applies standard contractual clauses. This transfer only takes place if that map is accepted; if it is rejected, none takes place. Apart from this case, no international transfers are planned.

7. Rights of users

Anyone may exercise the rights of access, rectification, erasure, objection, restriction of processing and portability of their data, and withdraw the consent given, without affecting the lawfulness of the processing carried out before.

To exercise them, simply write to vaycom-e@vaycom-e.com or to the address above, stating the right being exercised and proving your identity.

If you consider that your rights have not been properly attended to, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es.

8. Minors

This website is not aimed at children under 14. If a child under that age provides data, the consent of their parents or guardians is required (Art. 7 LOPDGDD).

9. Accuracy of the data

Users guarantee that the data they provide are true and must report any change. If they provide third-party data, they declare that they have their consent.

10. Security

The controller applies the appropriate technical and organisational measures to guarantee the security of the data and to prevent their loss, alteration or unauthorised access, taking into account the state of the art and the nature of the data.