VARDA Consultoría e Ingeniería, S.L. informs users of its policy on the processing and protection of the personal data of users and clients that may be collected when browsing or contracting services through its website. VARDA Consultoría e Ingeniería, S.L. guarantees compliance with current data protection legislation: the General Data Protection Regulation (GDPR) (EU) 2016/679 and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights.

Who is the data controller?

Data controller VARDA Consultoría e Ingeniería, S.L.
Tax ID B88687934
Address Calle Nuestra Señora de la Merced, 2D, 3º-1, 14014 Córdoba, Spain
Phone +34 661 243 005
Email info@varda.es

For what purpose is personal data processed?

VARDA Consultoría e Ingeniería, S.L. processes the information provided through this website for the following purposes:

  • To answer enquiries and assess the project requests sent through the contact form.
  • To maintain the business relationship with clients and website users.

VARDA Consultoría e Ingeniería, S.L. will never process personal data for purposes other than those stated above.

Will commercial information be sent?

VARDA Consultoría e Ingeniería, S.L. will never use the information provided by users and/or collected through the website to send commercial information. If it were ever to be used for this purpose, the user’s prior consent would always be obtained, in accordance with current data protection legislation.

How long will personal data be kept?

Personal data will be kept for as long as the business relationship continues, until the data subject requests its deletion, or for the years required to comply with legal obligations.

The data will then be deleted in accordance with data protection legislation, which means it will be blocked and only available to judges and courts, the Ombudsman, the Public Prosecutor’s Office or the competent public administrations during the limitation period for any actions that may arise; after that period, it will be completely erased.

How was the personal data obtained and what categories of data are processed?

The personal data processed by VARDA Consultoría e Ingeniería, S.L. comes from the data subject when it is entered in the contact form.

The categories of data processed through the contact form are:

  • Identification and contact data: name and email (required); company and phone (optional).
  • Project data: type of project, town or area and a description of what is needed (required); approximate deadline (optional).

As this is a communication channel, the data subject may include other personal data in the message when sharing an opinion or asking questions.

What is the legal basis for using your data?

The legal bases for processing personal data are:

  • The express consent given by the data subject when accepting this privacy policy before sending personal data through the contact form (art. 6.1.a GDPR).
  • The performance of the service requested by the data subject, and the application of pre-contractual measures (art. 6.1.b GDPR).

Website statistics and company profile downloads

To understand how the website is used we use Matomo, installed on our own server and configured without cookies: visit data is not shared with third parties.

When you download or open the VARDA company profile from this website, we record the date and time, the page you came from, your IP address, your language and the technical details of your browser and device, and we receive an email notification. We do this on the basis of legitimate interest (art. 6.1.f GDPR), to understand how the profile is used and to better serve those interested in our services. Only the last 500 downloads are kept and this data is not disclosed to third parties.

To whom will the data be disclosed?

Personal data will not be disclosed to any third party, except to those third parties whose involvement is necessary to provide the service properly.

Your data may also be disclosed to public bodies and authorities (administrative or judicial) where required by law.

Personal data will not be sent outside the European Economic Area, so there will be no international data transfers.

What are your rights when you give your consent?

Everyone has the right to obtain confirmation as to whether their personal data is being processed.

Data subjects have the right to:

  • Request access to their personal data
  • Request its rectification or erasure
  • Request the restriction of its processing
  • Object to the processing
  • Request data portability

Data subjects may access their personal data and request the rectification of inaccurate data or, where appropriate, its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, data subjects may request the restriction of the processing of their data, in which case it will only be kept for the exercise or defence of claims.

In certain circumstances and for reasons relating to their particular situation, data subjects may object to the processing of their data. VARDA Consultoría e Ingeniería, S.L. will stop processing the data, except for compelling legitimate grounds or the exercise or defence of possible claims. Data subjects may also request the portability of their data.

How can these rights be exercised?

To exercise the rights of access, rectification, erasure, objection, restriction of processing and data portability, data subjects should contact VARDA Consultoría e Ingeniería, S.L. at Calle Nuestra Señora de la Merced, 2D, 3º-1, 14014 Córdoba, Spain, or by email at info@varda.es.

The request must include reliable proof of identity, state the right being exercised and the content of the request, and give an address for notifications.

Can you lodge a complaint with the Spanish Data Protection Agency (AEPD)?

Data subjects also have the right to effective judicial protection and to lodge a complaint with the supervisory authority, in this case the Spanish Data Protection Agency (Agencia Española de Protección de Datos), if they consider that the processing of their personal data infringes the Regulation. Complaints can be sent in writing to Agencia Española de Protección de Datos, C/ Jorge Juan nº 6, 28001 Madrid, Spain, or through its website: https://sedeagpd.gob.es/sede-electronica-web/

This is an English translation for information purposes. In case of discrepancy, the Spanish version prevails.