Skip to content

Legal

Effective date: June 23, 2026

At Vidra, we take your privacy and the security of your information very seriously. This page outlines our policies regarding the collection, use, and disclosure of personal data.

Privacy Policy

Personal Data We Collect

When you visit our website, we may collect certain information about your device and browsing activity.

  • Device information: browser type, operating system, IP address, device identifiers, and browsing activity.
  • Usage data: pages you viewed, time spent on the website, links clicked, and search terms used.
  • Contact information: name, email address, phone number, and message content if you contact us.

How We Use Your Personal Data

We use the personal data we collect to operate and improve our website, personalize your experience, analyze usage, respond to inquiries, and comply with legal obligations.

Legal Basis for Processing

The processing of your personal data is based on the following grounds under Art. 6 of the GDPR:

  • Consent (Art. 6.1.a): for the use of analytics cookies or marketing communications, where you have given your explicit consent.
  • Contract or pre-contractual measures (Art. 6.1.b): to handle inquiries, proposals, or service agreements.
  • Legitimate interest (Art. 6.1.f): for the security, operation, and continuous improvement of our website.
  • Legal obligation (Art. 6.1.c): where law requires us to retain or process certain data.

Sharing Your Personal Data

We may share personal data with third-party service providers who help us operate our website and deliver our services. These providers are required to keep your information confidential and secure.

Specifically: if you accept analytics cookies, we use Google Analytics 4 (Google Ireland Limited, based in Ireland, and Google LLC in the US) to measure site usage. If you accept marketing cookies, we use the LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company, based in Ireland, and LinkedIn Corporation in the US) to measure ad conversions and build audiences for our LinkedIn Ads campaigns.

These transfers of data outside the European Economic Area take place under the EU-U.S. Data Privacy Framework, to which both Google and LinkedIn are certified.

Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by law.

Contact form and email correspondence data is retained for a maximum of 24 months from the last contact, unless there is an active contractual relationship, in which case the legal tax and commercial retention periods apply (up to 6 years). Server technical logs are retained for a maximum of 12 months for security and incident-diagnosis purposes.

Messages sent to our virtual assistant (chatbot) are processed in real time to generate a response and are not stored on our servers. Conversation history is held only in the browser's temporary memory during the active session and is automatically deleted when the page is closed or refreshed. If an assistant response is unusually long, its length is automatically logged for security purposes (misuse detection); the content of the question or the response is never logged.

Data Protection Officer

Vidra is a small company whose activity does not involve large-scale processing of special categories of data or regular and systematic large-scale monitoring of individuals, so it is not legally required to appoint a Data Protection Officer (Art. 37 GDPR). Any query regarding data protection can be sent through our contact form.

Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR) and, where applicable, the Spanish Organic Law 3/2018 (LOPDGDD), you have the following rights:

  • Access: obtain confirmation of whether we process your data and access it.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure (right to be forgotten): request deletion when data is no longer necessary or you withdraw consent.
  • Objection: object to processing where it is based on legitimate interest or for direct marketing purposes.
  • Restriction: limit how we use your data in certain circumstances.
  • Portability: receive your data in a structured, commonly used, and machine-readable format.
  • Not to be subject to automated decision-making: not to be subject to decisions based solely on automated processing that significantly affects you.
  • To exercise any of these rights, use our contact form clearly describing your request and attaching a copy of your identity document.

Right to Lodge a Complaint

If you believe the processing of your personal data does not comply with applicable law, you have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD), located at C/ Jorge Juan 6, 28001 Madrid. More information at www.aepd.es.

Cookie Policy

What Cookies Are

Cookies are small text files stored on your device when you visit a website. We use first-party and third-party cookies to remember preferences, analyse site usage, and, where applicable, show personalised content.

Cookie Categories

We classify cookies into three categories, as explained in the consent banner shown when you first visit the site:

  • Necessary: essential for the site's basic operation (for example, remembering your consent choice). These do not require consent and cannot be disabled.
  • Analytics: help us understand how the site is used so we can improve it (Google Analytics 4). These only activate if you give your consent.
  • Marketing: we use the LinkedIn Insight Tag to measure ad conversions and build audiences for our LinkedIn Ads campaigns. This only activates if you give your consent.

Cookies We Use

Summary of the specific cookies each third-party service may set. The exact list of cookies and their duration may vary by provider; see their cookie policy linked below for up-to-date detail.

  • Google Analytics 4 (Google Ireland Limited / Google LLC) — cookies such as _ga and _ga_<ID>, analytics/third-party, lasting up to 2 years. Purpose: measure visits and site usage. More information in Google's privacy policy.
  • LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company / LinkedIn Corporation) — cookies such as li_sugr, bcookie, UserMatchHistory, AnalyticsSyncHistory, and li_fat_id, advertising/third-party, lasting up to 2 years. Purpose: measure ad conversions and build audiences for LinkedIn Ads. More information in LinkedIn's cookie policy.

Managing Your Consent

You can accept, reject, or customise your consent by category from the cookie banner. Your choice is remembered for your browser session; it will be asked again when you start a new session. You can also disable cookies from your browser settings.

Contact Us

Contact Us

If you have any questions about this policy or these terms, please visit our contact page.