Legal
Effective date: June 23, 2026
At Vidra, we take your privacy and the security of your information very seriously. This page outlines our policies regarding the collection, use, and disclosure of personal data.
Privacy Policy
Personal Data We Collect
When you visit our website, we may collect certain information about your device and browsing activity.
- Device information: browser type, operating system, IP address, device identifiers, and browsing activity.
- Usage data: pages you viewed, time spent on the website, links clicked, and search terms used.
- Contact information: name, email address, phone number, and message content if you contact us.
How We Use Your Personal Data
We use the personal data we collect to operate and improve our website, personalize your experience, analyze usage, respond to inquiries, and comply with legal obligations.
Legal Basis for Processing
The processing of your personal data is based on the following grounds under Art. 6 of the GDPR:
- Consent (Art. 6.1.a): for the use of analytics cookies or marketing communications, where you have given your explicit consent.
- Contract or pre-contractual measures (Art. 6.1.b): to handle inquiries, proposals, or service agreements.
- Legitimate interest (Art. 6.1.f): for the security, operation, and continuous improvement of our website.
- Legal obligation (Art. 6.1.c): where law requires us to retain or process certain data.
Sharing Your Personal Data
We may share personal data with third-party service providers who help us operate our website and deliver our services. These providers are required to keep your information confidential and secure.
Specifically: if you accept analytics cookies, we use Google Analytics 4 (Google Ireland Limited, based in Ireland, and Google LLC in the US) to measure site usage. If you accept marketing cookies, we use the LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company, based in Ireland, and LinkedIn Corporation in the US) to measure ad conversions and build audiences for our LinkedIn Ads campaigns.
These transfers of data outside the European Economic Area take place under the EU-U.S. Data Privacy Framework, to which both Google and LinkedIn are certified.
Data Retention
We retain personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by law.
Contact form and email correspondence data is retained for a maximum of 24 months from the last contact, unless there is an active contractual relationship, in which case the legal tax and commercial retention periods apply (up to 6 years). Server technical logs are retained for a maximum of 12 months for security and incident-diagnosis purposes.
Messages sent to our virtual assistant (chatbot) are processed in real time to generate a response and are not stored on our servers. Conversation history is held only in the browser's temporary memory during the active session and is automatically deleted when the page is closed or refreshed. If an assistant response is unusually long, its length is automatically logged for security purposes (misuse detection); the content of the question or the response is never logged.
Data Protection Officer
Vidra is a small company whose activity does not involve large-scale processing of special categories of data or regular and systematic large-scale monitoring of individuals, so it is not legally required to appoint a Data Protection Officer (Art. 37 GDPR). Any query regarding data protection can be sent through our contact form.
Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR) and, where applicable, the Spanish Organic Law 3/2018 (LOPDGDD), you have the following rights:
- Access: obtain confirmation of whether we process your data and access it.
- Rectification: correct inaccurate or incomplete data.
- Erasure (right to be forgotten): request deletion when data is no longer necessary or you withdraw consent.
- Objection: object to processing where it is based on legitimate interest or for direct marketing purposes.
- Restriction: limit how we use your data in certain circumstances.
- Portability: receive your data in a structured, commonly used, and machine-readable format.
- Not to be subject to automated decision-making: not to be subject to decisions based solely on automated processing that significantly affects you.
- To exercise any of these rights, use our contact form clearly describing your request and attaching a copy of your identity document.
Right to Lodge a Complaint
If you believe the processing of your personal data does not comply with applicable law, you have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD), located at C/ Jorge Juan 6, 28001 Madrid. More information at www.aepd.es.
Legal Notice
Content Ownership
The content on the website, including text, graphics, images, logos, and other materials, is the property of Vidra or its licensors.
User Conduct
You agree to use the website in a lawful and respectful manner, without disrupting the website, transmitting harmful code, or infringing third-party rights.
Disclaimer
The information on the website is provided for informational purposes only and does not constitute professional advice. You rely on it at your own risk.
Limitation of Liability
We will not be liable for damages arising out of your use of the website, including direct, indirect, incidental, consequential, or punitive damages.
Governing Law
These terms will be governed by and construed in accordance with applicable law.
Contact Us
Contact Us
If you have any questions about this policy or these terms, please visit our contact page.