1. Data controller
This policy explains how personal data provided through www.vimarsaimport.com and its contact channels is processed.
2. Data processed and purposes
Data voluntarily provided by users by email, telephone or through a form may be used to:
- Respond to enquiries, requests for information and commercial communications initiated by the user.
- Prepare, manage and follow up commercial relationships or pre-contractual requests.
- Send information about products or services when the user has given consent.
- Analyse use of the website and improve its operation when analytics or cookie tools are enabled.
- Protect the form against fraud, spam and automated submissions.
We will not request data that is not reasonably necessary for the relevant purpose.
3. Legal basis for processing
Depending on the circumstances, processing is based on the data subject's consent, steps taken at their request before entering into a contract, performance of a contractual relationship, or VIMARSA's legitimate interest in responding to communications related to its business.
Where consent is required for a commercial communication, it may be withdrawn at any time.
4. Data retention
Data will be retained for as long as necessary to manage the relevant request or relationship. It may then remain blocked for the periods required by applicable law in order to address possible liabilities.
5. Data recipients
Personal data will not be disclosed to third parties unless required by law or when VIMARSA must use service providers, such as hosting, technical support or email providers. Those providers must process the data in accordance with instructions and the safeguards required by law.
The form uses Cloudflare Turnstile, provided by Cloudflare, Inc., to distinguish legitimate requests from automated traffic. For this purpose, technical data such as the IP address, browser characteristics and interaction signals may be processed. This processing is based on VIMARSA's legitimate interest in protecting the website and its communications. Further information is available in Cloudflare's privacy policy.
6. Data subject rights
Users may request access to, rectification or erasure of their data, object to processing, request restriction of processing or exercise the right to data portability where applicable. They may also withdraw previously given consent without affecting the lawfulness of processing carried out before its withdrawal.
To exercise these rights, write to cumplimiento@vimarsaimport.com, include “Data protection” in the subject line and provide the information needed to verify your identity.
If you believe your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency.
7. Information security
VIMARSA applies technical and organisational measures intended to protect data against loss, alteration, unauthorised access or unlawful processing, taking account of the nature of the information and the risks involved.
8. Changes to this policy
This policy may be updated to reflect legal, technical or service-related changes. The version published on this page will always be the current version.