Privacy Policy

VISA SPAIN is committed to protecting the privacy of users who access this website and/or any of its services. Use of the website and/or any of the services offered by VISA SPAIN implies the user’s acceptance of the provisions contained in this Privacy Policy and that their personal data will be processed as stipulated herein. Please note that although there may be links from our website to other websites or social networks, this Privacy Policy does not apply to the websites of other companies or organizations to which this website may redirect. VISA SPAIN does not control the content of third-party websites and accepts no responsibility for the content or privacy policies of such websites.

Privacy Questions

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), we provide you with the following information regarding the processing of your personal data:

Who is responsible for processing your data?

Identity:
Tax ID (CIF):
Address:
Telephone:
Email:

For what purpose do we process your personal data?

We process the information provided to manage our security services.
If you contact us through the contact form on our website, we will process your data to manage your inquiry.
We may also use your data to inform you about our activities, products, or services when you are already a client or, if you are not, when you have provided your consent to do so.
When accessing our facilities, your image may be recorded by video surveillance cameras for security control purposes.
If you send us a résumé, we will process the data in order to manage the CV database for personnel selection.

How long will we keep your data?

The personal data provided will be retained while you are a user of our services or wish to receive information, since you may object to the processing of your data for promotional purposes at the time you provide them or at any later time by notifying us. Thereafter, data will be retained for the periods established to comply with our legal obligations, which in the case of accounting and tax documentation for commercial purposes will be 6 years in accordance with Article 30 of the Spanish Commercial Code, and for tax purposes will be 4 years pursuant to Articles 66 to 70 of the General Tax Law.

Images captured by the video surveillance system will be retained for one month.
In the case of résumés, data will be retained for one year.

What is the legal basis for processing your data?

For the management of the contractual relationship with the data subject, we base the processing on the performance of the contract or within the framework of a pre-contractual relationship.

For sending commercial information, we base the processing on your consent. However, if you are already our client, we may send you information about our products and services, always providing a simple and free means to unsubscribe, in accordance with Article 21.2 of Law 34/2002 of 11 July on Information Society Services and Electronic Commerce.

With regard to information submitted by minors under 14 years of age, it is essential that it be provided with the consent of the parents, guardian, or legal representative of the minor so that the personal data may be processed. If this is not the case, the minor’s legal representative must notify us as soon as they become aware.

Regarding the collection of data through images captured by the video surveillance system, the legal basis is the legitimate interest in preserving the safety of persons and property.

To whom will your data be disclosed?

Data will not be disclosed to third parties unless required by law or necessary to fulfill the purpose of the processing.

What are your rights when you provide us with your data?

Any person has the right to obtain confirmation as to whether or not we are processing their personal data.
Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain them for the exercise or defense of claims.
Also, in certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In such cases, we will stop processing the data, except for compelling legitimate reasons or for the exercise or defense of possible claims.
Data subjects also have the right to data portability.
Every data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.
Finally, data subjects have the right to lodge a complaint with the competent Supervisory Authority.

How can you exercise your rights?

By sending a written request, attaching a copy of a document that identifies you, to our physical or electronic address.

How did we obtain your data?

The personal data we process come from the data subject themselves. The data subject guarantees that the personal data provided are accurate and undertakes to communicate any changes thereto. Data marked with an asterisk will be mandatory in order to provide the requested service.

What data do we process?

The categories of data we may process in the provision of our services are:

Identifying data
Postal or email addresses

In the case of the video surveillance system:
Image

In the case of résumés, also:
Personal characteristics
Academic and professional data

Data are limited, as we only process the data necessary for the provision of our services and the management of our activity.

Do we carry out international data transfers?

The use of Google analytics cookies, including YouTube cookies, and Facebook marketing cookies involves the transfer of data to these companies located in the United States of America. The United States and the European Union have a Privacy Framework approved by the Commission Implementing Decision of 10 July 2023 in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council. More information can be found in Google’s privacy policy and in Meta (Facebook).

Do we use cookies?

We use cookies while browsing our website with the user’s consent.

Users may configure their browser to be notified of the use of cookies and to prevent their use. Please visit our cookie policy.

What security measures do we apply?

We apply the security measures established in Article 32 of the GDPR. Accordingly, we have adopted the necessary security measures to ensure a level of security appropriate to the risk of the data processing we carry out, with mechanisms that allow us to guarantee the confidentiality, integrity, availability, and ongoing resilience of processing systems and services.

Some of these measures include:

Informing staff about data processing policies.
Performing periodic backups.
Controlling access to data.
Regular verification, evaluation, and assessment processes.

How do we process data on behalf of third parties?

The types of data, the categories of data subjects, and the processing operations that we may carry out on behalf of our clients will be established in the corresponding data processing agreement.