Privacy policy

1. Data controller

The controller of the data collected through vuelco.es is Infozara Consultoría Informática S. L., the entity that operates the VUELCO brand or trade name.

• Controller: Infozara Consultoría Informática S. L.
• Tax ID (NIF): B99104721
• Address: c/ Marina Española n.º 12, pral. C, Edificio Azabache, 50006 Zaragoza
• Contact and exercise of rights: hola@vuelco.es
• Corporate contact: informa@infozara.es

2. Data we process

Through the contact form we process the data you voluntarily provide: name and email (required) and, optionally, company, project type and the content of your message. We also record the language of the enquiry. At the application layer, your IP address is used temporarily and in memory to prevent abuse and rate-limit submissions; it is not added to the message and is not persistently retained by VUELCO in association with the enquiry. In general, we do not collect browsing data for advertising purposes and we do not build profiles.

3. Purpose

We use this data to handle and respond to your enquiry or request for information and, where applicable, to manage the relationship prior to a possible professional engagement.

4. Legal basis

The legal basis for processing is:

• Article 6(1)(b) GDPR, for enquiries aimed at requesting a quote, evaluating a project or taking steps at the data subject's request prior to entering into a contract;
• Article 6(1)(f) GDPR (legitimate interest), to respond to general enquiries initiated voluntarily by the data subject. The legitimate interest pursued is to attend to spontaneous communications and properly manage the requested professional contact; you may object to this processing at any time.

We do not use this data for newsletters, commercial prospecting or unsolicited follow-up communications.

5. Retention

We keep the data from enquiries that do not lead to a contractual relationship for a maximum of 12 months from the last communication. If the enquiry leads to a contract, we keep the data for the duration of the relationship and, thereafter, for any legally applicable periods. We will delete the data before those periods when you request it and there is no legal obligation or basis to retain it.

6. Recipients and processors

Infozara initially receives and manages all enquiries. Your data is not disclosed by default to any other professional or entity, and there is no generic authorisation to transfer contacts to third parties. If an engagement were to be formalised with an entity or professional other than Infozara, we would inform you in advance of their identity, their role in the processing, the purpose, the legal basis and, where applicable, the communication of your data. Otherwise, we do not share your data with third parties except where legally required.

To provide the service we rely on technology providers acting as processors on behalf of the controller:

• Vercel — site hosting, execution of the form endpoint and security. As an infrastructure provider, it may process technical request metadata — including the IP address, approximate information derived from it, and device, browser and request data — to operate, protect and diagnose the service, in accordance with its terms and the configuration and retention periods applicable to the contracted plan.
• IONOS — email provider. It transmits and delivers, over authenticated SMTP, the email generated by the form; its content is delivered to Infozara's mailbox hosted at IONOS.

7. International transfers

Some of our technology providers are established in, or may process data in, the United States. Where applicable, international transfers will be carried out using the valid transfer mechanisms that apply under the GDPR. You may request information about these safeguards by writing to hola@vuelco.es.

8. Automated decisions

No automated decisions are made and no profiling is carried out with your data.

9. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to hola@vuelco.es. You also have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es).

10. Security

We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration.