top of page
Privacy Policy​

Website: www.visionfactory.org | Last updated: October 2026
 

1. Identity of the Data Controller

  • Entity Name: Vision Factory

  • Legal Representative / CEO: Piotr Sadowski (NIE: Y6466556M)

  • Registered Address: Carrer de la Vinya 33B, 08041, Barcelona, Spain

  • Telephone: +34 623 176 781

  • Email: info@visionfactory.org

  • Website: www.visionfactory.org
     

2. Introduction and Regulatory Framework

Vision Factory is committed to safeguarding personal data in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation - GDPR) and Spanish Organic Law 3/2018 of December 5 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).

This Privacy Policy sets out how personal data collected via our website (www.visionfactory.org), contact forms, and electronic communications is processed, protected, and stored.
 

3. Personal Data We Collect

  • ·Contact & Identification Data: Full name, email address, contact telephone number, and message content submitted through web forms or direct email.

  • Technical & Browsing Data: IP address, browser type and version, language settings, operating system, pages viewed, time spent on pages, and referring URLs collected through standard web logs and technical cookies.

  • Inquiry & Collaboration Data: Information provided in relation to project inquiries, business collaborations, or professional consultations.
     

4. Purposes and Legal Bases for Processing

  • Managing Communications: To respond to user questions, inquiries, and consultation requests. Legal basis: Pre-contractual measures (Article 6(1)(b) GDPR) and legitimate interest (Article 6(1)(f) GDPR).

  • Service Delivery: To provide agreed services, manage client contracts, and handle billing and administrative duties. Legal basis: Performance of a contract (Article 6(1)(b) GDPR) and compliance with legal obligations (Article 6(1)(c) GDPR).

  • Security & Infrastructure: To ensure website security, prevent fraudulent activity, and maintain system stability. Legal basis: Legitimate interest in operating a secure web platform (Article 6(1)(f) GDPR).

  • Website Analytics: To understand how visitors use the website and enhance user experience. Legal basis: User consent (Article 6(1)(a) GDPR).
     

5. Data Retention Periods

  • Contact Inquiries: Kept for up to 12 months after the inquiry is resolved, unless an ongoing commercial or contractual relationship is established.

  • Contractual & Transaction Records: Retained for the statutory periods established under Spanish civil, commercial, and tax regulations (typically 5 to 6 years).

  • Technical Logs: Retained for up to 6 months before being systematically purged or anonymized.
     

6. Data Disclosures and International Transfers

Vision Factory does not sell, lease, or rent personal data. Data is shared only with:

  • Authorized Service Providers: Hosting providers, IT infrastructure vendors, and email service providers bound by Data Processing Agreements pursuant to Article 28 GDPR.

  • Legal & Statutory Authorities: Courts, law enforcement, tax authorities, and public institutions when strictly mandated by applicable Spanish or EU law.

Where any data transfer occurs outside the European Economic Area (EEA), Vision Factory ensures appropriate safeguards are in place, such as European Commission Adequacy Decisions or Standard Contractual Clauses (SCCs).
 

7. Your Rights Under GDPR

You have the right to exercise the following data protection rights at any time and free of charge:

  • Right of Access (Art. 15 GDPR): Confirmation of whether we process your data and access to that data.

  • Right to Rectification (Art. 16 GDPR): Correction of inaccurate, incomplete, or out-of-date information.

  • Right to Erasure (Art. 17 GDPR): Deletion of your personal data when it is no longer needed.

  • Right to Restriction (Art. 18 GDPR): Restriction of processing under certain legal conditions.

  • Right to Data Portability (Art. 20 GDPR): Obtaining your data in a structured, commonly used format.

  • Right to Object (Art. 21 GDPR): Objecting to processing based on legitimate interests or direct marketing.

  • Right to Withdraw Consent: Revoking previously given consent at any time.

To exercise these rights, please email info@visionfactory.org or write to Piotr Sadowski, Vision Factory, Carrer de la Vinya 33B, 08041, Barcelona, Spain, providing your name and proof of identification. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
 

8. Updates to this Policy

We reserve the right to revise this Privacy Policy to reflect operational, technical, or legal changes. Any modifications will be posted directly on this page with an updated revision date.

bottom of page