Privacy policy

We only process data that you provide voluntarily through:

• Contact and quote form: name, phone number, email address and project description. Purpose: to handle your request and send you a quote.
• Email: data contained in your message. Purpose: to answer your enquiry.
• Phone call: data given verbally. Purpose: to arrange the order or the site visit.
• Cookies and browsing: technical device data and pages visited. Purpose: site operation and usage analysis. See our Cookie policy.

We do not make automated decisions or build profiles with your data.

• Performance of a pre-contract or contract (art. 6(1)(b) GDPR): handling quote requests and installations.
• Legitimate interest (art. 6(1)(f) GDPR): commercial communications to existing clients about products or services similar to those contracted.
• Consent (art. 6(1)(a) GDPR): subscription to commercial communications and use of non-essential cookies.
• Legal obligation (art. 6(1)(c) GDPR): retention of accounting and tax records as required by Spanish tax law.

Data is kept for as long as needed to handle your request and, afterwards:

• Contractual and tax data: 6 years (Law 58/2003, General Tax Law).
• Contact data with no contractual relationship: 3 years from the last communication.
• Browsing data (analytics cookies): up to 13 months.

Your data is not shared with third parties, except:

• Processors that provide services to Velton (web hosting, email, analytics tools), with whom the corresponding data processing agreements have been signed.
• Where required by law (public authorities, courts and tribunals).

Some of these processors are established in the United States: the web hosting provider (Vercel Inc.) and the email delivery service (Resend Inc.), through which we receive contact form submissions. The resulting international transfers are made with the safeguards provided for in the GDPR (art. 46): standard contractual clauses approved by the European Commission and/or the provider's certification under the EU-U.S. Data Privacy Framework. You can request a copy of these safeguards at the address given in section 1.

You have the right to:

• Access: know what data we process about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: ask us to delete your data when it is no longer needed.
• Objection: object to processing based on legitimate interest.
• Restriction: ask us to suspend processing while a complaint is resolved.
• Portability: receive your data in a structured, commonly used format.
• Withdraw consent at any time, without affecting the lawfulness of prior processing.

You can exercise your rights by emailing ventas@velton.es, stating the right you wish to exercise and attaching a copy of your ID document.

If you believe the processing infringes your rights, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) – www.aepd.es.

Velton applies appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or destruction, in accordance with art. 32 GDPR.