1. Data controller
The controller responsible for the personal data collected through this website is:
| Controller | Rodrigo Vilar Aranda / Vilar Digital Consultancy |
|---|---|
| Tax ID | 44145935B |
| Professional address | Calle Rondilla 9, 5D |
| Email address | hola@vilar.info |
| Website | www.vilar.info |
2. What personal data is processed
The data that may be processed will depend on how the user interacts with the website.
- Identification and contact details, such as name, company, email address, telephone number or professional role.
- Information voluntarily included in forms, emails or messages sent to Vilar.
- Technical data associated with use of the website, such as IP address, cookie identifiers, browser, device, access date and time, always according to the cookie settings and active tools.
- Information required to manage a professional, quotation, contractual or commercial relationship.
As a general rule, specially protected information is not requested. If a user provides this type of data when it is not necessary, Vilar may delete it when there is no legitimate basis for processing it.
3. Purposes and legal basis
Personal data will be processed for the following purposes:
| Responding to enquiries | Managing requests received through forms, email or other contact channels. Legal basis: consent of the data subject and application of pre-contractual measures where applicable. |
|---|---|
| Providing services | Managing quotations, proposals, projects, professional communications, invoicing and contractual relationships. Legal basis: performance of a contract or application of pre-contractual measures. |
| Commercial communications | Sending information about services, content or news when prior consent exists or when a professional relationship allows it under applicable regulations. Legal basis: consent or legitimate interest, depending on the case. |
| Security and maintenance | Ensuring the technical operation of the website and preventing misuse, security incidents or improper use. Legal basis: the controller’s legitimate interest. |
| Legal compliance | Meeting tax, accounting and administrative obligations or requests from competent authorities. Legal basis: compliance with legal obligations. |
| Analytics and cookies | Analysing website use and improving its content, always in accordance with the cookie policy and the consent granted where required. |
4. Retention period
Data will be retained for the time necessary to fulfil the purpose for which it was collected and, afterwards, for the periods required by applicable regulations or for the time needed to address possible liabilities.
- Enquiries will be kept for the time necessary to respond to and follow up on the request.
- Data linked to clients, quotations, contracts or invoicing will be retained for the applicable legal periods.
- Data processed on the basis of consent will be retained until that consent is withdrawn, unless another legal basis exists for retaining it.
- Data associated with cookies will be retained as indicated in the cookie policy or in the corresponding settings panel.
5. Recipients and processors
As a general rule, Vilar does not sell or transfer personal data to third parties for their own commercial purposes.
Certain providers that supply services required for the operation of the website and professional activity may access the data, such as web hosting, email, management tools, analytics, security, advisory, invoicing or technology services. These providers will act as processors where applicable.
Data may also be disclosed to public administrations, courts, tribunals or competent bodies when there is a legal obligation to do so.
International transfers
No international transfers of data outside the European Economic Area are envisaged unless the use of certain technology providers entails them. In that case, the safeguards provided for by data protection regulations will apply, such as adequacy decisions, standard contractual clauses or other legally recognised mechanisms.
6. Rights of data subjects
Any person may exercise their rights of access, rectification, erasure, objection, restriction of processing, portability and withdrawal of consent where applicable.
To exercise these rights, a request may be sent to hola@vilar.info, indicating the right to be exercised and providing the information necessary to verify the identity of the applicant.
A complaint may also be filed with the Spanish Data Protection Agency if it is considered that the processing of data does not comply with applicable regulations.
Withdrawal of consent will not affect the lawfulness of processing carried out before that withdrawal.
7. Data security
Vilar applies reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, misuse or unauthorised disclosure.
However, no system connected to the Internet can guarantee absolute security. Users are therefore advised to use secure means and avoid sending sensitive or unnecessary information through forms or emails.
8. Minors
This website is not specifically aimed at minors. If a minor provides personal data through the website, they must have the authorisation of their legal representatives where required under applicable regulations.
9. Accuracy of data
The user guarantees that the data provided is true, accurate, complete and up to date. If it changes, the user must communicate this so that the information remains properly updated.
10. Changes to this policy
Vilar may modify this privacy policy to adapt it to regulatory, technical, organisational or activity-related changes. When the changes are relevant, the review date will be updated and, where appropriate, notice will be given through suitable means.
Last updated: May 2026.