PRIVACY POLICY
LAST UPDATED: 2026-08-05 · VERSION 1.0
1. DATA CONTROLLER
The data controller responsible for your personal data is VertexPrimeWorks, located at Calle Gran Vía, 28, 28013 Madrid, España. For any inquiries regarding this Privacy Policy or our data processing practices, please contact us at [email protected] or +34 618 492 031.
2. DATA WE COLLECT
We collect the following categories of personal data when you interact with our services:
- ▸ Identity Data: Full name, job title, company name, and professional role.
- ▸ Contact Data: Email address, telephone number, and postal address.
- ▸ Technical Data: IP address, browser type and version, operating system, device identifiers, and usage analytics.
- ▸ Project Data: System requirements, infrastructure specifications, and implementation details you provide during consultations.
- ▸ Financial Data: Transaction records and payment information processed through our secure payment partners.
3. LEGAL BASIS FOR PROCESSING
We process your personal data under the following legal bases as defined by the General Data Protection Regulation (EU) 2016/679 (GDPR):
- ▸ Consent (Article 6(1)(a)): Where you have given explicit consent for specific processing purposes.
- ▸ Contractual Necessity (Article 6(1)(b)): Processing necessary for the performance of a contract or pre-contractual measures.
- ▸ Legitimate Interest (Article 6(1)(f)): Processing necessary for our legitimate business interests, balanced against your rights.
- ▸ Legal Obligation (Article 6(1)(c)): Processing required to comply with applicable Spanish and EU law.
4. DATA RETENTION
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Client project data is retained for a minimum of 5 years following project completion to comply with contractual and tax obligations. Marketing consent data is retained until withdrawal of consent. Technical analytics data is anonymized after 12 months.
5. YOUR RIGHTS UNDER GDPR
As a data subject, you have the following rights:
- ▸ Right of Access (Article 15): Obtain confirmation of whether we process your data and request a copy.
- ▸ Right to Rectification (Article 16): Request correction of inaccurate or incomplete data.
- ▸ Right to Erasure (Article 17): Request deletion of your personal data where no legal retention applies.
- ▸ Right to Restrict Processing (Article 18): Request limitation of processing in specific circumstances.
- ▸ Right to Data Portability (Article 20): Receive your data in a structured, machine-readable format.
- ▸ Right to Object (Article 21): Object to processing based on legitimate interests or direct marketing.
- ▸ Right to Withdraw Consent: Withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
6. DATA SECURITY
VertexPrimeWorks implements appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS 1.3), access controls, regular security audits, and employee data protection training. In the event of a personal data breach, we will notify the relevant supervisory authority within 72 hours and affected data subjects without undue delay.
7. INTERNATIONAL DATA TRANSFERS
We do not transfer personal data outside the European Economic Area (EEA) without appropriate safeguards. Where transfers are necessary, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission or ensure the recipient country provides an adequate level of protection.