Last updated: 2026-05-12
1. General information
Viladrau Online (“we”, “us” or “Viladrau Online”) respects your privacy and is committed to protecting your personal data. This Privacy Policy informs you about how we collect, use and protect your personal data when you visit viladrau.online or use our services.
This policy complies with the General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 (LOPDGDD) and Law 34/2002 (LSSI-CE).
2. Data controller
- Identity: Viladrau Online
- Address: c/ Sardenya 175 local 2, 08013 Barcelona, Catalonia (Spain).
- Email: hola@viladrau.online
- Phone: +34 621 23 30 51
For any data protection matter, you can contact us at hola@viladrau.online.
3. Data we collect
3.1 Data provided by the user
We collect the data you voluntarily provide through contact forms, information requests, scheduling bookings (Cal.com) or any other channel: name, company, email, phone and the content of your message.
3.2 Data collected automatically
When you visit the website, we may collect technical information to ensure proper operation: IP address, browser type, operating system, language, pages visited and browsing time. This information is processed in anonymised form where possible.
4. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Respond to enquiries and requests | Consent (art. 6.1.a GDPR) |
| Manage the contractual relationship with clients | Contract performance (art. 6.1.b) |
| Comply with legal obligations (billing, tax) | Legal obligation (art. 6.1.c) |
| Web analytics with consent | Consent (art. 6.1.a) |
| Commercial communications, if you authorise | Consent (art. 6.1.a) |
5. Retention period
We keep your data for the minimum time needed for the purposes for which it was collected:
- Commercial contact data: up to 3 years after the last interaction, or until you withdraw consent.
- Contract-related data: during the contract and the legal prescription periods (up to 6 years for tax matters).
- Analytical data: 13 months maximum.
6. Recipients
Your data is not shared with third parties except:
- With technology providers acting as data processors (hosting, email, calendar, analytics), under signed GDPR agreements.
- With public authorities when required by law.
We don’t make international transfers outside the EEA except to strictly necessary providers, always with the safeguards required by the GDPR (standard contractual clauses).
7. Your rights
Under the GDPR, you have the right to:
- Access your data.
- Rectification of inaccurate or incomplete data.
- Erasure (“right to be forgotten”).
- Restriction of processing.
- Portability in a structured format.
- Objection to processing on legitimate grounds.
- Withdraw consent at any time, without retroactive effect.
To exercise these rights, write to us at hola@viladrau.online. We will respond within 30 days. If you believe processing does not comply with the regulations, you may file a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security
We apply appropriate technical and organisational measures to protect data against unauthorised access, alteration, loss or destruction: encryption in transit (HTTPS), access control, backups and internal training.
9. Cookies
The website uses essential cookies for its operation and, with your consent, analytical cookies. For more information, see the Cookie Policy.
10. Changes to the policy
We may update this policy to reflect legal or operational changes. We will publish the updated version on the website and indicate the last updated date.