VGRP is now BINDTEC. It's not just a rebrand. It's an evolution towards our clients' needs.

Privacy Policy

1. BASIC INFORMATION

This Privacy Policy (“Privacy Policy”) informs you about the processing of data carried out by VITTORITO GROUP, S.L. (“VGRP”) regarding users (“Users”) who visit the website (the “Website”). VGRP values your trust as a User and your privacy, and therefore explains below how your data is processed.

The legal basis that legitimizes this processing is the performance of a contract or the adoption of pre-contractual measures, the legitimate interest of the data controller, and, where applicable, the consent of the data subject. Your data may be disclosed to technology service providers, as well as to third parties when required by applicable law. You may exercise your rights of access, rectification, erasure, restriction of processing, objection, and data portability at any time. If you have any questions or would like more information, you may write to: info@vgrp.es.

 

2. DATA CONTROLLER

In compliance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), and Spanish Organic Law 3/2018 (LOPDGDD), you are informed of the following data regarding the Data Controller:

Legal name: VITTORITO GROUP, S.L.
Tax ID (NIF/CIF): B-88352596
Registered address: Via de las Dos Castillas 33, Ática – Building 7 – 1st floor, 28224 Pozuelo de Alarcón (Madrid)
Commercial Registry: Madrid, Volume 39061, Folio 47, Sheet M-693991
Contact email: info@bindtec.eu
Contact phone: 0034650839925
Website: eu
Data Protection Officer: Ugo de Benedictis
DPO contact: info@bindtec.eu

 

3. INFORMATION WE COLLECT

We collect two categories of data.

First, non-personal information, meaning technical browsing data that does not directly identify you, such as browser type, operating system, pages visited, access time, and language preferences. This information is used to improve website functionality and performance.

Second, personal information, meaning data that identifies or can identify you, including device and network identifiers such as IP address, unique device identifiers (MAC address or UUID), and geolocation data, as well as any information you voluntarily provide through forms on the Website, such as name, email address, phone number, or other data you choose to share.

We may also receive information about you from third-party traffic analytics providers or publicly available sources. When data is not obtained directly from the data subject, we will provide information about the categories and source of such data.

 

4. PURPOSES AND LEGAL BASIS

We process your personal data for the following purposes and legal bases:

  • Contact forms and inquiries: to manage your request and any pre-contractual or contractual relationship. Legal basis: Article 6.1(b) GDPR.
  • Service provision and contract management: including customer service communications. Legal basis: Article 6.1(b) GDPR.
  • Website security, fraud prevention, and legal compliance: including IP logs. Legal basis: legitimate interest (Art. 6.1(f)) and legal obligation (Art. 6.1(c)).
  • Web analytics (Snowplow Analytics): based on user consent (Art. 6.1(a)).
  • Commercial communications: based on consent or legitimate interest (Art. 6.1(a) or 6.1(f)). You may object at any time.
  • Behavioral advertising and remarketing: based on prior consent (Art. 6.1(a)).
  • Corporate transactions: based on legitimate interest (Art. 6.1(f)).

Where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.

 

5. RECIPIENTS OF DATA

We do not sell or rent your personal data.

However, we may share your data with data processors under Article 28 GDPR, including hosting providers, Snowplow Analytics, Google LLC (web fonts), marketing and advertising providers, legal and auditing advisors, public authorities when required by law, and group companies for internal administration.

Data may also be disclosed to comply with legal obligations, protect rights and security, or in the context of mergers or acquisitions.

 

6. INTERNATIONAL DATA TRANSFERS

Some service providers may be located outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards such as European Commission adequacy decisions or Standard Contractual Clauses (SCCs) under Article 46 GDPR.

For example, transfers to Google LLC in the United States are protected by appropriate safeguards. You may request more information about these safeguards by contacting info@vgrp.es

7. DATA RETENTION PERIODS

Data provided through contact forms and inquiries will be retained for the time necessary to handle the request and, once resolved, for an additional 5 years in order to address any potential liabilities arising from the relationship. Data linked to contractual relationships will be retained for the duration of the contract and, after its termination, for the legally required periods under applicable tax and commercial regulations. Data processed for commercial communications will be retained until you withdraw your consent or exercise your right to object, and for an additional period of 12 months to demonstrate compliance with legal obligations. Browsing records and logs will be retained for a maximum of 12 months from their creation, unless a longer retention period is required by law.

Once these periods have expired, and in compliance with GDPR and LOPDGDD, the data will be securely blocked and subsequently deleted, remaining available only to public authorities, judges, and courts for the duration of applicable legal limitation periods.

 

8. USER RIGHTS

The data controller will take all reasonable steps to facilitate the exercise of the data subject’s rights and must respond without undue delay and, in any case, within one month of receiving the request. This period may be extended by an additional two months if necessary, depending on the complexity and number of requests, in which case the controller will inform the data subject within the first month.

Under applicable law, you have the right to obtain confirmation as to whether we are processing your personal data and, if so, to access it, along with information about the purposes of processing, categories of data, recipients, retention periods, and your rights (right of access, Article 15 GDPR).

You have the right to request the rectification of inaccurate personal data concerning you without undue delay and, taking into account the purposes of processing, to complete incomplete personal data (right of rectification, Article 16 GDPR).

You have the right to request the erasure of your personal data when it is no longer necessary for the purposes for which it was collected, when you withdraw consent and no other legal basis applies, when you object to processing and no overriding legitimate grounds exist, or when the data has been unlawfully processed (right to erasure or “right to be forgotten”, Article 17 GDPR).

You have the right to request restriction of processing in the circumstances provided by law, while requests are being resolved or while it is assessed whether legitimate grounds override yours (right to restriction, Article 18 GDPR).

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller when processing is based on consent or contract and carried out by automated means (right to data portability, Article 20 GDPR).

You have the right to object at any time, on grounds relating to your particular situation, to processing based on legitimate interest, including profiling. Where data is processed for direct marketing purposes, you have the right to object at any time, including profiling related to such marketing (right to object, Article 21 GDPR).

You have the right to lodge a complaint with the competent supervisory authority in Spain, the Spanish Data Protection Agency (AEPD), located at C/ Jorge Juan, 6, 28001 Madrid, and available at www.aepd.es.

To exercise these rights, you may contact us at info@bindtec.eu with the subject “GDPR Rights Exercise” and include a copy of your ID or equivalent document, or by postal mail to our address in Pozuelo de Alarcón, Madrid. Exercising these rights is generally free of charge.

 

9. COOKIES AND TRACKING TECHNOLOGIES

A “cookie” is a small text file stored on a user’s device when visiting a website. Cookies serve various purposes: enabling efficient navigation, providing functionality, remembering preferences, and improving user interaction. They are also used for advertising and statistical analysis.

The Website uses several types of cookies. Strictly necessary cookies are essential for the basic functioning of the site and do not require prior consent. Preference or functional cookies remember user settings such as language and require consent. Analytics cookies, including those using Snowplow Analytics, collect information about browsing behavior and require consent. Advertising and third-party cookies are used for targeted advertising and remarketing and also require consent. Google Web Fonts may trigger a connection to Google servers; see https://policies.google.com/privacy.

Upon first access, users are shown a cookie management panel allowing granular consent. Non-essential cookies are not required to access the site. Consent can be withdrawn at any time. Users may also configure their browser to block cookies, although this may affect functionality.

 

10. MARKETING AND COMMERCIAL COMMUNICATIONS

We may send commercial communications if we have explicit consent or, in B2B relationships, based on legitimate interest. You may object at any time via the unsubscribe link or by emailing info@bindtec.eu with “Unsubscribe commercial communications”. Once processed, we will stop sending such communications within the legally required timeframe.

Even if you unsubscribe from marketing, we may still send administrative or service-related communications linked to contracted services, which are necessary for the contractual relationship.

Behavioral tracking for marketing purposes, including IP-based company identification, will only be carried out with appropriate legal basis and consent via the cookie panel. Data will be kept strictly confidential and not shared with third parties for their own purposes.

 

11. DATA SECURITY

We apply appropriate technical and organizational measures in line with current technology and risk levels to protect personal data against unauthorized access, loss, alteration, or disclosure. All processors are required to implement equivalent security measures under Article 28 GDPR. However, no system is completely secure; users should report any security incidents to info@bindtec.eu.

 

12. MINORS

Personal data processing of minors is only lawful with consent if they are over 14 years old, except where parental or guardian authorization is required by law. For children under 14, consent from a parent or guardian is required.

Our Website is not intended for children under 14. We do not knowingly collect data from them without parental consent. If such data is detected, it will be deleted upon request to info@bindtec.eu.

 

13. CORPORATE TRANSACTIONS

This Privacy Policy only applies to our own processing activities. We are not responsible for third-party websites accessible via links. Users should review third-party privacy policies before providing data.

 

14. THIRD-PARTY WEBSITES

This Policy applies only to our Website and services. We are not responsible for third-party websites linked from our site. Users should consult those third-party policies.

 

15. PRIVACY POLICY UPDATES

We reserve the right to modify this Policy to reflect legal, jurisprudential, or operational changes. The latest version will always be available at bindtec.eu. Where required, we will request new consent. Continued use of the Website after updates does not imply acceptance where separate legal bases are required.

 

16. CONTACT

If you have questions about this Privacy Policy or your rights, you may contact us:

Email: info@bindtec.eu
DPO: Ugo de Benedictis — info@bindtec.eu
Postal address: Via de las Dos Castillas 33, Ática – Building 7 – 1st floor, 28224 Pozuelo de Alarcón (Madrid)

You may also file a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan, 6, 28001 Madrid (www.aepd.es), without prejudice to other administrative or legal remedies.