Privacy policy

This policy explains which personal data we process on www.duravigil.com, why, on what legal basis, for how long and how you can exercise your rights, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018.

Who the controller is

• Controller: HIDENENTERPRISES S.L., NIF B75661645
• Address: Av. Mil·lenari de Catalunya 32, 25200 Cervera (Lleida), Spain
• Privacy contact: info@duravigil.com

What data we process and why

Contact form

We process what you write in the form: your name, company, email address, phone number if you give it, the products you make, sell or import and your message, plus the language of the page you write from, so that we can answer in that language. We use it to answer you and, if you ask, to prepare a proposal.

• Legal basis: taking steps at your request before a possible contract (Art. 6(1)(b) GDPR).
• Where it goes: the website does not keep the message. The form passes it to our internal chat (Microsoft Teams, part of Microsoft 365), and we answer you by email.
• How long: while the conversation lasts. If we do not end up working together, we delete it no later than 12 months after the last contact. If we sign a contract, we keep what that contract and the law require.

Anti-robot check on the form

On the contact page we use Cloudflare Turnstile to tell people from robots. To do so, Cloudflare processes your IP address, the TLS fingerprint of the connection, your browser's user agent and our site key. According to Cloudflare, this data is used only to detect robots and to improve that detection, not to identify you. Turnstile loads only on the contact page.

• Legal basis: our legitimate interest in protecting the form against automated submissions (Art. 6(1)(f) GDPR).

Browsing the website

Cloudflare serves the website and protects it against attacks. To do so it processes your IP address and the technical data of each request (browser, page requested, time). We do not use them to identify you.

• Legal basis: our legitimate interest in a website that works and is secure (Art. 6(1)(f) GDPR).

Visit statistics

We use Cloudflare Web Analytics to know how many visits each page gets, from which country and with what type of browser, always in aggregate. It uses no cookies, stores nothing in your browser and builds no profile of you.

• Legal basis: our legitimate interest in knowing which parts of the website are used (Art. 6(1)(f) GDPR).

CRA self-check

The self-check runs in your browser. Your answers are not sent anywhere and not stored, and they are lost when you close or reload the page.

Security reports

If you report a vulnerability to security@duravigil.com, we process the data you give us (name or alias, email address and what you tell us in the report) to handle it and, if you ask, to thank you publicly. The details are in the disclosure policy.

• Legal basis: our legitimate interest in the security of our services (Art. 6(1)(f) GDPR).
• How long: while the case is open and up to three years after it is closed.

Who else sees your data

We do not pass your data to third parties unless the law requires it. Two providers process it on our behalf, under a data processing agreement:

• Cloudflare, Inc. (United States): hosting and protection of the website, delivery of the form, the anti-robot check and visit statistics.
• Microsoft Ireland Operations Limited (Ireland): Microsoft 365, where our email and our internal chat are.

Transfers outside the European Economic Area

Cloudflare is a US company, and Microsoft may process some data outside the European Economic Area. Both take part in the EU-US Data Privacy Framework and sign standard contractual clauses approved by the European Commission.

Cookies and storage in your browser

This website uses no advertising or analytics cookies, so we do not ask for your consent. It stores two preferences, and only when you choose them:

Your browser sends the dv-lang cookie to this website on each visit. It does not identify you, and you can delete it from your browser. The theme preference never leaves your device. On the contact page, Turnstile may use the technical storage strictly necessary for its check.

Your rights

You can ask us for access to your data, to correct or delete it, to object to its processing, to restrict its use or to receive it in a format you can take elsewhere. Write to info@duravigil.com or by post to our registered office. We will answer within one month.

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es), or to the data protection authority of the EU country where you live or work.

Automated decisions

We do not take automated decisions or build profiles with your data.

Changes

If we change this policy, we will publish the new version here with its date. If the change is significant and we have your email address, we will let you know.