Privacy Policy

1. Data controller

For privacy questions and data protection requests, contact info@elanglobalvision.com.

Trading name

Elan Global Vision

Full legal name

Elan Global Vision Sociedad Limitada

Spanish tax identification number

B75306753

Registered office

Plaza Ciudad de Viena, núm. 6, 28040 Madrid

Commercial Registry

Commercial Registry of Madrid. Section 8, sheet M-836429, entry 1. IRUS: 1000434522558.

Contact

info@elanglobalvision.com

Website

https://elanglobalvision.com

2. Information that may be received

There are no forms on this website. The contact link opens your email application; we only receive a message if you choose to send it. It may include your email address, name, organisation and any information or files you share. Please avoid sending sensitive information that is not needed for your enquiry.

Delivering and protecting the website may involve the hosting service processing your IP address, date and time, requested path and technical browser information. The scope and retention of these records must be confirmed with the final provider.

Fonts and visual assets are served locally. Background motion is calculated in your browser. The application includes no analytics, advertising, visitor profiling or automated decision-making.

3. Purposes and legal bases

Visiting the website is not treated as consent to other uses. There are no marketing subscriptions or tracking campaigns incorporated into this website.

• Responding to general enquiries and maintaining the communication you request: our legitimate interest in responding to contacts and professional relationships (GDPR Article 6(1)(f)), balanced against your rights and expectations.
• Taking steps you request before a possible contract, where you would be a party to it: GDPR Article 6(1)(b). Communication with representatives of organisations relies, where appropriate, on the legitimate interest in maintaining that professional relationship.
• Delivering and protecting the website, including strictly necessary technical processing: our legitimate interest in operating a secure, functioning service (GDPR Article 6(1)(f)).
• Handling rights requests and legal requirements: compliance with legal obligations (GDPR Article 6(1)(c)).

4. Retention

Enquiries that do not lead to a collaboration will be kept for no more than 12 months after the last substantive communication. They may be deleted sooner when no longer needed. The mailbox will be reviewed monthly to apply this policy; automated messages will not restart the retention period.

If a collaboration begins, only the records needed for that relationship will be kept while it continues. Afterwards, only information required by law or needed to address specific liabilities will be retained for the periods applicable to each record. Where Article 32 of the Spanish LOPDGDD requires data to be blocked, it will be removed from ordinary use and destroyed when the relevant period expires.

The 12-month period is an EGV operational policy for responding to and following up professional enquiries, not a general deadline imposed by the GDPR. It does not restrict your rights or justify keeping unnecessary information.

Removal from the mailbox and deletion of the provider’s technical copies do not happen simultaneously. Those copies follow the deletion cycle of the contracted service. Hosting logs require a separate retention period appropriate to delivery and security; the 12-month email policy does not apply to them.

5. Recipients and service providers

Email is managed through Google Workspace. Messages will be used solely to answer enquiries and discuss possible collaborations. They will not be used for marketing campaigns or automatically shared with other group companies.

Cloudflare Pages is the planned hosting service for delivering and protecting the website files. Its account and project have not yet been configured. The hosting service does not receive the contents of emails sent to EGV through the contact link.

Data may be accessed by people authorised to handle each communication and by the providers delivering the relevant services, subject to applicable data protection terms. Information may be disclosed to authorities where legally required.

[PENDING: verify the Google Workspace account terms and retention settings and, when configuring Cloudflare Pages, the enabled features, logs and their retention, and the transfer safeguards applicable to the contracted services]

6. International transfers

Google and its subprocessors may process data outside the European Economic Area. The planned Cloudflare hosting may also involve international processing. This policy does not assume that all data remains in Spain or the European Union.

The providers’ published terms set out transfer mechanisms, including adequacy decisions and standard contractual clauses, depending on the destination and circumstances. Their application to EGV’s services and configuration will be verified before this policy is finalised. You may request information about recipients and safeguards using the contact email.

7. Your rights

You may request access, rectification, erasure, objection, restriction of processing and portability in the circumstances provided by the GDPR. Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.

To exercise your rights, email info@elanglobalvision.com and describe your request. Additional identifying information will only be requested if there are reasonable doubts about your identity. Requests will generally be answered within one month; any extension allowed by law will be explained.

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD), particularly if you believe your rights have not been respected.

8. Legal framework and changes

This policy is prepared under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018. It will be updated when actual processing changes; any new use requiring prior information must be explained beforehand.