Privacy policy

1. Data controller

The controller of your personal data is:

VELTIA SOFTWARE SL
Tax identification number (CIF / NIF): B93998540
Registered office: Av Josep Tarradellas 38 Barcelona, 08029 Spain, Barcelona, Spain
Email: [email protected] · Phone: +34 673 338 611

2. What data we process and why

We only process the personal data you give us, and only for the purposes described below:

• Placing an order — name, email address, billing/shipping address, phone (optional) and payment confirmation, to process your purchase, deliver the service and issue your invoice. Legal basis: performance of the contract (GDPR Art. 6.1.b) and legal obligations (Art. 6.1.c).
• Creating an account — name, email and password, so you can access your orders and invoices. Legal basis: performance of the contract.
• Contact and quote requests — the details you send in our forms, to answer your enquiry or prepare a proposal. Legal basis: your consent (Art. 6.1.a) or steps taken at your request before entering a contract (Art. 6.1.b).
• Communication — we may email you about your order or project. Legal basis: performance of the contract. We do not send marketing newsletters unless you subscribe separately.

3. Payment data

Payments are processed by our payment provider, which is certified under the PCI DSS security standard. Card numbers and related payment data are handled by the provider and are never stored on our servers. We only receive confirmation that a payment succeeded, together with the reference needed for invoicing and order tracking.

4. Cookies

This website uses only the cookies that are strictly necessary for the site to work, such as remembering your shopping cart and keeping you logged in. We do not use advertising or third-party tracking cookies by default. Please see our Cookie Policy for full details.

5. Recipients and international transfers

We share your data only with the service providers needed to run the website and fulfil orders, including our hosting provider and payment provider. Where a provider is located outside the European Economic Area, we ensure the transfer is protected by appropriate safeguards recognised by the European Commission (such as standard contractual clauses). We never sell your personal data.

6. Retention

We keep personal data only as long as necessary for the purposes described above. Invoices and order records are kept for the period required by Spanish tax law (generally six years). Enquiries that do not lead to an order are deleted after a reasonable period, typically 12 months.

7. Your rights

Under the GDPR and LOPDGDD you have the right to:

• access your personal data and receive a copy;
• rectify inaccurate data;
• request erasure ("right to be forgotten");
• object to processing and request restriction;
• data portability, where it applies;
• withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email [email protected] with the subject "Data request". We will respond within one month as required by law. If you believe we have not handled your data properly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

8. Security

We apply appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls and secure payment processing. While no method of transmission is 100% secure, we work to protect your information at all times.

9. Changes to this policy

We may update this policy from time to time. The current version is always available on this page, and the date of the last change is shown below.

Last updated: 2 September 2026