Privacy policy

Last updated: 25 August 2026

This policy explains how personal data is handled under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

Controller
Carlos Carazo de la Fuente
Tax ID (NIF / CIF)
17462676H
Address
Zaragoza, Spain
Email
admin@neovixta.com

2. What this site collects

Browsing this site collects no personal data from you directly. There is no contact form, no account, no newsletter, no analytics and no advertising or social tracking. No cookie is set — see the cookie policy.

Two things are nonetheless processed:

  • Server access logs. The hosting provider records the usual technical data for every request — IP address, date and time, the page requested, HTTP status, browser user agent. This is automatic and necessary to operate and secure the server.
  • Email you send us. If you write to the address above, we process the data in your message: your name, your email address, and whatever you choose to tell us about your project or your organisation.

3. Purposes and legal basis

  • Answering your enquiry and preparing a possible proposal. Legal basis: performance of a contract or pre-contractual steps at your request (GDPR Art. 6.1.b).
  • Operating, maintaining and securing the website through server logs. Legal basis: legitimate interest in keeping the service available and protected against abuse (GDPR Art. 6.1.f).
  • Meeting legal obligations, in particular tax and accounting duties where a commercial relationship follows. Legal basis: legal obligation (GDPR Art. 6.1.c).

Data is not used for automated decision-making or profiling.

4. How long data is kept

  • Enquiries that do not lead to a project: kept while the exchange is live and deleted afterwards, at most 12 months from the last contact.
  • Client records: for the duration of the relationship and thereafter for the periods required by commercial and tax law (generally 6 years under the Spanish Commercial Code, 4 years for tax purposes).
  • Server logs: the retention period applied by the hosting provider, generally short.

5. Who else sees the data

Data is not sold, and not shared for anyone else's marketing. It is accessible to service providers acting as data processors under a contract meeting GDPR Art. 28:

  • Hosting: Arsys Internet S.L.U. (Spain). Servers in the EU.
  • Email: Arsys Internet S.L.U. (Spain).
  • Where legally required, public authorities.

No personal data is transferred outside the European Economic Area. Both processors named above are Spanish companies operating servers inside the EU.

6. Your rights

You may request access to your personal data, and its rectification or erasure; you may request restriction of processing, object to processing, and request portability. Write to admin@neovixta.com, stating your request. We may ask you to confirm your identity.

If you believe your data has been mishandled you can complain to the Spanish supervisory authority, the Agencia Española de Protección de Datos (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid.

7. Security

The site is served over HTTPS and appropriate technical and organisational measures are applied to the data received. No system is perfectly secure, but data is kept to the minimum needed and access is restricted to those who need it.

8. Client footage and images

Computer vision projects often involve video or images that may contain identifiable people. That data is processed under a separate written agreement in which the client is the data controller and Neovixta acts as processor, covering purpose, retention, security measures, sub-processors and deletion on termination. None of that material is published on this site.

9. Changes

This policy may be updated. The date at the top always reflects the version in force.