Privacy policy — Violet Solutions

Data controller

Violet Solutions S.L., tax ID B05627583, registered office at Av. Jaume I, 95, 1.º, puerta 2, 08226 Terrassa (Barcelona), Spain. Contact address for any data protection matter: info@violetsecurity.io.

What data we process, and where it comes from

We only process the data you give us, plus the technical records any visit to a web page leaves behind. We do not buy databases, we do not enrich your data from external sources, we process no special categories of data and we do not build profiles.

From the proof-of-concept form: name, work email address, company, job title (optional), modules of interest (optional) and the content of your message.
From an email or a call: the contact details and the content of the communication.
From the visit itself: technical server logs — IP address, date and time, resource requested, user agent — which our hosting provider keeps for security and in order to serve the page.
From this site, nothing else: there are no cookies, no local storage, no analytics and no advertising pixels.

Purposes and legal bases

Each purpose has its own legal basis, and none is used for anything else:

Answering your request and preparing the scope proposal for a proof of concept: pre-contractual steps taken at your request (art. 6.1.b GDPR). We do not ask for your consent for this, because the basis is your own request: cumulating the two for one purpose would empty the right to withdraw it of meaning.
Managing the contractual relationship and invoicing, if the request progresses: performance of the contract and compliance with legal obligations (arts. 6.1.b and 6.1.c GDPR).
Keeping the site secure and preventing abuse, including the form’s anti-spam check: legitimate interest (art. 6.1.f GDPR).
Sending commercial communications: only with your prior, express and revocable consent (art. 6.1.a GDPR and art. 21 LSSI-CE), collected separately and never as a condition of submitting the form. We send none today and the form does not collect that consent.

How long we keep it

The period depends on why the data was collected. When it expires, the data is deleted or anonymised.

Requests that do not progress: one year from the last contact.
Requests that lead to a proof of concept or a contract: for the duration of the relationship and thereafter for the applicable statutory limitation, accounting and tax retention periods.
Record of your consent and of the information provided to you: while the processing is live and for as long as it may have to be evidenced.
Technical server logs: our hosting provider’s retention period, limited to what is necessary for security and service delivery.

Recipients and processors

We do not sell or disclose your data. We only share it where a legal obligation requires it, or with the providers we need in order to operate, which act as processors under a contract compliant with article 28 GDPR and only on our instructions. By category:

Website hosting and delivery provider.
Corporate email provider.
Form submission service, once it is live.
Meeting scheduling service, only if you choose to use it to book a call.

International transfers

The processing agreement identifies the hosting provider and the specific region where data is processed, and processing is confined to that region. If any processor were to act from a third country, the transfer would rely on an adequacy decision or on standard contractual clauses with whatever supplementary measures are appropriate, under chapter V GDPR. You can ask us for the current list of processors, with their identity, their location and the basis of any transfer, by writing to info@violetsecurity.io.

Your rights

You may exercise the following rights at any time, free of charge, by writing to info@violetsecurity.io and stating which one. We may ask you to evidence your identity, and we answer within one month, extendable to two if the request is complex.

Access to your data and to information about its processing.
Rectification of inaccurate data.
Erasure, once the data is no longer necessary for the purpose that justified it.
Objection to processing based on our legitimate interest.
Restriction of processing while a challenge is verified.
Portability of the data you provided, in a structured, commonly used format.
Withdrawal of consent, at any time and without affecting the lawfulness of prior processing.

Complaint to the supervisory authority

If you believe the processing does not comply with the regulations, you may lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es), which is the competent supervisory authority. We would appreciate it if you wrote to info@violetsecurity.io first: almost everything is resolved sooner that way.

Automated decisions

We take no automated decisions producing legal effects concerning you or significantly affecting you, and we build no profiles from the data collected on this site. The platform’s AI assistance features operate on the data a client enters into their own environment, not on visitors to this website.

Minors

This site is aimed at organisations and professionals. We do not knowingly collect data from children under fourteen; if we become aware that such data has been provided, we delete it.

Cookies and storage on your device

This site installs no cookies and writes nothing to your browser: no first- or third-party cookies, no local storage, no equivalent identifiers. The cookie policy explains this in detail, including why you will not see a consent banner and what we would do if that ever changed.

Security

We apply technical and organisational measures appropriate to the risk, including encryption in transit and at rest, role-based access control and activity logging. The site is served over HTTPS only and under a strict content security policy. The detail is set out on our security page.

Changes to this policy

If we amend this policy, we will publish the new version at this same address and update the date shown in the header. Where a change affects processing based on your consent, we will tell you and, where appropriate, ask for fresh consent.