1. Who controls your data
The controller for the processing described in this policy is VDD (Virtual Data & Dimension), an independent technology studio. You can contact us at contact@vddtech.io.
This policy covers this website and the communications that you initiate from it. A client project may involve additional processing governed by its own contract, instructions and privacy information.
2. Data we handle, purposes and lawful bases
We limit collection to what is relevant for operating the website, respecting your choices and responding to you. The lawful basis depends on the activity and the context of your request.
| Activity | Data involved | Purpose and lawful basis |
|---|---|---|
| Contact form | Name, email address, optional company, selected area, message and subsequent correspondence. | To answer your inquiry and take steps you request before a possible contract (GDPR Article 6(1)(b)). For general professional messages not directed at a contract, our legitimate interest in communicating with people who contact us applies (Article 6(1)(f)). |
| Website delivery and security | Potential server records such as IP address, date and time, requested address, browser or user-agent information, response status, and security or error events. | To deliver, secure, diagnose and maintain a reliable website, based on our legitimate interests in service security and availability (Article 6(1)(f)), and to meet legal obligations when one applies (Article 6(1)(c)). |
| Cookie choice | Your accept or reject decision, preference status and consent format version, stored on your device. | To apply and remember the choice you made, record its policy version and time on that device, and avoid asking on every page. Where this information is personal data, we rely on compliance with applicable privacy requirements and our legitimate interest in recording those choices (Articles 6(1)(c) and 6(1)(f), as applicable). |
| Language preference | English or Portuguese selection stored in your browser. | To show the language you selected on later visits. Optional storage is used only with your consent (Article 6(1)(a)), which you may withdraw at any time. |
| Email or WhatsApp conversation | Your contact details, account information made visible by the service, message and any information you choose to provide. | To respond and take requested pre-contractual steps (Article 6(1)(b)) or, for other professional communication, our legitimate interest in answering you (Article 6(1)(f)). |
The website does not use analytics, advertising, profiling or third-party media embeds. We do not make decisions producing legal or similarly significant effects about you solely by automated means through this website.
Providing data through the contact form is not a statutory requirement. Name, email and message are required so that we can identify and answer the inquiry; company is optional, and the area selection helps route the message. If required information is not provided, the form cannot be submitted or answered. Cookie and language preferences are optional and refusing them does not restrict the core website.
3. Where the data comes from
Most data comes directly from you when you complete the contact form, email us, select a language or cookie preference, or start a conversation. Technical records may be generated automatically by the web server and hosting infrastructure when your browser requests a page or submits the form.
If you include personal data about another person in a message, please share only what is necessary and make sure you are entitled to provide it. If we receive personal data from another source and applicable law requires direct notice, we will provide the relevant information within the required period.
4. Who may receive the data
Access is limited to VDD personnel and suppliers that need the data for the purposes described above. Recipient categories may include website hosting, infrastructure and email providers; security and technical support providers; professional advisers; and public authorities where disclosure is legally required.
Where a supplier processes data on our behalf, VDD requires appropriate terms addressing documented instructions, confidentiality and security obligations, as applicable. We may also disclose data when necessary to establish, exercise or defend legal claims, protect the website and its users, or comply with a binding legal request.
5. WhatsApp and external links
VDD does not embed WhatsApp on the website and does not send data to WhatsApp merely because you load a VDD page. A transfer to WhatsApp occurs only when you actively follow the WhatsApp link. You then leave vddtech.io and the external service processes information under its own terms and privacy notice.
If you choose to message VDD through WhatsApp, we receive and use the information you send to answer you. You can use the contact form or contact@vddtech.io instead if you do not want to use that service.
6. International transfers
Information you submit directly to VDD is received and may be handled in Brazil, where VDD operates. Service providers may also process data in other countries according to where their infrastructure and support operations are located.
Where VDD makes an international transfer subject to Chapter V of the GDPR and the destination is not covered by an applicable adequacy decision, we assess and put an appropriate lawful mechanism in place before the transfer. This may include the European Commission Standard Contractual Clauses and supplementary technical or organisational measures where appropriate. You may contact us for information about safeguards relevant to your data.
7. How long we keep data
We use the following periods or criteria and delete or anonymise data when it is no longer needed, unless preservation is required by law or for a legal claim.
- Contact inquiries and related correspondence are retained for no more than 24 months after the last meaningful interaction when no client relationship follows.
- If an inquiry leads to a client or supplier relationship, relevant records may be retained for the life of that relationship and the applicable contractual, tax, accounting and limitation periods.
- Technical logs are kept for the shortest period reasonably needed for operation, troubleshooting, abuse prevention and incident investigation, based on hosting configuration and the nature of any event. A relevant record may be isolated for longer when needed for a security incident or legal claim.
- The cookie-choice record on the device lasts up to six months. The language preference remains until you change it, withdraw preference consent, the consent record expires or becomes invalid, or you clear the site data in your browser.
- Records of privacy requests are kept only as long as needed to fulfil the request and demonstrate compliance, subject to applicable limitation periods.
8. Security
We use proportionate technical and organisational measures designed to protect data against unauthorised access, alteration, disclosure and loss. These include limiting access, validating form submissions and using transport security where supported. No internet service can guarantee absolute security, so we also review and respond to suspected incidents.
9. Your data protection rights
Depending on the law applicable to your situation, you may ask VDD to:
- confirm whether we process your personal data and give you access to it and related information;
- correct inaccurate data or complete incomplete data;
- erase data when a legal ground for erasure applies;
- restrict processing in the circumstances provided by law;
- provide data you supplied in a structured, commonly used and machine-readable format, and transmit it where technically feasible, when portability applies;
- object to processing based on legitimate interests, including any direct marketing; VDD does not currently use website data for direct marketing;
- withdraw consent at any time, without affecting processing that was lawful before withdrawal;
- obtain information about recipients, international-transfer safeguards and, where Brazilian law applies, public and private entities with which data has been shared;
- request anonymisation, blocking or deletion of unnecessary, excessive or unlawfully processed data where Brazilian law provides that right; and
- request human review where a decision based solely on automated processing produces effects covered by applicable law. This website does not currently make such decisions.
To exercise a right, email contact@vddtech.io and describe your request. We may ask for information reasonably necessary to verify your identity and protect your data. Requests are handled without charge unless applicable law permits a reasonable fee for a manifestly unfounded or excessive request.
If the GDPR applies, you may complain to the data protection authority in the European Union or European Economic Area country of your habitual residence, place of work or the alleged infringement. In Brazil, you may petition the Autoridade Nacional de Proteção de Dados (ANPD). We welcome the opportunity to address your concern directly first.
10. Changes and contact
We may update this policy when the website, our practices or applicable requirements change. The date at the top identifies the current version. Material changes affecting a consent-based activity will be presented before that activity continues under the new purpose.
Privacy questions and rights requests can be sent to VDD (Virtual Data & Dimension) at contact@vddtech.io.