Privacy Policy

Data Controller

VisaCentro. Email address: contact@visacentro.es.

The practice operates remotely and is not established in the European Union. It nevertheless processes the data of persons residing in the Union in accordance with Regulation (EU) 2016/679, to which it is subject by reason of the activity it directs towards them.

What the practice processes, and why

The practice processes personal data for four purposes, each with its legal basis.

Responding to a request for a preliminary review. The data processed are the answers to the questionnaire, the name, the telephone number and, if provided, the email address. Legal basis: pre-contractual measures taken at the request of the individual.

Performing the support service. In addition to the above data, the documents sent by the client and the exchanges with their adviser are processed. These documents, by their nature, include data on civil status, nationality, family situation, address and financial resources. Legal basis: performance of the contract.

Complying with the practice's legal obligations. Billing and payment data are processed. Legal basis: legal obligation, in particular for accounting and tax purposes.

Measuring site traffic. The data processed are the page viewed, the source, the language, a device class, a country inferred from the connection, a session identifier stored in a cookie and a non-reversible fingerprint of the IP address. Legal basis: the practice's legitimate interest in knowing its site's traffic. This measurement is carried out by the practice itself, without third-party scripts, and no browsing data is transmitted to any third party or used for advertising purposes.

Sensitive data

An immigration case may contain information falling into special categories, in particular a medical certificate required by an administration. This information is processed only when the procedure requires it, on the basis of the client's explicit consent, and for the sole purpose of preparing the case.

Recipients

The data are not sold, rented or transferred.

The data are accessed by the practice's advisers, within the limits of what their mission requires, as well as by the following technical service providers, acting as processors and bound by contract:

the database and document storage space host, in the European Union; the email sending service provider, in the European Union; the payment service provider, which processes card data without the practice having access to it; the provider of the automated analysis service used to prepare the preliminary review.

Transfers outside the European Union

The automated analysis service used for the preliminary review may process data outside the European Union. This transfer is governed by the standard contractual clauses adopted by the European Commission.

Automated decision-making

The preliminary review produces an analysis by means of automated processing. This analysis does not lead to any decision producing legal effects: it provides guidance, and an adviser reviews the situation before any further action is taken. The client may request that their situation be reviewed without taking this analysis into account, express their point of view and contest the content of the analysis by writing to contact@visacentro.es.

Retention periods

Requests that have not resulted in a case are kept for twenty-four months from the last exchange, then deleted.

Cases are kept for the duration of the support, then for five years from the end of the relationship, a period corresponding to the applicable limitation periods.

Accounting documents are kept for the period provided for by tax law.

Traffic measurement data are kept for twenty-five months.

At the end of these periods, the data are deleted. An anonymous record, containing no data that could identify a person, may be kept for statistical purposes.

Your rights

Every person has the right to access their data, to have them rectified, to request their erasure, to object to their processing, to request the restriction of their processing and to receive a copy of them in a machine-readable format.

The client area allows two of these rights to be exercised directly: downloading a complete archive of the case, and requesting erasure. Other requests should be sent to contact@visacentro.es and will receive a response within one month.

Erasure is carried out after settlement of current commitments and subject to the data that the practice must retain by virtue of a legal obligation.

Any person may lodge a complaint with the supervisory authority of their country of habitual residence, their place of work or the place where the alleged infringement was committed.

Cookies

The site places three categories of cookies, all placed by the site itself, none for advertising purposes.

A traffic session cookie, kept for six months, which makes it possible to distinguish between successive visits from the same browser. A language cookie, which remembers the chosen language. A client or adviser session cookie, placed after login, which keeps the session open.

No advertising cookies, third-party trackers or social networks are present on this site.

Security

Exchanges with the site are encrypted. Documents are stored in encrypted form and are only accessible via temporary links. Adviser access is individual, protected by a second factor, and logged. IP addresses are only stored as a non-reversible fingerprint.

Changes

Any substantial change to this policy will be brought to the attention of clients with an ongoing case.