Privacy Policy
viKioo Retail Services S.L. processes the personal data of users of this website in accordance with EU Regulation 2016/679 (GDPR), Spanish Organic Law 3/2018 (LOPDGDD), and other applicable data protection legislation.
1. Data controller
- Company name: viKioo Retail Services S.L.
- Tax ID (CIF): B71561831
- Registered address: Calle Cuatro Esquinas, 2, 1st floor, door 1, 31300 Tafalla (Navarra), Spain
- Contact email: info@vikioo.com
2. Current data processing
2.1 Contact enquiries and early access requests
When you contact viKioo through the contact form or the channels provided (email, phone), we may process the following personal data:
- Name and surname (if voluntarily provided)
- Email address
- Phone number (if provided)
- Company or brand name
- Message content
Legal basis: Consent of the data subject (Art. 6.1.a GDPR) and legitimate interest in responding to commercial enquiries (Art. 6.1.f GDPR).
Retention: For as long as necessary to handle the request and for up to one additional year.
Recipients: Data is not shared with third parties except where legally required.
2.2 Local technical preferences
This website stores two preference values on your device using the browser's localStorage and sessionStorage: your visual theme preference (light or dark) and whether you have dismissed the language suggestion notice. These values are not personal data, do not leave your device, and are never transmitted to any server.
3. Future data processing (viKioo platform)
When the viKioo service is in production, additional categories of data will be processed. We inform you in advance of the planned conditions:
3.1 Waiting list registration
When the registration form is enabled, we will process your email address to notify you of service availability.
3.2 Biometric data for avatar generation (Art. 9 GDPR)
The core functionality of viKioo requires capturing body measurements to generate a personalised avatar. This data constitutes biometric data within the meaning of Arts. 4(14) and 9 GDPR and is subject to special processing restrictions.
viKioo commits to, before activating this functionality:
- Conducting a Data Protection Impact Assessment (DPIA) in accordance with Art. 35 GDPR.
- Obtaining the user's explicit, free, specific and informed consent prior to any biometric data capture.
- Updating this policy with full details of the processing, retention periods, recipients and security measures, prior to launch.
- Implementing the granular consent mechanisms required by applicable law.
4. Data subject rights
Under the GDPR and LOPDGDD, you may exercise the following rights at any time by writing to info@vikioo.com with the subject line «GDPR Rights» and a copy of your identity document:
- Access: know what personal data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion of your data when no longer necessary.
- Objection: object to processing based on legitimate interest.
- Restriction: request that we temporarily suspend processing.
- Portability: receive your data in a structured, commonly used format.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es, or with the supervisory authority of your country of residence.
5. Security
viKioo implements appropriate technical and organisational measures to ensure the security of personal data and prevent its loss, alteration, unauthorised processing or access, taking into account the state of the art, implementation costs, and the nature, scope, context and purposes of the processing, as well as the associated risks.
6. Changes to this policy
viKioo reserves the right to update this policy when required by legal changes, new service features or organisational decisions. Material changes will be published on this page with an updated date at the top.
This document has been generated as an indicative draft. Please review it with your legal advisor or data protection officer before publishing in production, particularly regarding the processing of biometric data (Art. 9 GDPR) and the DPIA requirement.