Legal
Privacy Policy
Last updated: 27 August 2026
This Privacy Policy explains how VIVAI Agency, the public-facing brand of the controller identified below, handles personal data when you visit vivai.agency, contact us, or use a VIVAI service.
1. Who controls your data
Mundo pan Ibiza sl
Cami Cas colls,, seccion 1, poligon 09 11037
07817 Sant Jordi de Ses Salines, Ibiza
España
VAT: ESB16627432
For privacy questions or rights requests, contact hello@vivai.agency. VIVAI Agency is the public-facing brand; the legal controller is the entity named above.
2. Data we may process
Depending on how you interact with us, we may process:
- Contact data, such as your name, email address, company name, and phone number.
- Inquiry and project data that you send by email, direct contact, or an agreed form.
- Technical data, such as IP address, browser and device information, referral source, and pages visited.
- Communication records connected with an inquiry or client relationship.
- Optional analytics data collected only after you choose analytics in the privacy settings.
Please do not send health, financial, identity-document, employment, or other sensitive information through a general inquiry or free-text questionnaire field.
3. Workflow-research questionnaire
If VIVAI makes a workflow-research questionnaire available, answers will be used to understand business processes and prepare the specific review requested by the participant. Optional follow-up contact is a separate purpose: name, email, and contact consent are requested only when the participant chooses to be contacted about that specific consultation. This does not create permission for newsletters or unrelated marketing.
The current staging questionnaire prevents submission and does not transmit or store answers. It must remain non-public and non-sending until the final notice, storage, access, retention, deletion, and security arrangements are approved.
4. Purposes and legal bases
- Responding to inquiries and taking pre-contractual steps, where requested.
- Providing and managing agreed services.
- Operating and securing the website and meeting legal obligations.
- Measuring site usage only after your explicit analytics choice.
- Processing questionnaire participation or the requested consultation contact only for the stated purpose and legal basis.
5. Consent and language storage
The site stores your consent choice under vivai-consent-v1 in browser local storage. The record is versioned so a changed consent version can require a new choice. The default site language is determined server-side from the visitor’s country: Spain receives Spanish, the Netherlands Dutch, and other locations English. A manually selected language is remembered separately in vivai-lang-manual in browser local storage. No automatic country-language cookie is used.
6. Analytics
Optional Google Analytics measurement is not initialised before an explicit analytics acceptance. If you accept analytics, the site loads the Google measurement script and sends usage events configured with IP anonymisation. You can reject or withdraw analytics through the persistent privacy-settings link in the footer.
7. Recipients and third-party services
Where necessary, data may be handled by the website host, technical service providers, analytics providers after consent, professional advisers, or authorities where required by law. The website also requests fonts from Google Fonts, scripts from jsDelivr, and selected article imagery from Unsplash. These browser requests may disclose technical request information to those providers. Their own privacy terms apply.
8. Retention
We retain personal data only as long as needed for the stated purpose, legal, accounting, security, or dispute requirements. The current working rule for research-only answers and consultation leads is normally 12 months, subject to the final operational and legal review of the live questionnaire process. Consent records are retained for as long as reasonably necessary to demonstrate the consent relied upon.
9. International transfers
Some providers may process technical or personal data outside Spain or the European Economic Area. The applicable provider safeguards and transfer basis must be assessed for the service actually used.
10. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent where consent is the basis. Contact hello@vivai.agency. You may also complain to the Spanish Data Protection Agency (AEPD) at aepd.es.
11. Security
We use reasonable technical and organisational measures to protect personal data. No internet transmission or storage system can be guaranteed completely secure.
12. Changes
We may update this policy when the website, processing, providers, or legal requirements change. The effective date shown above will be updated accordingly.
13. Contact
For privacy questions or rights requests, contact hello@vivai.agency.