Privacy Policy

Last update: February 24, 2026

vangoura makes this privacy policy available to you through the website https://vangoura.com in order to inform you, in detail, about how we process your personal data and protect your privacy and the information you provide us. If any changes are made to this policy in the future, we will notify you via the website or other means so that you are aware of the new privacy conditions that have been introduced.

Index

Introduction

What is this policy about? This document explains how this website collects, uses, and protects your personal data to achieve the purposes described herein.

What is personal data? Personal data is information that can be used to identify you, either directly or indirectly. This includes data such as your first name, last name, email address, tracking technologies (such as cookies or tracking pixels), user activity, and information about your device. You can find detailed information about each type of personal data collected in the specific sections of this privacy policy or in the text displayed before the data is collected.

Data controller

Owner: [Name] - Tax ID: [Tax ID]

Registered office: [Full address]

Phone: [Phone]

Email: vangoura@vangoura.com

Website: https://vangoura.com

Types of data collected

We collect your personal information through various means, but you will always be informed at the time of collection through information clauses about the data controller, the purpose and legal basis of the processing, the recipients of the data, and the period of storage of your information, as well as how you can exercise your data protection rights.

The types of personal data collected by this website, either directly or through third parties, include:

  • email address;

Full information regarding each type of personal data collected is provided in the specific sections of this privacy policy or through specific explanatory texts displayed prior to data collection. Personal data may be freely provided by you or, in the case of usage data, will be collected automatically when you use this website. Unless otherwise specified, all data requested by this website is mandatory, and refusal to provide it may make it impossible for this website to provide its services.

In cases where this website specifically indicates that certain personal data is not mandatory, you will have the option not to communicate such data without this having any impact on the availability or functioning of the service.

vangoura uses social media, which is another way of reaching you. The information collected through the messages and communications you post may contain personal information that is available online and accessible to the public. These social networks have their own privacy policies explaining how they use and share your information, so vangoura recommends that you consult them before using them to confirm that you agree with the way your information is collected, processed, and shared.

The use of cookies—or other tracking tools—by this website or by the owners of third-party services used by this website is intended to provide the service you have requested, in addition to any other purposes described in this document. For clear and precise information about the cookies we use, their purposes, and how you can configure or disable them, please see our [Cookie Policy].

You assume responsibility for the personal data of third parties that is obtained, published, or shared through this website.

Method and location of personal data processing

Processing methods We take appropriate security measures to prevent unauthorized access, disclosure, alteration, or destruction of data. Data processing will be carried out using computers and/or IT tools, following procedures and organizational methods strictly related to the purposes indicated.

In addition to us, in some cases certain categories of authorized persons related to the operation of this website (e.g., administration, sales, and marketing teams, as well as the legal department) may access the data.

Persons or companies outside our organization whom we appoint as data processors may also access the data if necessary.

You may request an updated list of these persons or companies at any time by contacting us using the contact details provided in this document.

Location The data is processed at our registered office, as well as at any other location where the parties involved in the processing process are located. Depending on your location, data transfers may involve the transfer of your data to a country other than your own. For more information on the place of processing of such transferred data, please refer to the section containing details on the processing of personal data.

Retention period Unless otherwise stated in this document, personal data will be processed and retained for as long as necessary and for the purpose for which it was collected, and may be retained for longer due to a relevant legal obligation or on the basis of your consent.

Detailed information on the processing of personal data

Your personal data is collected to enable us to provide our service, comply with our legal obligations, respond to enforcement requests, protect our rights and interests (or yours or those of third parties), detect any malicious or fraudulent activity, and for the purposes described below:

Contacting you

Contact form (this website)

By filling in the contact form with your details, you authorize this website to use this data to respond to your requests for information, quotes, or any other type of request, as indicated in the header of the form.

Personal data processed: email address;

Additional information

Legal basis for processing

We may process your personal data if you have given your consent or for one or more specific purposes:

  • if the collection of data is necessary for the performance of a contract concluded with you and/or any other pre-contractual obligation thereof;
  • if the processing is necessary for compliance with a legal obligation to which we are subject;
  • if the processing is related to a task carried out in the public interest or in the exercise of official authority vested in us;
  • if the processing is necessary for the purposes of the legitimate interests pursued by us or by a third party.

In any case, we are at your disposal to define the specific legal bases that apply to the processing and, in particular, whether the collection of personal data is a contractual or legal requirement or a necessary requirement for entering into a contract.

Understanding how long we keep your information

When we collect your personal information, we keep it for as long as necessary for the purposes for which we collected it. In some cases, we may need to keep your personal information for longer due to a legal obligation or based on your consent.

Here is what this means in more detail. We will retain your personal information based on the purposes and reasons described below:

  • for contractual purposes: If we have entered into a contract with you, we will retain your information until the contract has been fully performed.
  • for our legitimate interests: If we are using your personal information for purposes that are necessary and relevant to our business activities, we will retain it for as long as necessary for those purposes. You can find out more about these purposes in the relevant sections of this document or by contacting us.
  • with your consent: We may be authorized to retain personal data for a longer period if you have given us your consent to such processing, unless you withdraw that consent.
  • legal obligations: We may be required to retain personal data for a longer period if required to do so by a legal obligation or an order from an authority.

Once the retention period has expired, your personal data will be deleted. Therefore, the rights of access, erasure, rectification, and data portability cannot be exercised once the retention period has expired.

User responsibility

By providing us with your data through electronic channels, you guarantee that you are over 14 years of age and that the data provided to vangoura is true, accurate, complete, and up to date. To this end, the user confirms that they are responsible for the accuracy of the data provided and that they will keep this information up to date so that it reflects their actual situation, taking responsibility for any false or inaccurate data they may provide, as well as for any direct or indirect damages that may arise.

Who do we share your data with?

In general, at vangoura we do not share your personal information, except for those transfers that we must make based on legal obligations imposed.

You can inform us of your opposition to the transfer of your data, although in that case, it would not be possible to provide you with the requested service.

Although this is not a transfer of data, in order to provide the requested service, third-party companies acting as our suppliers may access your information to carry out the service we have contracted them to perform. These processors access your data in accordance with our instructions and may not use it for any other purpose, maintaining the strictest confidentiality.

International data transfers

There are no international transfers of your data to countries outside the European Economic Area (EEA).

How do we protect your information?

At vangoura, we are committed to protecting your personal information.

We use reasonably reliable and effective physical, organizational, and technological measures, controls, and procedures designed to preserve the integrity and security of your data and ensure your privacy.

In addition, all staff with access to personal data have been trained and are aware of their obligations in relation to the processing of your personal data.

All these security measures are reviewed periodically to ensure their adequacy and effectiveness.

However, absolute security cannot be guaranteed and no security system is impenetrable. Therefore, in the event that any information subject to processing and under our control is compromised as a result of a security breach, we will take appropriate measures to investigate the incident, notify the Supervisory Authority and, where appropriate, those users who may have been affected so that they can take appropriate measures.

Your rights under the General Data Protection Regulation (GDPR)

Data protection regulations allow you to exercise your rights of access, rectification, erasure, and data portability, as well as your right to object to and restrict the processing of your data, and not to be subject to decisions based solely on the automated processing of your data, where applicable. These rights are characterized by the following:

  • Their exercise is free of charge, except in the case of manifestly unfounded or excessive requests (e.g., repetitive nature), in which case vangoura may charge a fee proportional to the administrative costs incurred or refuse to act
  • You can exercise your rights directly or through your legal or voluntary representative
  • We must respond to your request within one month, although, taking into account the complexity and number of requests, the deadline may be extended by a further two months.
  • We are obliged to inform you of the means of exercising these rights, which must be accessible, and we cannot deny you the exercise of your rights on the sole grounds that you have chosen another means. If the request is submitted electronically, the information will be provided by electronic means whenever possible, unless you request otherwise.
  • If vangoura name does not comply with the request, it will inform you, within one month at the latest, of the reasons for its failure to act and the possibility of lodging a complaint with a supervisory authority.

In order to facilitate your exercise of these rights, we provide links to the application form for each of the rights:

Access right exercise form

Form for exercising the right of rectification

Form for exercising the right to object

Form for exercising the right of erasure (“right to be forgotten”)

Form for exercising the right to restriction of processing

Form for exercising the right to data portability

Form for exercising the right not to be subject to automated individual decisions

To exercise your rights, vangoura name provides you with the following means:

  • By sending a written and signed request to vangoura, [postal address] Ref. Exercise of LOPD Rights.
  • By sending a scanned and signed form to the email address privacidad@vangoura.com indicating in the subject line Exercise of LOPD Rights.

In both cases, you must prove your identity by providing sufficient identification by electronic means or, failing that, by means of a duly signed request. However, in case of reasonable doubts regarding your identity, we may request that you provide us with additional information necessary to confirm your identity in order to verify that we only respond to the interested party or their legal representative, in which case you must provide proof of representation.

Likewise, and especially if you consider that you have not obtained full satisfaction in the exercise of your rights, we inform you that you may file a complaint with the national supervisory authority by contacting the Spanish Data Protection Agency, C/ Jorge Juan, 6 – 28001 Madrid.

Protection of your data

At vangoura, we are committed to protecting your personal information.

We use reasonably reliable and effective physical, organizational, and technological measures, controls, and procedures designed to preserve the integrity and security of your data and ensure your privacy.

In addition, all staff with access to personal data have been trained and are aware of their obligations regarding the processing of your personal data.

All these security measures are reviewed periodically to ensure their adequacy and effectiveness.

However, absolute security cannot be guaranteed and no security system is impenetrable. Therefore, in the event that any information subject to processing and under our control is compromised as a result of a security breach, we will take appropriate measures to investigate the incident, notify the Supervisory Authority and, where appropriate, those users who may have been affected so that they can take appropriate measures.

How to exercise these rights

You can send us any request to exercise your rights. Our full contact details are provided at the beginning of this document.

Such requests are free of charge and we will respond to them as soon as possible, providing you with the information required by law.

We will inform each recipient to whom the personal data has been disclosed of any rectification or erasure of personal data or restriction of processing, unless this proves impossible or involves a disproportionate effort. At your request, we will inform you of these recipients.

Additional information if you reside in Switzerland

This section applies to you if you reside in Switzerland and supersedes any other potentially conflicting or contradictory information contained in the privacy policy.

You will find more details on the categories of data processed, the purposes of processing, the categories of recipients of personal data, where applicable, the retention period, and further information on personal data in the section entitled “Detailed information on the processing of personal data” in this document.

Your rights under the Swiss Federal Data Protection Act

You may exercise certain rights regarding your data within the limits of the law, including the following:

  • right of access to personal data;
  • right to object to the processing of your personal data (which also allows you to demand that the processing of personal data be restricted, that personal data be deleted or destroyed, and that the specific disclosure of personal data to third parties be prohibited);
  • right to receive your personal data and have it transferred to another controller (data portability);
  • right to request that incorrect personal data be corrected.

How to exercise these rights

You can send us any request to exercise your rights using the contact details provided at the beginning of this document. These requests are free of charge and we will respond to them as soon as possible, providing you with the information required by law.

Additional information if you reside in Brazil

This section of the document is integrated with and supplements the information contained in the rest of the privacy policy and is provided by the company that operates this website and, where applicable, by its parent company, subsidiaries, and affiliated companies (for the purposes of this section, collectively referred to as “we,” “us,” or “our”).

This section applies to all Users located in Brazil (hereinafter referred to simply as “you,” “your,” or ‘yours’), in accordance with the Lei Geral de Proteção de Dados (the “LGPD”), and with respect to such Users, supersedes any other information that is inconsistent or in conflict with this information contained in the privacy policy. This part of the document uses the term “Personal Information” as defined in the LGPD.

Reasons why we process your personal information

We can only process your personal information if we have a legal basis for doing so. The legal bases are as follows:

  • Your consent to the corresponding processing activities;
  • Compliance with a legal or regulatory obligation that applies to us;
  • The application of public policies established in laws or regulations or based on contracts, agreements, and similar legal documents;
  • The conduct of studies by entities engaged in research, preferably carried out on the basis of anonymized personal information;
  • The performance of a contract and its pre-contractual measures, in cases where you are a party to such a contract;
  • The exercise of our rights in judicial, administrative, or arbitration proceedings;
  • The protection or physical safety of you or a third party;
  • The protection of health—in proceedings carried out by health organizations or professionals;
  • Our legitimate interests, provided that your fundamental rights and freedoms do not override those interests; and
  • Credit protection.

For more information about the legal bases, you can contact us at any time using the contact details provided at the beginning of this document.

Categories of personal information processed

To find out which categories of your personal information are processed, you can read the section entitled “Detailed information on the processing of personal data” in this document.

Why we process your personal information

To find out why we process your personal information, you can read the sections entitled “Detailed information on the processing of personal data” and “Purpose of processing” in this document.

Your privacy rights in Brazil

You have the right to:

  • Obtain confirmation of the existence of processing activities involving your personal information;
  • Access your personal information;
  • Have incomplete, inaccurate, or outdated personal information rectified;
  • Obtain the anonymization, blocking, or deletion of unnecessary or excessive personal information, or information that is not being processed in accordance with the LGPD;
  • Obtain information about the possibility of giving or withholding your consent and the consequences of such actions;
  • Obtain information about the third parties with whom we share your personal information;
  • Obtain, upon your express request, the portability of your personal information (except for anonymized information) to another service or product provider, provided that our trade and industrial secrets are protected;
  • Achieve the deletion of your personal information being processed if the processing is based on your consent, unless one or more exceptions provided for in Article 16 of the LGPD apply;
  • Revoke your consent at any time;
  • File a complaint regarding your personal information with the ANPD (the National Data Protection Authority) or consumer protection agencies;
  • Object to processing activities in cases where the processing is not carried out in accordance with the provisions of the law;
  • Request clear and adequate information about the criteria and procedures used for an automated decision; and
  • Request the review of decisions made solely on the basis of the automated processing of your personal information and which affect your interests. This includes decisions that define your personal, professional, consumer, and credit profile, or aspects of your personality.

You will never be discriminated against or suffer any other type of prejudice if you exercise your rights.

How to submit your request

You can submit your express request to exercise your rights at no cost, at any time, using the contact details provided in this document or through your legal representative.

How and when we will respond to your request

Quick responses: We will endeavor to respond promptly to your requests. In any case, if we are unable to do so, we will ensure that we inform you of the factual or legal reasons that prevent us from immediately or even completely complying with your requests. In cases where we are not processing your personal information, we will indicate the natural or legal person to whom you should address your requests, if we are in a position to do so.

Requests for access or confirmation of processing: If you submit a request for access or confirmation of the processing of personal information, please be sure to specify whether you want your personal information to be provided in electronic or printed format. You must also inform us whether you want us to respond to your request immediately, in which case we will do so in a simplified manner, or whether you need a full statement instead. In the latter case, we will respond within 15 days of your request, providing you with all the information about the origin of your personal information, confirmation of whether or not records exist, any criteria used in the processing, and the purposes of the processing, while protecting our trade and industrial secrets.

Requests for rectification, erasure, anonymization, or blocking of personal information: If you submit a request for rectification, deletion, anonymization, or blocking of personal information, we will ensure that we immediately communicate your request to other parties with whom we have shared your personal information in order to allow those third parties to also comply with your request—except in cases where such communication is impossible or requires a disproportionate effort on our part.

Transfers of personal information outside Brazil permitted by law

We are permitted to transfer your personal information outside Brazil in the following circumstances:

  • When the transfer is necessary for international legal cooperation between public intelligence, investigative, and judicial agencies, in accordance with the legal means established in international law;
  • When the transfer is necessary to protect your life or physical safety or that of a third party;
  • When the transfer is authorized by the ANPD;
  • When the transfer results from a commitment made in an international cooperation agreement;
  • When the transfer is necessary for compliance with a public policy or legal attribution of a public service;
  • When the transfer is necessary for compliance with a legal or regulatory obligation, the execution of a contract or its pre-contractual measures, or the ordinary exercise of rights in judicial, administrative, or arbitration proceedings.

Additional information on data collection and processing

Legal defense: Your personal data may be used for our legal defense in court or in the judicial phases prior to a possible lawsuit arising from the inappropriate use of this website or related services. You acknowledge that public authorities may require us to disclose personal data.

Additional information about your personal data: In addition to the information contained in this privacy policy, this website may provide you with additional and contextual information regarding specific services or the collection and processing of personal data at your request.

System logging and maintenance: For operational and maintenance purposes, this website and any other third-party services used may collect system logs, i.e., files that record interaction with this website (system logs) and may contain personal data, such as the user's IP address.

Information not contained in this privacy policy: Additional information about the collection and processing of your personal data may be requested at any time. Contact information is provided at the beginning of this document.

Modification of this privacy policy: We reserve the right to modify this privacy policy at any time, notifying you via this page and, if possible, via this website and/or, if technically and legally possible, notifying you directly via the contact information we have available. We strongly recommend that you review this page frequently, referring to the date of the last update indicated at the bottom of the page. If the changes affect the processing activities carried out on the basis of your consent, we will ask for your consent again, if necessary.

Personal data (or data): Personal data is any information that, directly, indirectly, or in connection with other information—including a personal identification number—allows a natural person (i.e., you) to be identified.

Usage data: Usage data is information collected automatically through this website or third-party services, including your IP address, browser type, operating system, time and method of requests, status of responses, duration of visit, page sequence, and specific details about the device.

This website: This is the medium through which your personal data has been collected and processed.

Service: The service provided by this website, as described in the Terms of Use and on this website.

European Union (or EU): Unless otherwise stated, all references to the European Union in this document include all current member states of the European Union and the European Economic Area.

Cookie: Cookies are trackers consisting of small amounts of data stored in your browser.

Tracker: Tracker refers to any technology—e.g., cookies, unique identifiers, web beacons, embedded scripts, entity tags, and fingerprinting—that allows you to be tracked, for example, by accessing or storing information on your device.

Legal information: This privacy policy has been drafted based on the provisions of multiple laws. This privacy policy refers only to this website, unless otherwise stated herein.