In compliance with current legislation on data protection, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDD, Law 3/2018 of 5 December), we hereby provide you with the following information on the processing of your personal data:

1. Data Controller

  • NIF/CIF: B36986545.
  • Registered office: Av. Camelias 114, bloque 2 – bajo. 36211 Vigo - Spain.
  • Registered company data: Registro Mercantil de Pontevedra, Tomo 3307, Libro 3307, Folio 10, Inscripción 1ª, Hoja PO-42512.
  • Trade name: VATONTIME.

2. Contact information

  • Postal address: Av. Camelias 114, bloque 2 – bajo. 36211 Vigo - Spain.
  • Phone number: (+34) 673 563 163.
  • Email address:
  • Website:

3. What type of personal data do we process?

The personal data that we process are:

  • Data that you decide to voluntarily provide us with.
  • Data derived from your communications with us.
  • The information concerning your own browsing in the case of Online Services, (IP address or information derived from cookies or similar devices).
  • Any information that is available from sources accessible to the public, which is legitimately accessible to us.
  • The data derived from the contractual or pre-contractual relationship you have with us, including your image, always informing you in this case of the possibility of capturing your image.
  • The information about you that third parties provide us with, when there is a legitimate basis for doing so or when your consent has been given.
  • The data of third parties that you provide us with, subject to the consent of the third party concerned.

4. What are the purpose and legal grounds for the processing of your data?

The purpose and legal grounds for the processing of your Personal Data depends on the relationship we have with you and the processing activity carried out.

The legal basis for the processing of your data is:

  • Performance of a contract.
  • Compliance with a legal obligation of the data Controller.
  • The express consent that is requested.
Processing activity Purpose of the processing Legal basis
Tax and accounting management Processing required for compliance with tax and accounting obligations. Contractual relationship
Legal obligation for the data controller
Prevailing legitimate interests of the data controller or third parties
Contact management Processing of data in order to maintain communications with the data subjects. Contractual relationship
Prevailing legitimate interests of the data controller or third parties
Express consent of the data subject
Management of job applicants Recruitment and job placement through resume management, personal interviews and assessment tests. Vital interests of the data subject or other people
Express consent of the data subject
Client management Processing of the data necessary for managing the commercial/contractual relationship with customers, invoicing, after-sales service, sending promotions and advertising and building customer loyalty. Contractual relationship
Business relationship
Supplier management Analysis, valuation, contracting, order management and supplier payment management. Contractual relationship
E-Commerce Preparation and management of orders and purchases made through web platforms. Contractual relationship
Business relationship

5. Which recipients will your data be disclosed to?

There will be no assignment, transmission or transfer of personal data, except those already mentioned, other than due to a legal requirement. If, at the request of the Public Administration or the Autonomous Institutions within the scope of the powers expressly assigned to them by law, your data are requested, they will be disclosed.

Should there be an assignment, transmission or transfer of personal data other than those previously mentioned, you will be informed beforehand so that you can give us your consent if necessary.

In order to provide our services properly it may be necessary to hire the services of consultants, professionals, or other service companies, who may process your data following our instructions.

This processing by third parties will be laid down in a written contract or in some other form attesting to its execution and content, expressly specifying that the data controller shall process the data in accordance with our instructions and shall not apply or use them for any purpose other than that specified in the contract, nor shall the data controller disclose them, not even for retention purposes, to other persons.

6. How long will we keep your data?

The personal data provided will be retained for as long as the business relationship is maintained. If you decide to cancel your personal data, they may be stored in our databases for the periods established by law in order to comply with tax and accounting obligations, and will be deleted once these legal periods or applicable terms have expired.

7. What are your rights when you provide us with your data?

In accordance with current and applicable regulations, you have the following rights as regards the processing of your personal data:

  • Right of access.
  • Right of rectification.
  • Right of opposition.
  • Right to erasure (‘right to be forgotten’).
  • Right to restriction of processing.
  • Right to portability.
  • Right not to be the subject of individualized decisions.
  • Right to information.
  • Schengen Rights.

Further information about these rights is available on the website of the Spanish Agency for Data Protection,

You can exercise the above-mentioned rights by sending us a document by post or by e-mail, enclosing proof of your identity and providing the details necessary to deal with your request.