Legal information
Privacy policy
1. Controller
- Controller: Viktor Kaninets, trabajador autónomo, trading as SIVEVIS
- NIF/NIE: Z1917492X
- Address: Puerto de Ventana 26, Gijón, Spain
- Contact: hello@sivevis.com
2. Summary
SIVEVIS processes contact, customer, billing and technical data to answer enquiries, provide and invoice services, secure the site, evidence consent and improve usability. Analytics is optional and requires consent. Data is not sold. Rights requests go to hello@sivevis.com; complaints may be made to the AEPD.
3. Data and purposes
- Website security and delivery: technical request details such as IP address, requested URL, date/time, browser/device details and server security/error logs. Purpose: deliver and protect the site and diagnose faults. Legal basis: legitimate interests in operating a secure website.
- Enquiries: contact details and message content you choose to send by email or WhatsApp. Purpose: reply and take requested steps before a contract. Legal basis: pre-contractual steps requested by you. WhatsApp is an external service; Meta may process account and message data under its own terms if you choose it.
- Customers and invoicing: contact, business, contract and billing data. Purpose: deliver services, manage the customer relationship and meet tax/accounting duties. Legal bases: contract and legal obligation.
- Client materials: text, images, logos, domain details and contact information supplied to build a client site. Where these contain third-party data, SIVEVIS acts only as the client's processor under a written order and data-processing addendum.
- Consent record: if consent controls are activated, the choice, categories, policy version, time, page/language, random identifier and technical evidence needed to demonstrate the choice. Final fields and storage will be confirmed before activation.
- Microsoft Clarity analytics: SIVEVIS plans to use Microsoft Clarity to understand how visitors use this website and improve its content and usability. If/when enabled, Clarity may process pseudonymous identifiers, device/browser and page data, clicks, scrolls, pointer movement, page events and session-playback/DOM data with sensitive fields masked. It will be used only after separate prior consent to analytics cookies. Clarity is not active on this website as of the date above.
Do not send special-category or highly sensitive information through the website, email or WhatsApp unless SIVEVIS has specifically requested it and provided a suitable secure channel. SIVEVIS does not offer Telegram as a contact channel.
4. Recipients and international transfers
Service providers for website hosting/CDN, email, customer communication, security, backups, consent records and analytics may process data as needed to provide their services. Meta receives data if you choose WhatsApp. If Clarity is activated after your consent, Microsoft Ireland Operations Limited and Microsoft group providers may process analytics data. Professional advisers and public authorities may receive data where needed or legally required. We do not sell personal data. The final provider names, legal entities, service locations, retention and transfer safeguards will be added once the production configuration is confirmed.
Some provider arrangements may involve access or transfers outside the European Economic Area. Where required, transfers will rely on an adequacy decision or another GDPR Chapter V safeguard, such as standard contractual clauses and supplementary measures. Details can be requested from the privacy contact.
5. Retention
Enquiries are kept while needed to answer and follow up, then deleted or restricted unless a contract, dispute or legal duty requires retention. Customer and invoice records are kept for applicable legal periods. Security logs are kept only as long as needed for security and troubleshooting. Consent records are intended to be kept for no more than 24 months from the last decision once the production consent system is confirmed. Microsoft currently states that Clarity playback data is retained for 30 days and click/aggregated data for 9 months; these periods will be rechecked before activation.
| Purpose | Basis | Retention |
|---|---|---|
| Website delivery, security and abuse prevention | Legitimate interest | Only as needed for delivery and investigation |
| Enquiries and proposals | Pre-contractual steps | While needed for response and follow-up |
| Subscription delivery and invoicing | Contract and legal obligation | Contractual, tax and accounting periods |
| Cookie consent evidence | Legal obligation where required | Intended maximum 24 months from last decision |
| Clarity analytics | Consent | 30 days playback; 9 months click/aggregate, subject to re-check |
6. Cookies and consent
The current site does not load Clarity or Google Analytics and uses only temporary sessionStorage for homepage scroll restoration. The Cookie Policy explains storage, planned Clarity cookies and consent. No analytics script will be downloaded before consent.
7. Client websites and processor role
For a client website, the client is generally the controller of visitor and lead data. SIVEVIS acts as a processor only for operations performed under the client's instructions and a written data-processing agreement. Each client website must publish its own privacy and cookie notices. SIVEVIS does not use client personal data for its own marketing. This website's planned Clarity setup does not automatically apply to client websites.
8. Automated decisions and profiling
SIVEVIS does not make automated decisions with legal or similarly significant effects and does not create advertising profiles. Planned Clarity analytics are for aggregate usability analysis and not personalised advertising.
9. Children, security and updates
This website is not directed to children. Reasonable technical and organisational safeguards include access control, confidentiality duties, least privilege, TLS where available, backups, client separation, logging and abuse protection. No internet transmission or storage can be guaranteed completely secure. If a breach requires notification, SIVEVIS will act under the GDPR and notify a client where it acts as processor.
10. Your rights
You may request access, rectification, erasure, restriction, portability or object where the GDPR provides those rights. You may withdraw consent at any time, without affecting processing already carried out lawfully. SIVEVIS may request proportionate information to verify identity and normally replies within one month, subject to lawful extensions. Contact hello@sivevis.com. You may complain to the Spanish Data Protection Agency (AEPD) at aepd.es.
11. Required data
Browsing does not require identifying data. Contact, identity and billing data may be necessary to request a proposal or subscription; without it SIVEVIS may be unable to respond, contract or issue required invoices. Analytics is optional and is not required to use the website.
12. Changes and language
We may update this notice when the site, providers, processing purposes or legal requirements change. Where a material change affects analytics purposes or legal bases, SIVEVIS will update the consent configuration before activating the changed processing. This English page is a translation for convenience. The Spanish page is the controlling version if the two texts differ.