Privacy policy

PERSONAL DATA PROTECTION POLICY

In accordance with Organic Law 15/1999 of 13 December on the Protection of Personal Data (LOPD) and Regulation (EU) 2016/679 of the European Parliament and Council of 27 April, General Data Protection Regulation (GDPR), the content of this Privacy Policy applies to the processing of data carried out by Visual Optica Nerva S.L.U (Visual-Click) in relation to the data provided by users and/or customers to Visual-Click to facilitate commercial relationships between both parties.
If you do not agree with the terms of Visual-Click’s Privacy Policy, we invite you not to use the services on the website or to provide personal data to Visual-Click. This Privacy Policy only applies to this website.

Responsible for the processing of your data
Company name: VISUAL OPTICA NERVA S.L.U.
Trade name: VISUAL-CLICK
Address: Avda. del Pan de Alcalá 80, 41500 Alcalá de Guadaira
CIF: B91358952
Email: info@visual-click.com

Registration details in the Mercantile Registry: Volume: 3908, Book: O, Page: 181, Section: 8, Sheet: SE 56874

Customer Service
Phone: +34 954 29 37 98
Email: info@visual-click.com

Data Protection Officer (DPO): To contact the Data Protection Officer of Visual-Click, you can reach out to:

Visual-Click
Data Protection Officer (DPO)
C/Sierpes 8 41004 Sevilla (Spain)
privacy@visual-click.com

VISUAL OPTICA NERVA S.L. (the Company) is an organisation that processes personal data, which assigns significant responsibility for the design and organisation of procedures aligned with legal compliance in this area. In carrying out these responsibilities and to establish the general principles that should govern personal data processing within the Company, this Personal Data Protection Policy is approved, communicated to its Employees, and made available to all its Stakeholders.

1. Purpose

The Personal Data Protection Policy is a proactive responsibility measure aimed at ensuring compliance with the applicable legislation in this area and, related to this, respect for the right to honour and privacy in the processing of personal data of all individuals associated with the Company. In implementing this Personal Data Protection Policy, the principles governing data processing in the organisation are defined, along with the procedures and the organisational and security measures that individuals affected by this Policy commit to implementing within their sphere of responsibility. To this end, ADEPLUS CONSULTORES, S.L.U., with address at C/ GASPAR MÉNDEZ, No. 3, OFFICE 3 BADAJOZ, BADAJOZ and email r.marquez@adeplusconsultores.com, together with the Management, will assign responsibilities to the staff involved in data processing operations.

Personal data collected by Visual-Click with your consent will be used solely for the purpose of managing the services offered by Visual-Click on its website. The data requested from the user for registration on our website includes:

  • First and last name
  • Billing and delivery address
  • Invoice-related data
  • Phone number (optional)

If a product requiring a prescription is purchased, we will also store your prescription values to process your order correctly. If you provide your phone number, it will be used exclusively for contacting you in case of any incidents related to your order.

We will store your data during the period of our commercial relationship. Once completed, we will retain the information for the periods prescribed by law for commercial and tax relationships. Data not subject to these obligations will be destroyed immediately upon termination of the commercial relationship. Your personal data may be shared with service providers necessary for processing your order, such as payment gateways, logistics companies, customer service platforms, cloud service providers, always ensuring transmission for the purpose of processing and shipping your order. You may object to this using the means detailed below.

2. Scope of Application

This Personal Data Protection Policy applies to the Company, its directors, managers, and employees, as well as to all individuals associated with it, including service providers with access to data (''Data Processors'').

3. Principles of Personal Data Processing

As a general principle, the Company will strictly comply with legislation regarding personal data protection and must be able to demonstrate this (Principle of 'proactive responsibility'), paying particular attention to those processing activities that could pose a higher risk to the rights of the data subjects (Principle of 'risk-based approach'). To this end, VISUAL OPTICA NERVA S.L. will ensure compliance with the following principles:

Lawfulness, fairness, transparency, and purpose limitation. Data processing must always be informed to the data subject through clauses and other procedures; it is only considered legitimate if consent is given (with special attention to consent given by minors) or if there is another valid legal basis, and the purpose is in accordance with the Regulations.


Data minimisation. Processed data must be adequate, relevant, and limited to what is necessary for the purposes of processing.


Accuracy. Data must be accurate and, if necessary, updated. Appropriate measures will be taken to ensure that any inaccurate data is erased or rectified without delay.


Storage limitation. Data will be kept in a way that allows identification of data subjects for no longer than necessary for the purposes of processing.


Integrity and confidentiality. Data will be processed in a manner that ensures an appropriate level of security, including protection against unauthorised or unlawful processing, and against accidental loss, destruction, or damage, through the application of appropriate technical and organisational measures.


Data transfers. The purchase or acquisition of personal data from illegitimate sources or cases where data has been collected or transferred in violation of the law or without sufficient guarantee of legitimate origin is prohibited.


Contracting providers with access to data. Providers must be chosen based on their ability to apply appropriate technical and security measures. The necessary agreements will be documented with these third parties.


International data transfers. Any data processing subject to EU regulations that involves data transfer outside the European Economic Area must be carried out in strict compliance with the applicable legal requirements.


Rights of data subjects. The Company will facilitate the exercise of the rights to access, rectify, erase, restrict processing, object to, and port data, establishing internal procedures and, where necessary, models for exercising these rights that meet the applicable legal requirements.


The Company will ensure that the principles set out in this Personal Data Protection Policy are considered in (i) the design and implementation of all work procedures, (ii) the products and services offered, (iii) all contracts and obligations formalised or assumed, and (iv) the implementation of systems and platforms that allow employees or third parties to access or process personal data.

4. Employee Commitment

Employees are informed of this Policy and acknowledge that personal information is an asset of the Company. They commit to the following:

  • Complete the data protection awareness training provided by the Company.
  • Apply user-level security measures relevant to their role, without prejudice to responsibilities in design and implementation that could be attributed based on their position within VISUAL OPTICA NERVA S.L.
  • Use established formats for data subject rights and inform the Company immediately to facilitate a response.
  • Inform the Company as soon as they become aware of any deviations from this Policy, particularly data security breaches, using the established format.

5. Monitoring and Evaluation

An annual verification, evaluation, and assessment, or when significant changes in data processing occur, will be conducted to evaluate the effectiveness of the technical and organisational measures to ensure processing security.

6. Accessing our website

When accessing our website, your browser will automatically send information to our server, which is temporarily stored in an electronic log file that is deleted after a set time. The stored information includes:

  • IP address
  • Date and time of access
  • URL of the accessed website
  • Information about the browser and operating system used

This information is collected solely to ensure correct access to our website and to prevent any functionality errors that may hinder our commercial relationship. These data are stored for 5 days and are automatically deleted. Additionally, our website uses cookies, detailed in a separate section.

7. Contacting Visual-Click

Users can contact Visual-Click for information about their order management or to make an inquiry about our products. In this case, data such as name and email address are requested to enable us to respond appropriately. This data will be deleted once the legal obligation to retain it expires.

8. Product and Service Information

We may also use your data to provide information on new products, promotions, and services that may be of interest through marketing campaigns by email with an external service provider. We may also send communications to update you on order status, similar products, or the content of your shopping basket. If you do not wish for your data to be used for these purposes, you can communicate your preference using the means detailed below.

9. Tracking and Analysis Tools

To optimise the services provided by Visual-Click within the context of the commercial relationship with the user, a number of external provider tools are employed:

Google Analytics: This is a web analysis service provided by Google Inc. This tool allows monitoring of website usage by users through the use of a "cookie". If you do not agree to this cookie storing any information, you can configure your browser to prevent the storage of cookies, as detailed in the section dedicated to cookie information.

Recommendations and Marketing: We use the services of Benhauer LTD (Salesmanago Marketing) to make product recommendations to users that they may be interested in and to send marketing communications aimed at enhancing the commercial relationship. If you do not wish to continue receiving this service, you can opt not to store the relevant cookie as indicated in the cookie information section. Additionally, to prevent communications from this tool, you can choose to opt out via the link provided in all marketing communications or by requesting it through the channels listed below. We also use the services of Criteo SA to provide information about our products based on the interests shown during your navigation on our website. If you do not wish to receive these types of advertising suggestions, you can prevent it by following the instructions in the cookie management section.

Recipients outside the EU

The following are the recipients of your data based outside the European Union. Data transmission in these cases is carried out in accordance with the principles of the so-called Privacy Shield, which ensures that your data is transferred under the security conditions required by the EU for data processing:

Zendesk Inc.
Rackspace US Inc.


Rights of Data Subjects

Any individual has the right to obtain confirmation as to whether Visual-Click processes their personal data. Visual-Click guarantees the following rights regarding your personal data:

  • Right of access: Allows the data subject to know the personal data being processed.
  • Right of rectification: Allows correction of errors or modification of personal data that is inaccurate or incomplete, to ensure the accuracy of the information being processed.
  • Right of erasure: Any user can request the deletion of their data when it is no longer necessary within the context of the commercial relationship.
  • Right to object: Any user has the right to object to the processing of their personal data or to request its immediate cessation, unless required by law.
  • Right to object to marketing: The user can object to receiving commercial communications from Visual-Click. They may also revoke this using the means provided for this purpose.
  • Restriction of processing: The user can request the restriction of processing of their data, so that it is only retained for legal reasons.
  • Data portability: The data subject can request to receive the personal data they have provided – provided it is technically feasible – and, if desired, have it transferred to another data controller of their choice, in a commonly used and machine-readable format.
  • Right not to be subject to automated individual decisions: The user has the right not to be subject to a decision based on automated processing of their data.
  • Right to withdraw consent: The user has the right to withdraw consent for data processing at any time, without affecting the lawfulness of processing based on consent given at the time of data provision.

To exercise any of these rights, you can send a letter to the following address or an email to privacy@visual-click.com, specifying the type of right you wish to exercise:

Visual-Click
Data Protection Officer (DPO)
C/Sierpes 8
41004 Sevilla (Spain)

Complaints to the Supervisory Authority: Visual-Click informs users that they can lodge a complaint with the Spanish Data Protection Agency (www.agpd.es) if they believe the processing is not in compliance with the applicable regulations.