Legal
Privacy Policy
Last updated: October 2026
PROTECTION OF PERSONAL DATA ACCORDING TO THE GDPR
Virtual Cave, SL, in application of current legislation on the protection of personal data, informs you that the personal data collected through the forms on the website https://www.virtualcave.io/ are processed by Virtual Cave, SL as controller.
The purpose of the collection and processing of personal data is to maintain the commercial relationship and the performance of information, training, advice and other activities of Virtual Cave, SL.
This data will be disclosed to the processors identified in the Recipients section, solely to fulfil the purposes described above.
Virtual Cave, SL adopts the necessary measures to guarantee the security, integrity and confidentiality of the data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and Organic Law 3/2018, of 5 December, on Data Protection and Guarantee of Digital Rights (LOPDGDD).
The user may at any time exercise the rights of access, opposition, rectification, erasure, restriction and portability recognised in the aforementioned Regulation (EU). These rights may be exercised by the user by sending an email to: yourdata@virtualcave.io or to the following address: C/ Licorers 39, Oficinas 10-11, C.P. 07141 – Marratxí (Illes Balears).
The user declares that all the data provided by him/her are true and correct, and undertakes to keep them updated, notifying Virtual Cave, SL of any changes.
Purpose of the processing of personal data
For what purpose will we process your personal data? Virtual Cave, SL will process your personal data collected through the website https://www.virtualcave.io/, for the following purposes:
- To comply with the commercial, labour, corporate and accounting obligations of the company.
- To handle the information requested by the user through the contact form.
- To manage applications received through the talent form.
- To send commercial communications about Virtual Cave, SL services, only if the user has given prior, separate authorisation (an unticked checkbox) or where there is a prior contractual relationship, under article 21 of the LSSI.
- To measure, in aggregate, how the website is used (pages visited, traffic source and device type) with Google Analytics 4, only if the user accepts analytics cookies.
You may object to commercial communications at any time by emailing yourdata@virtualcave.io or sales@virtualcave.io. Required fields on each form must be completed; without them we cannot handle the request. The commercial opt-in is optional and does not prevent you from sending the contact form.
How long will the personal data collected be kept?
Contact-form data are kept while the request is being handled and thereafter for the limitation period of any liabilities arising from that handling.
Job applications are kept during the selection process and are erased when the candidate asks us to do so or when there is no longer a lawful purpose for keeping them.
Acceptance of the privacy policy and, where given, consent to commercial communications are recorded in the email Virtual Cave receives when the form is submitted.
Cookie preferences are stored only on the user’s device (localStorage vc-consent) for 24 months at most, or until they are changed, withdrawn via “Cookie settings”, or the browser data are cleared. After that period, or if the cookies this site declares change, consent is requested again.
If the user accepts analytics, Google Analytics 4 keeps user- and event-level data for the period set in the property, 14 months at most. When consent is withdrawn, the site deletes the _ga cookies from the browser.
Legitimation
The processing of your data is carried out on the following legal bases that legitimise the same:
- Handling contact requests and job applications as pre-contractual steps or performance of a request made by the data subject, and the consent given by ticking the privacy checkbox, which is not pre-ticked.
- Free, specific, informed and unambiguous consent for non-essential cookies and for commercial communications, through an affirmative action (a checkbox or the cookie-banner buttons). Refusing or withholding consent does not prevent you from browsing the site or sending a contact message.
- The legitimate interest of Virtual Cave, SL in keeping the site secure and answering requests sent to its published channels.
- Compliance with legal obligations where applicable (for example, retaining communications with commercial relevance).
Recipients
Virtual Cave, SL does not sell personal data. To operate this site, it discloses data to the following processors or recipients, only for the purposes stated:
Google Ireland Limited / Google LLC: email from the contact and talent forms is sent through Google Workspace SMTP (smtp.gmail.com). Google processes those messages as a processor in order to deliver them to Virtual Cave.
Google Ireland Limited / Google LLC (Google Analytics 4 and Google Tag Manager): only if the user accepts analytics cookies, Google processes, as a processor, the pseudonymous identifier in the _ga cookies, pages visited, traffic source, technical browser and device data and approximate location derived from the IP address, to produce usage statistics for Virtual Cave. Google Analytics 4 does not store the IP address. The site disables Google signals and ad personalisation. Without that consent, Google Tag Manager and Google Analytics do not load.
HubSpot Ireland Limited / HubSpot, Inc.: the sales chat (portal 146319432) loads its script and cookies only if the user has consented to the marketing category. Without that consent the button may still be visible, but the chat does not open and no messages are sent to the service.
OpenFreeMap / OpenStreetMap data: the contact-page map requests tiles from tiles.openfreemap.org to show the office. Form data are not sent to that service. It is a technical service requested by visiting that page.
Data may be disclosed to public authorities where there is a legal obligation to do so.
International transfers
Google LLC (Google Workspace and, if analytics is accepted, Google Analytics 4) and HubSpot, Inc. are established in the United States. The HubSpot chat is loaded from the European domain js-eu1.hs-scripts.com. These transfers rely on standard contractual clauses adopted by the European Commission and, where the provider is certified, on the EU-US Data Privacy Framework.
The tile request to tiles.openfreemap.org is a third-party network connection needed to display the contact map. It does not include identifying data from the form.
Data collected by users of the services
In cases where the user includes files with personal data on shared hosting servers, Virtual Cave, SL is not responsible for non-compliance by the user of the GDPR.
Intellectual property rights virtualcave.io
Virtual Cave, SL is the owner of all copyright, intellectual and industrial property rights, know-how and any other rights related to the contents of the website https://www.virtualcave.io/ and the services offered therein, as well as the programmes necessary for its implementation and related information.
The reproduction, publication and/or use of the contents, in whole or in part, of the https://www.virtualcave.io/ website, other than for strictly private use, is not permitted without prior written consent.
Intellectual property of the software
The user must respect third party software made available by Virtual Cave, SL, even if it is free and/or publicly available.
Virtual Cave, SL has the necessary exploitation and intellectual property rights to the software.
The user does not acquire any right or licence for the contracted service, on the software necessary for the provision of the service, nor on the technical information for monitoring the service, with the exception of the rights and licences necessary for the fulfilment of the contracted services and only for the duration of the same.
For any action that exceeds the fulfilment of the contract, the user will need written authorisation from Virtual Cave, SL, and the user is prohibited from accessing, modifying, viewing the configuration, structure and files of the servers owned by Virtual Cave, SL, assuming the civil and criminal liability arising from any incident that may occur in the servers and security systems as a direct consequence of negligent or malicious action on their part.
Intellectual property of the hosted contents
The use contrary to the legislation on intellectual property of the services provided by Virtual Cave, SL is prohibited, and in particular of:
- Use that is contrary to Spanish law or that infringes the rights of third parties.
- The publication or transmission of any content that, in the opinion of Virtual Cave, SL, is violent, obscene, abusive, illegal, racial, xenophobic or defamatory.
- Cracks, programme serial numbers or any other content that infringes the intellectual property rights of third parties.
- The collection and/or use of personal data of other users without their express consent or in contravention of the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
- The use of the domain's mail server and email addresses for sending unsolicited bulk email.
The user bears full responsibility for the content of his website, the transmitted and stored information, hypertext links, third party claims and legal actions with reference to intellectual property, third party rights and the protection of minors.
The user is responsible with regard to the laws and regulations in force and the rules concerning the operation of the online service, e-commerce, copyright, maintenance of public order, as well as universal principles of Internet use.
The user shall indemnify Virtual Cave, SL for any costs incurred by Virtual Cave, SL in any case for which the user may be held liable, including legal fees and expenses, even in the event of a non-final court decision.
Protection of hosted information
Virtual Cave, SL makes backup copies of the contents hosted on its servers, however it is not responsible for the accidental loss or deletion of data by users. Likewise, it does not guarantee the total replacement of data deleted by users, as said data may have been deleted and/or modified during the period of time that has elapsed since the last backup copy.
The services offered, except for specific backup services, do not include the replacement of the contents preserved in the backup copies made by Virtual Cave, SL, when this loss is attributable to the user; in this case, a fee will be determined according to the complexity and volume of the recovery, always with the prior acceptance of the user.
The replacement of deleted data is only included in the price of the service when the loss of the content is due to causes attributable to Virtual Cave, SL.
Commercial communications
In application of the LSSI, Virtual Cave, SL will not send advertising or promotional communications by e-mail or any other equivalent means of electronic communication that have not been previously requested or expressly authorised by the recipients thereof.
Authorisation on the contact form is collected with a specific checkbox, unticked by default, separate from the privacy-policy checkbox. Submitting the form without that checkbox does not constitute consent to advertising.
In the case of users with whom there is a prior contractual relationship, Virtual Cave, SL is authorised to send commercial communications concerning Virtual Cave, SL products or services that are similar to those that were initially contracted with the customer, offering a simple way to object.
In any case, the user, after proving his or her identity, may request that no further commercial information be sent through yourdata@virtualcave.io or sales@virtualcave.io.