VisionHub
Privacy policy
Comercial Droneit S.L. · Updated on 17 October 2026
This is a translation provided for information purposes. In the event of any discrepancy, the Spanish version prevails.
Who is the data controller
Comercial Droneit S.L. (Tax ID B66622804), Av. Diagonal, 403, 3º 1ª, 08008 Barcelona, Spain. Email: info@droneit.es. Telephone: +34 930 230 964.
We also have offices in Madrid (C. Castrobarto, 10, Planta 4, 28042 Madrid) and Málaga (C. Haendel, 3, 29004 Málaga).
We have not appointed a data protection officer because our activity does not require one. For any privacy matter, write to us at info@droneit.es.
What data we process and why
We only process the data you give us in the forms or when you write to us, and the technical browsing data that is strictly necessary. Mandatory fields are marked; if you do not fill them in, we cannot deal with your request. If you give us data about other people (for example, colleagues at your company), you must have informed them first.
Quote requests and enquiries
«Request a quote» form, email, telephone and WhatsApp. Data: name, company, email, telephone, service and whatever you tell us about the project.
| Purpose | To answer your request, prepare the quote and, if you accept it, manage the job. |
|---|---|
| Legal basis | Taking steps at your request prior to entering into a contract and, if you hire us, performance of the contract (art. 6.1.b GDPR). If you write on behalf of a company, also our legitimate interest in maintaining the professional contact (art. 6.1.f GDPR and art. 19 LOPDGDD). |
| Retention | PENDING: period if the quote is not accepted (proposal: 12 months). If you hire us, for as long as the relationship lasts and, afterwards, blocked for the statutory periods (6 years under art. 30 of the Spanish Commercial Code; 4 years for tax purposes). |
| Recipients | Cloudflare (website hosting, recording of the form on servers in the EU and sending of the notification email) and OVH (Droneit's corporate email, where the notification arrives). PENDING: automation tool (n8n) and CRM, if connected. If you write to us on WhatsApp, WhatsApp Ireland Ltd. processes the data under its own policy. |
Marketing communications to people who request a quote
Only if you tick the optional box on the quote form.
| Purpose | To send you information about our services by email. |
|---|---|
| Legal basis | Your consent (art. 6.1.a GDPR and art. 21 LSSI). You can withdraw it at any time, in each email or by writing to us, without affecting earlier processing. |
| Retention | Until you unsubscribe. Proof of your consent is kept blocked for as long as liability for the processing may be claimed. |
| Recipients | Brevo (Sendinblue SAS, France), which manages the mailings as data processor. |
Job applications
«Work with us» form. Data: name, email, telephone, office, profile, LinkedIn or portfolio link, CV and whatever you tell us.
| Purpose | To assess your application in Droneit's recruitment processes. |
|---|---|
| Legal basis | Your consent when you send us your application (art. 6.1.a GDPR). If you apply for a specific vacancy, taking steps prior to entering into a contract (art. 6.1.b GDPR). |
| Retention | 12 months from submission. After that period it is erased automatically, unless you authorise us to keep it longer or you join the team. |
| Recipients | Cloudflare (recording of the form and storage of the CV on servers in the EU, and sending of the notification email) and OVH (Droneit's corporate email, where the notification arrives). |
Analytics and campaign measurement
Only if you accept analytics or advertising cookies. Details in the cookie policy.
| Purpose | To understand, in aggregate, how the website is used and to measure whether campaigns generate requests. |
|---|---|
| Legal basis | Your consent (art. 6.1.a GDPR and art. 22.2 LSSI), which you can withdraw in «Cookie settings». |
| Retention | PENDING: retention configured in Google Analytics 4 (2 or 14 months). Cookies last as stated in the cookie policy. |
| Recipients | Google Ireland Ltd. (Google Analytics 4 and Google Ads). |
Interactive flight map
If you use the map, your browser requests the map tiles from OpenStreetMap and sends the address or coordinates you search for to its Nominatim service.
| Purpose | To show you the map and locate the address you are looking for. |
|---|---|
| Legal basis | Our legitimate interest in offering the tool you use (art. 6.1.f GDPR). Droneit does not store your searches. |
| Retention | Droneit does not keep these data. The OpenStreetMap Foundation processes them under its own policy. |
| Recipients | OpenStreetMap Foundation (United Kingdom), which receives your IP address and your search. |
Data processors
We work with providers that process data on our behalf, under a data processing agreement (art. 28 GDPR) and only to provide their service to us:
- Cloudflare, Inc.: hosting of the website, videos and images and of form submissions, and protection against attacks.
- Sendinblue SAS (Brevo), France: newsletter and double opt-in confirmation of the subscription.
- Google Ireland Ltd.: analytics and campaign measurement, only with your consent.
- OVH SAS, France: corporate email, where we receive the form notifications.
- PENDING: automation tool (n8n) and CRM, if connected to the forms.
We do not sell your data or disclose it to third parties for their own purposes. We will only disclose it to public authorities, judges or courts when required by law.
International transfers
Some providers may process data outside the European Economic Area:
- Cloudflare and Google (USA): they participate in the EU-U.S. Data Privacy Framework (European Commission adequacy decision of 10 July 2023) and, in addition, their contracts include the Commission's standard contractual clauses.
- OpenStreetMap Foundation (United Kingdom): a country covered by a European Commission adequacy decision.
Brevo (Sendinblue SAS) is a French company that processes newsletter and marketing communication data within the European Union, so no international transfer is involved.
Your rights
You can ask us at any time for:
- Access: to know whether we process your data and obtain a copy.
- Rectification of inaccurate or incomplete data.
- Erasure when the data are no longer needed, among other cases.
- Objection to processing based on legitimate interest and, always, to marketing communications.
- Restriction of processing, for example while we check a complaint.
- Portability of the data you gave us with your consent or under a contract.
- Withdrawal of your consent, without affecting earlier processing.
Write to us at info@droneit.es or by post to Comercial Droneit S.L., Av. Diagonal, 403, 3º 1ª, 08008 Barcelona, Spain, with the reference «Data protection». If we cannot identify you from the email itself, we will ask for the minimum information needed to verify who you are. We will reply within one month, which may be extended by two further months in complex cases (we would let you know).
If you believe we have not handled your rights properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos): www.aepd.es, C/ Jorge Juan, 6, 28001 Madrid.
Automated decisions
We do not take decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you, and we do not carry out profiling for that purpose.
Children
This website is aimed at businesses and professionals. We do not knowingly collect data from children under 14; if we find that we have received such data, we delete it.
Security
We apply technical and organisational measures appropriate to the risk (art. 32 GDPR): encrypted connections, access restricted to staff who need it and providers that offer guarantees. In the event of a security breach, we would act in accordance with arts. 33 and 34 GDPR.
Changes to this policy
If we change how we process your data, we will update this page and the date above. If the change is significant and we have your email address through a subscription, we will let you know.