GDPR Compliance

We CaWhat is GDPR?

The General Data Protection Regulation (GDPR) is a European Union regulation designed to safeguard personal data and privacy for all EU citizens. It grants individuals more control over how their personal data is collected, processed, stored, and used by organizations.

At VisionTact – FZCO, we recognize that data lies at the heart of innovation — from AI and automation to analytics and geospatial intelligence. With that comes a profound responsibility to protect every individual’s information. GDPR compliance is therefore not just a regulation for us — it’s a core principle embedded in our business operations and culture.

---

Our GDPR Commitment

VisionTact is committed to ensuring that personal data is processed lawfully, transparently, and securely. We act as both a data controller and data processor depending on the nature of the project or engagement.

Our goal is to ensure that all personal data processed through our platforms, applications, and analytics systems adheres to the highest standards of privacy protection as outlined under EU and UK data protection laws.

---

GDPR Practices We Follow to Ensure Compliance

🔐 1. Data Protection and Security

We employ encryption, pseudonymization, access control, and network security protocols to safeguard data at every stage of its lifecycle — from collection to storage and disposal.

🧾 2. Data Subject Rights

All users and clients have the right to access, modify, or delete their personal data. Vision Tact responds to all legitimate data requests in compliance with GDPR Article 15–22.

👤 3. Data Protection Officer (DPO)

We have appointed a Data Protection Officer responsible for overseeing GDPR compliance and ensuring adherence to all data protection principles.

📡 4. Secure Communication Channels

All client and user communications are conducted through encrypted channels (SSL/TLS) ensuring data confidentiality during transmission.

🧩 5. Consent and Transparency

We obtain explicit consent before collecting personal data and provide clear, accessible privacy notices. Consent can be withdrawn at any time by contacting our DPO.

⚠️ 6. Breach Notification

In the unlikely event of a data breach, Vision Tact follows GDPR Article 33–34 by notifying both clients and supervisory authorities within 72 hours.

---

ISO 27001 & GDPR — Our Integrated Security Approach

While GDPR governs data privacy, ISO/IEC 27001 governs information security. Vision Tact aligns its internal data governance with ISO 27001 standards to ensure:

• Integrity, confidentiality, and availability of information
• Clear security controls and incident management
• Continuous risk assessment and documentation

Together, these frameworks reinforce a strong compliance and trust foundation for our clients worldwide.

---

Data Processing Scope and Principles

When processing data, Vision Tact adheres to these GDPR principles:

1. Lawfulness, fairness, and transparency
2. Purpose limitation – Data collected only for legitimate business needs
3. Data minimization – Only necessary data is processed
4. Accuracy – Ensuring data is up to date
5. Storage limitation – Data retained only as long as necessary
6. Integrity and confidentiality – Security through technical and organizational measures

---

Data We May Collect

Depending on the nature of interaction (website, client project, or communication), we may collect:

• Name and contact details (email, phone)
• Business name and role
• Project-related data
• Website usage and analytics data (via cookies)

These are used solely to deliver services, manage communication, and improve user experience.

---

Cookies and Analytics

Our website uses cookies to:

• Enable core functionality and personalization
• Analyze traffic patterns through Google Analytics (GDPR-compliant mode)
• Provide region-based preferences

You can disable cookies anytime via your browser settings. Note that some features may not function properly if cookies are blocked.

---

Your Rights Under GDPR

You have full control over your personal data, including rights to:

• Access the data we hold about you
• Rectify inaccurate information
• Erase your data (“right to be forgotten”)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

All requests can be submitted to:
📩 privacy@visiontact.com