GDPR Compliance
VISION Electronics is committed to GDPR compliance. Discover your rights under the General Data Protection Regulation and how to exercise them.
Your Data Rights
Right to Access
GDPR Article 15
You have the right to request and obtain confirmation on whether we process your data, and secure a complete copy of all your personal datasets.
Request Data CopyRight to Rectification
GDPR Article 16
You can request immediate correction of inaccurate or outdated details, as well as completion of missing info.
Update Your DataRight to Erasure
GDPR Article 17
Under certain criteria, you can demand that we delete all your records ('right to be forgotten') from our storage system.
Request DeletionRight to Restriction
GDPR Article 18
In the cases the GDPR sets out, you can have us restrict processing of your data. We may then store it, but we will not otherwise use it without your consent or another lawful ground, such as the establishment or defence of legal claims.
Restrict ProcessingRight to Portability
GDPR Article 20
Request your data in a structured, commonly used, machine-readable format and have it transmitted to another provider where technically feasible.
Export Your DataRight to Object
GDPR Article 21
Object to processing based on legitimate interest or to direct marketing. Direct marketing stops on objection; for other processing we cease unless we can show compelling legitimate grounds.
File an ObjectionRights on Automated Decisions
GDPR Article 22
You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects on you, and to ask for human review.
Ask for Human ReviewRight to Withdraw Consent
GDPR Article 7(3)
Where processing rests on your consent, you can withdraw it at any time. Withdrawing is as easy as giving consent and does not affect processing carried out before you withdrew.
Withdraw Consent
Data Handling and Frameworks
1Legal Basis for Processing (Article 6)
We process personal data only when backed by one of the following legal bases: Consent (opt-in for marketing), Contractual Performance (completing order fulfillments), Legal Obligation (taxation filings), or Legitimate Business Interests (security optimizations).
UPDATED - June 12, 2026
2Data Processing Agreements (DPA)
We provide standard DPAs for enterprise clients and institutional customers containing Model Clauses that meet GDPR Article 28 parameters. Contact our privacy team to initiate execution.
UPDATED - June 12, 2026
3Data Breach Notification (Articles 33-34)
In the event of a personal data breach, we will notify the competent supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of it, unless the breach is unlikely to result in a risk to individuals. Where a breach is likely to result in a high risk to your rights and freedoms, we will also inform you without undue delay.
UPDATED - October 6, 2026
4International Transfers and Standard Contractual Clauses
Data transferred outside the EEA is protected by adequacy decisions or Standard Contractual Clauses (SCCs) to assure an equivalent standard of protection in third countries. Adequacy decisions currently relevant to our transfers include the EU-US Data Privacy Framework, which the EU General Court upheld on 3 September 2025 (an appeal, Case C-703/25 P, is pending before the Court of Justice), and the renewal of the European Commission's UK adequacy decisions on 19 December 2025, which run until 27 December 2031. If an adequacy decision is withdrawn or invalidated, we will rely on SCCs together with supplementary measures.
UPDATED - October 6, 2026
5Retention Schedules and Deletion
We retain personal data only for as long as necessary to fulfill the initial collection purpose, resolve disputes, or comply with legal holding requirements (such as 7-year records for tax codes).
UPDATED - June 12, 2026
6Data Protection Impact Assessments (DPIA)
We regularly conduct DPIAs on new features, databases, and third-party tools to identify privacy bottlenecks, evaluate data risk, and deploy encryption safeguards.
UPDATED - June 12, 2026
7Pseudonymised and Anonymised Data
We apply pseudonymisation and aggregation where we can to reduce risk. Following the Court of Justice judgment of 4 September 2025 (EDPS v SRB, C-413/23 P), whether pseudonymised data is personal data depends on whether the party holding it has means reasonably likely to re-identify the person. We therefore treat pseudonymised data as personal data in our own hands, and we still tell you which recipients receive your data, including when it is shared in pseudonymised form.
UPDATED - October 6, 2026
8Legal Developments We Monitor
We track changes to EU data protection law and update this page when they take effect. Regulation (EU) 2025/2518, which sets uniform procedural rules for handling cross-border GDPR complaints, entered into force on 1 January 2026 and applies to cases opened after 2 April 2027. The European Commission's Digital Omnibus proposal of 19 November 2025, which would amend parts of the GDPR and move cookie rules into it, is still in the legislative process and is not yet law. Until it is adopted, the current GDPR and ePrivacy rules described on this page continue to apply.
UPDATED - October 6, 2026
How to Exercise Your Rights
Submit Your Request
Contact our privacy team at privacy@vision-global.net with your request. Specify the rights you wish to exercise under GDPR Articles 12-22.
Verification
We will verify your identity using credentials to protect database security and prevent spoofing breaches.
Processing
Upon identity verification, we respond without undue delay and in any case within one month. For complex or numerous requests we may extend this by up to two further months, and we will tell you within the first month and explain why.
Resolution Report
You will receive an export log, deletion confirmation receipt, or detailed compliance statement concerning the action taken.
Supervisory Complaint Procedures
If you reside in the EEA or UK and believe our database operations violate data protection principles, you retain the legal right to lodge complaints directly with your local national Data Protection Authority (DPA). We encourage you to reach out to us first to settle any claims efficiently.
From 2 April 2027, Regulation (EU) 2025/2518 will also standardise how authorities handle complaints that involve more than one EU country, with fixed investigation deadlines.
Data Processing Agreement (DPA) Request
We maintain standardized Data Processing Agreements for corporate accounts. DPAs outline our responsibilities, processing metrics, and technical safety parameters in compliance with Article 28.
Request DPAQuestions for the Privacy Team?
Our Data Protection Officer and compliance team are available to guide you on privacy inquiries and secure your rights.