PRIVACY NOTICE — 1o2
https://1o2.it · Updated: 2 October 2026
1. CONTROLLER AND SCOPE
VISIBILITY S.L.U., NIF B76194323, Calle Domingo J. Navarro n.1, 2a planta - Oficina 5, 35002 Las Palmas de Gran Canaria, Spain. Privacy contact: hello@visibility.company.
This notice covers the public 1o2 laboratory and technical administration of access to restricted projects. For personal data entrusted by a client to its project, the client determines purposes and instructions; VISIBILITY provides the technical service according to the respective roles. This notice does not replace the project controller’s information or the relevant processing agreements.
2. DATA, PURPOSES AND LEGAL BASES
Browsing and security: the infrastructure receives IP address, requested URL, time and browser information to deliver and protect the service. Legal basis: legitimate interests in service availability and security (GDPR Article 6(1)(f)). Essential connection data are required to deliver pages.
Restricted access: username, password verification and a signed session enable access to the authorised project. Passwords are verified using a salted hash, not stored as plain text in the code. Temporary IP-based attempt counters limit abuse. Legal basis: performance of the requested service (Article 6(1)(b), where the user is a contracting party) or legitimate interests in administering business access (Article 6(1)(f)). Credentials and the technical session cookie are required for restricted functions.
ISU planner: authorised users manage teacher names, availability, courses, subjects, assignments, timetables and notes. The project’s server database stores the plan and history; local drafts recover unsynchronised changes. Project data are processed to provide the tool under the relevant controller’s instructions. Do not enter special-category data, credentials or unnecessary information in notes.
HYBRIX demo: uses demonstration data. Filters and rankings are processed in the browser; the current code does not send those interactions to analytics services. Requested exports create files on the user’s device.
Email: if you contact hello@visibility.company, we use your address and message to handle your request, under pre-contractual steps/contract (Article 6(1)(b)), legitimate interests in professional correspondence (Article 6(1)(f)), or legal obligations for rights requests (Article 6(1)(c)). Contacting us does not automatically subscribe you to a newsletter.
3. COOKIES AND ICHEF
Current application code uses only necessary tools for authentication, explicitly selected language and work recovery. It includes no Analytics, advertising pixels or remote fonts. The homepage loads the iChef information component and configuration from ichef.it, operated by VISIBILITY. With necessary tools only, it saves no consent choice and sends no acceptance receipt. The servers still receive connection data. See https://1o2.it/cookie-policy?lang=en for the inventory.
4. RETENTION
Sessions last up to 8 hours; logout removes the cookie. In-memory abuse counters use 15-minute windows; entries may remain until the counter is next handled or the process restarts.
The ISU plan is retained for the project’s needs, with up to 50 previous versions alongside the current plan. There is no automatic day-based deletion deadline for the plan. Project closure and deletion requests are handled with the project controller through the privacy contact. Data should be retained only for service needs and documented legal obligations or defence of rights.
Local drafts are removed after successful synchronisation or a reload that discards the draft. Language preference, migration marker and legacy local copies have no automatic expiry; they remain until changed or deleted in the browser. Exported files are managed by the user.
Email is retained while handling the request and associated relationship, plus periods required for applicable obligations or defence of rights. Infrastructure logs follow the provider’s terms and security requirements, rather than an invented cookie expiry.
5. RECIPIENTS AND INTERNATIONAL TRANSFERS
Authorised personnel, authorised project users and necessary hosting, security and support providers access data according to their roles. The site uses OpenAI Sites on Cloudflare infrastructure; ISU uses the project’s connected database. The application does not sell data or send them to advertising networks.
Infrastructure processing may occur outside the EEA, including in the United States. For relevant transfers, OpenAI’s contractual documentation provides for adequacy decisions or Standard Contractual Clauses. References: https://openai.com/policies/chatgpt-sites-data-processing-addendum/ and https://openai.com/policies/sub-processor-list/. Contact us for information about applicable safeguards.
6. YOUR RIGHTS
Subject to GDPR conditions, you may request access, correction, erasure, restriction, portability and object to processing based on legitimate interests: hello@visibility.company. Client project requests are handled with the relevant controller. You may complain to the Agencia Española de Protección de Datos (https://www.aepd.es/) or the competent authority where you reside, work or where an alleged infringement occurred.
The site does not perform advertising profiling or solely automated decisions with legal or similarly significant effects. Planning tools support authorised users, who remain responsible for decisions.
7. UPDATES
This notice describes the current setup. New services or purposes require updated information and, where required, consent before activation.