PRIVACY POLICY

Effective date: 2026

Sothis Servicios Tecnológicos S.L. as data controller, informs you below that any personal data processed by it, will be carried out in accordance with the principles of transparency, purpose limitation, data minimization, accuracy, integrity, and confidentiality, as well as respecting the rest of the obligations and guarantees established in Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, and in Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, regarding the protection of natural persons with regard to the processing of personal data and the free movement of such data, in compliance with the provisions of Law 34/2002, of July 11, on information society services and electronic commerce, presents the following identifying data and conditions of use of the website.

 

For this purpose, we make our Privacy Policy available to you with the aim of ensuring customer trust and providing a satisfactory differential experience.

 

Sothis Servicios Tecnológicos S.L. reserves the right to modify this Privacy Policy, so users are recommended to visit the Legal Notices on each access to the Website. The use of any part of this Website will constitute acceptance of such changes.

 

This privacy policy provides information on the processing and protection of your personal data when you visit this website, contact us or, where appropriate, subscribe to our communications or participate in events organized within the framework of this project.

1. Who is the data controller?

The controller of your personal data is:

  • Sothis Servicios Tecnológicos S.L. (CIF B98513260) 
  • Calle Charles Robert Darwin,13 – Parque Tecnológico, 46980 Paterna (Valencia), España 
  • Telephone: +34 960 500 631 
  • Email: innovacion@nunsys.com 
  • Data Protection Officer: dpo@nunsys.com 
 

Sothis Servicios Tecnológicos S.L. processes personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, ‘GDPR’) and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD).

2. About this website

This website is managed by Sothis Servicios Tecnológicos S.L. (Nunsys Group) within the framework of an innovation and/or technological development project. Sothis Servicios Tecnológicos S.L. acts as the Data Controller for the processing activities described in this Privacy Policy.

3. Why and how do we process your personal data?

We process your personal data for the following purposes and on the following legal bases: 

PurposeLegal basis
Responding to enquiries, requests or messages that you send us through the website or by email. Our legitimate interest in responding to your enquiry, Article 6(1)(f) GDPR. 
Measuring and improving website use and performance through analytics cookies. Your consent, Article 6(1)(a) GDPR. See our Cookie Policy. 
Enabling the playback of embedded audiovisual content hosted on YouTube. Your consent, Article 6(1)(a) GDPR. See our Cookie Policy. 
  

*Automated decision-making. We will not use your personal data for automated decision-making, including profiling.

4. What personal data do we collect?

Enquiries

  • Identification and contact details that you provide to us, together with the content of your message. 
 

Website analytics

  • Technical and usage data (pseudonymous identifiers associated with your browser or device, device and browser type, pages visited, source of the visit and approximate city-level geolocation derived from your IP address), collected through cookies subject to your consent.  

 

  • Google Analytics 4 does not log or store individual users’ IP addresses in the EEA: the IP address is used solely to derive this approximate geolocation and is discarded immediately afterwards. See our Cookie Policy.  
 

Data marked as mandatory in forms is necessary to process your request or manage your subscription or registration. If you do not provide this information, we will not be able to process your request. Optional data may be omitted without any consequences. 

5. How long do we retain your personal data?

  • Enquiries: For as long as necessary to respond to your request and, thereafter, in a blocked form for the applicable statutory limitation periods for any liabilities that may arise. 
 
  • Analytics: For the lifetime of the relevant cookies, as specified in the Cookie Policy. 
 

You may unsubscribe at any time by following the unsubscribe link included in each communication or by contacting innovacion@nunsys.com. 

6.How do we protect your personal data?

All personal data in electronic format (emails, databases, subscriber lists, etc.) is stored on NUNSYS S.A.’s systems and those of its data processors. We have implemented appropriate technical and organisational measures to protect your data against unauthorised access, accidental loss, alteration or disclosure, including access controls, encryption where appropriate, and periodic reviews of our security practices. 

 

Our data processors are bound by data processing agreements and process your data only in accordance with our documented instructions and in compliance with the GDPR. 

7. Who has access to your personal data?

Access to your personal data is limited to authorised Sothis Servicios Tecnológicos S.L. personnel responsible for managing this project and, depending on the tools used for this project, to data processors:

 

  • Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) for website analytics through Google Analytics 4 and for playback of embedded videos hosted on YouTube, in both cases where you have consented to the relevant cookies. 
 

 

Your personal data may also be disclosed to public authorities where we are legally required to do so. We will not sell or rent your data, and we will not share it with event co-organisers or sponsors unless expressly stated. All parties with access to your data are subject to confidentiality obligations. 

8. International transfers

As a rule, your personal data is processed within the European Economic Area (EEA) or in countries covered by an adequacy decision, including the EU-U.S. Data Privacy Framework in relation to certified providers. 

 

Where a service provider (for example, certain analytics or embedded audiovisual content services) processes data outside the EEA, appropriate safeguards will apply in accordance with Chapter V of the GDPR, such as the European Commission’s Standard Contractual Clauses. 

 

You may request information about the safeguards applied, or a copy of them, by contacting dpo@nunsys.com. 

Where you accept certain third-party cookies, information may be transferred outside the EEA. Please refer to the relevant third parties’ policies referenced in our Cookie Policy.

9. What are your rights and how can you exercise them?

Under the GDPR (articles 15 to 22), you have the right to:

 

  • Access your personal data
 
  • Request the rectification of inaccurate or incomplete data
 
  • Request the erasure of your data, subject to applicable legal obligations 
 
  • Request restriction of processing in certain circumstances
 
  • Data portability
 
  • Object to processing, including the audiovisual processing described in Section 3
 
  • Withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal

 

To exercise these rights, please get in touch with us at innovacion@nunsys.com or our Data Protection Officer at dpo@nunsys.com, specifying the right you wish to exercise. We may ask you to provide a copy of an identity document where necessary to verify your identity. 

 

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, sedeaepd.gob.es) if you consider that your rights have been infringed.

10. Minors

This website and its services are intended for persons over 18 years of age. We do not knowingly process personal data relating to minors. 

11.Policy changes

Sothis Servicios Tecnológicos S.L. may amend this Privacy Policy where required by applicable law or to reflect changes to our processing activities. The effective date at the beginning of the document corresponds to the latest version.