Effective date: 2026
Sothis Servicios Tecnológicos S.L. as data controller, informs you below that any personal data processed by it, will be carried out in accordance with the principles of transparency, purpose limitation, data minimization, accuracy, integrity, and confidentiality, as well as respecting the rest of the obligations and guarantees established in Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, and in Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, regarding the protection of natural persons with regard to the processing of personal data and the free movement of such data, in compliance with the provisions of Law 34/2002, of July 11, on information society services and electronic commerce, presents the following identifying data and conditions of use of the website.
For this purpose, we make our Privacy Policy available to you with the aim of ensuring customer trust and providing a satisfactory differential experience.
Sothis Servicios Tecnológicos S.L. reserves the right to modify this Privacy Policy, so users are recommended to visit the Legal Notices on each access to the Website. The use of any part of this Website will constitute acceptance of such changes.
This privacy policy provides information on the processing and protection of your personal data when you visit this website, contact us or, where appropriate, subscribe to our communications or participate in events organized within the framework of this project.
The controller of your personal data is:
Sothis Servicios Tecnológicos S.L. processes personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, ‘GDPR’) and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD).
This website is managed by Sothis Servicios Tecnológicos S.L. (Nunsys Group) within the framework of an innovation and/or technological development project. Sothis Servicios Tecnológicos S.L. acts as data controller for the operations described in this policy.
We process your personal data for the following purposes and on the following legal bases:
| Purpose | Legal basis |
| To respond to inquiries, requests, or messages you send us through the website or by email. | Our legitimate interest in attending to your query — Article 6(1)(f) GDPR. |
| To measure and improve the use and performance of the website through analytical cookies. | Your consent — Article 6(1)(a) GDPR. Consult our Cookie Policy. |
| To manage your subscription to informative or commercial communications related to the project, when you expressly request it, without prejudice to the fact that you can withdraw it at any time. | The legal basis will be your consent – Article 6(1)(a) GDPR.” |
| To manage your registration, participation, and attendance at events organized within the framework of the project, including operational communications related to such events. | Performance of the relationship requested by the user — Article 6(1)(b) GDPR — or, where appropriate, our legitimate interest in organizing and documenting the activity — Article 6(1)(f) GDPR. |
Automated decisions. Your personal data will not be used for automated decision-making, including profiling.
Inquiries
Website analytics
Subscriptions and events
The data marked as mandatory on the forms are necessary to process your request or manage your subscription or process your registration for an event, as appropriate; if you do not provide them, we will not be able to process it. Optional data can be omitted without any consequence.
You can unsubscribe at any time by following the unsubscribe link included in each communication, or by writing to innovacion@nunsys.com.
All personal data in electronic format (emails, databases, subscriber lists, etc.) are stored in the systems of Sothis Servicios Tecnológicos S.L. and, where appropriate, in the systems of its data processors.
We have implemented the appropriate technical and organizational measures, taking into account the state of the art, the costs of implementation, the nature, scope, context, and purposes of the processing, as well as the risks to the rights and freedoms of natural persons, with the aim of protecting the data against unauthorized access, accidental loss, alteration, or disclosure, including access controls, encryption where appropriate, and periodic review of our security practices.
Our data processors are bound by processing contracts and process your data solely following our documented instructions, in accordance with the GDPR.
Access to your personal data is limited to authorized personnel of Sothis Servicios Tecnológicos S.L. responsible for the management of this project and, depending on the tools actually used in this project, to data processors that provide hosting, maintenance, analytics, communications, forms, or event management services:
Data processors will process personal data solely following documented instructions from Sothis Servicios Tecnológicos S.L. and with the contractual guarantees required by applicable regulations.
The specific identification of the third parties involved, including analytics tools or cookies, will be provided in the Cookie Policy or in the corresponding notice when applicable.
“Your personal data may also be communicated to public authorities when we are legally obliged to do so. Your data will not be sold or rented, and is not shared with event co-organizers or sponsors unless expressly stated.
All parties with access are subject to confidentiality obligations.
As a general rule, your personal data is processed within the European Economic Area (EEA), or in countries covered by an adequacy decision, including the EU-US Data Privacy Framework regarding certified providers.
When a service provider (for example, certain analytics or map services) processes data outside the EEA, appropriate safeguards will apply in accordance with Chapter V of the GDPR, such as the Standard Contractual Clauses of the European Commission.
You can request information about the safeguards applied, or a copy of them, by writing to dpo@nunsys.com.
When you accept certain third-party cookies, information may be transferred outside the EEA; consult the policies of such third parties referenced in our Cookie Policy.
Under the GDPR (articles 15 to 22), you have the right to:
To exercise your rights of access, rectification, deletion, opposition, limitation of processing and portability of your data, the interested party must make a communication to the address indicated at the beginning of this policy, indicating the right they wish to exercise and sufficiently identifying themselves.
In the event of not being able to identify you or if there are doubts about your identity, a DNI (National Identity Document), passport or other document that reliably identifies you may be requested.
The request will be processed within the legally established period, and can be made by sending an email to dpo@nunsys.com.
You also have the right to file a claim with the Spanish Data Protection Agency, through its electronic headquarters (AEPD, sedeaepd.gob.es) if you consider that your rights have been violated.
This website and its services are directed at persons over 18 years of age. We do not knowingly process personal data of minors.
Sothis Servicios Tecnológicos S.L. may modify this Privacy Policy when required by applicable regulations or to reflect changes in our processing activities.
When changes are relevant, reasonable measures will be adopted to inform users in accordance with applicable regulations.
The effective date indicated above corresponds to the latest version.