Privacy Policy
Last updated: 23 January 2026.
This Privacy Policy governs the processing of personal data collected through the website of TECNOCIM INNOVA S.L., in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and with Ley Orgánica 3/2018, on the protection of personal data and the safeguarding of digital rights (LOPDGDD, the Spanish data protection act).
Data controller
TECNOCIM INNOVA S.L.
Tax number (CIF): B02896231
Email: rgpd@tecnocim.com
Telephone: 937 707 310
Address: Camí Can Ametller, 36, Baixos – 08195 Sant Cugat del Vallès (Barcelona)
What data do we collect?
Data provided through web forms
When a user contacts TECNOCIM INNOVA S.L. through the forms available on the website (contact forms, newsletter sign-up, chatbot or meeting request), the following personal data is collected:
- First name and surname
- Email address
- Company
- CNAE code (the Spanish business activity code)
- Autonomous region
- Any other data the user provides voluntarily, such as a contact telephone number, job title or the content of the message.
Browsing data
Likewise, while browsing the website, certain technical and usage data may be collected through cookies and similar technologies, in particular:
- Google Analytics: anonymised IP address, browser type, pages visited, time spent, source of the visit and approximate location.
- HubSpot CRM: browsing history, pages visited, interactions with forms, session data and repeat visits.
Purposes and legal bases for processing
| Purpose | Legal basis | Retention period |
|---|---|---|
| Answering queries and requests | Consent / performance of pre-contractual measures | For as long as necessary + statutory limitation periods (5 years) |
| Sending commercial communications and the newsletter | Express consent | For as long as consent is maintained |
| Lead management and personalised marketing (CRM) | Consent / legitimate interest | For as long as consent is maintained. Reviewed after 2 years without interaction |
| Web analysis and improvement of the site | Consent (cookies) / legitimate interest | 26 months at most |
| Compliance with legal obligations | Legal obligation | 4–6 years depending on the applicable legislation |
Recipients of the data
The user's personal data may be disclosed to the following recipients, to the extent necessary to fulfil the purposes described in this Privacy Policy:
Processors
- HubSpot Inc. (United States): CRM and marketing automation services. International data transfers are made with appropriate safeguards, through the Standard Contractual Clauses approved by the European Commission.
- Google LLC (United States): web analytics services and measurement tools (Google Analytics and Google Search Console), with international transfers covered by appropriate safeguards.
- Hosting provider: hosting of the website and maintenance of the computer systems.
Public bodies
Public administrations, tax and Social Security authorities, courts or other competent bodies, where a legal obligation applies.
The user's personal data will in no case be disclosed to third parties for their own commercial purposes.
International transfers
Some of the service providers used by TECNOCIM INNOVA S.L., in particular HubSpot and Google, may process personal data from servers located outside the European Economic Area, specifically in the United States.
Those international data transfers are made with appropriate safeguards, through the Standard Contractual Clauses approved by the European Commission, together with additional security measures, in accordance with Regulation (EU) 2016/679.
For further information about these transfers, users may get in touch at the following email address: rgpd@tecnocim.com.
Some services (HubSpot, Google) have servers in the United States. Those transfers are covered by appropriate safeguards through Standard Contractual Clauses and additional security measures. Further information: rgpd@tecnocim.com
Rights of the data subject
Users have the right to:
- Access: find out what personal data we process and obtain information about that processing.
- Rectification: ask us to correct inaccurate or incomplete data.
- Erasure: ask us to delete their data where, among other grounds, it is no longer needed for the purposes for which it was collected.
- Restriction of processing: ask us to restrict the processing of their data in the cases provided for by law.
- Portability: receive the personal data they have provided in a structured, commonly used, machine-readable format, or ask for it to be transmitted to another controller.
- Objection: object to the processing of their data, in particular where the processing is based on legitimate interests or carried out for marketing purposes.
- Withdrawal of consent: withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
How do you exercise these rights?
Users may exercise the rights recognised by data protection legislation by sending a request to the following email address: rgpd@tecnocim.com.
The request must include:
- The applicant's first name and surname.
- A document evidencing identity (DNI or another valid document).
- A statement of the right they wish to exercise.
- A description of the request.
TECNOCIM INNOVA S.L. will answer the request within a maximum of one month from receipt. That period may be extended by up to two further months where the request is particularly complex or where a large number of requests is received, in accordance with Regulation (EU) 2016/679.
Complaints
Where users consider that the processing of their personal data does not comply with the legislation in force, they have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD, the Spanish data protection authority).
Website: www.aepd.es
Electronic office: https://sedeagpd.gob.es
Data security
TECNOCIM INNOVA S.L. has adopted the technical and organisational measures needed to safeguard personal data and prevent its alteration, loss, unauthorised processing or unauthorised access, taking into account the state of the art, the nature of the data processed and the risks associated with the processing.
The measures applied include the following:
- Encryption of communications through SSL/TLS protocols.
- Access control and authentication systems.
- Security protocols on servers and information systems.
- Regular backups.
- Training and awareness-raising for staff on data protection.
- Confidentiality and data processing agreements signed with suppliers and partners.
Accuracy of the data
Users warrant that the personal data provided to TECNOCIM INNOVA S.L. is truthful, accurate and up to date, and undertake to report any change to it that is needed to keep it correct.
Minors
The website is aimed at people over 14 years of age. Where the user is below that age, the prior consent of their parents or legal guardians is required for the processing of their personal data, in accordance with the data protection legislation in force.
Amendments
TECNOCIM INNOVA S.L. reserves the right to amend this Privacy Policy where necessary to bring it into line with legislative or regulatory changes, or with criteria, guidelines or recommendations issued by the competent supervisory authorities.
Where substantial amendments are made to this Privacy Policy, users will be told through a notice on the website stating the date it was last updated.
Further information
For further information on the use of cookies and similar technologies, users may consult the Cookie Policy of the website.
For any query relating to this Privacy Policy or to the processing of personal data, users may get in touch with:
TECNOCIM INNOVA S.L.
Email: rgpd@tecnocim.com
Telephone: 937 707 310
Address: Camí Can Ametller, 36, Baixos – 08195 Sant Cugat del Vallès (Barcelona)


