Privacy policy
How Unitas Tech collects and uses personal data on this website, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on data protection and the guarantee of digital rights (LOPDGDD).
1. Who is the controller
| Controller | Unitas Tech, S.L. |
|---|---|
| Tax ID (NIF/CIF) | B16373441 |
| Registered office | Calle Nardo 13, 28109 Alcobendas, Madrid, Spain |
| Contact for data protection | info@unitastech.dev |
| Data protection officer | Unitas Tech has not appointed a DPO, as it is not required to do so under Article 37 GDPR. Data protection enquiries are handled at the address above. |
2. What data we collect, and why
This website collects personal data in three situations only. We do not buy contact lists, we do not run advertising or cross-site tracking, and we do not build marketing profiles.
2.1 The contact form
When you send the form on the home page, we process the name, company, role (optional), email address, the area of interest you select and the description of your operation and use case that you write, together with the date and time of the submission and the record of your acceptance of this policy.
We use it for one purpose: to read your enquiry, answer it, and hold the conversation that follows. Please do not include confidential technical information, personal data of third parties, or special categories of data in the free-text field. A first enquiry does not need them.
If direct sending is unavailable, the form offers to open a draft email in your own mail application instead. In that case the message is composed on your device and sent by you; we receive it as an ordinary email.
2.2 Email correspondence
If you write to info@unitastech.dev, we process the data contained in your message in order to reply to it and to keep a record of the exchange.
2.3 Website analytics
Only if you enable analytics cookies, we record an anonymous row for the page view: the path visited, the referring page, the browser language, the screen size, and a visitor hash that is rotated daily and derived with a secret salt. We do not store your raw IP address, and the daily rotation means the hash cannot be used to follow you across days. The data is stored on our own server; no third-party analytics service is involved.
Independently of cookie consent, we log three events about the form itself: that a form was started, that a submission was invalid, and that the mail-app fallback was used. These rows never contain what you typed. They carry no identifier at all unless you have enabled analytics, in which case the same daily-rotating hash described above is attached so that one visit is not counted as several. They exist solely so that we can tell whether the form is working.
Our web server, like any web server, keeps technical logs that may include IP addresses for the time strictly necessary to maintain and secure the service.
3. Legal basis for each purpose
| Answering your enquiry | Your consent (Art. 6.1.a GDPR), given by ticking the box on the form, and the steps taken at your request prior to entering into a contract (Art. 6.1.b GDPR) where the enquiry concerns a possible pilot. |
|---|---|
| Analytics with the analytics cookie | Your consent (Art. 6.1.a GDPR and Art. 22.2 LSSI-CE), given in the cookie banner and withdrawable at any time. |
| Anonymous form-health events | These rows contain no personal data. To the extent that any technical data is involved, our legitimate interest (Art. 6.1.f GDPR) in knowing that the form works. |
| Server and security logs | Our legitimate interest (Art. 6.1.f GDPR) in operating the site securely, and our legal obligations (Art. 6.1.c GDPR) where applicable. |
| Storing your cookie choice | Strictly necessary to provide the service you asked for, under the exception in Art. 22.2 LSSI-CE. No consent is required to remember that you refused consent. |
Providing the data marked as required on the form is necessary in order for us to answer you. If you do not provide it, we cannot process the enquiry.
4. How long we keep it
| Enquiries that do not lead to a relationship | Up to 12 months from the last exchange, then deleted. |
|---|---|
| Enquiries that lead to a commercial relationship | For the duration of the relationship, and afterwards blocked for the periods required by tax and commercial law (generally up to 6 years under the Spanish Commercial Code, and 4 years under the General Tax Act). |
| Analytics rows | 14 months maximum, then deleted. The visitor hash is in any case unusable after 24 hours. |
| Form activity logs | 14 months maximum. |
| Cookie consent record | The preference cookie lasts 6 months; we renew the request afterwards. |
Once the retention period ends, data is deleted, or blocked where a legal obligation requires it to be kept available to the authorities.
5. Who else has access
We do not sell personal data and we do not share it for anyone else's marketing. Data is disclosed only to:
- Our hosting provider, Dreamhost US, which stores the website and its logs on our behalf, as a processor under Art. 28 GDPR.
- Our email provider, Google Ireland Limited (Google Workspace), which transmits and stores the messages generated by the form and our correspondence, as a processor under Art. 28 GDPR.
- Professional advisers and public authorities, where we are legally obliged to disclose, or where disclosure is necessary to establish, exercise or defend legal claims.
Each processor acts on our documented instructions under a written data processing agreement.
6. International transfers
The website and its analytics data are stored within the European Economic Area. Our email provider may process data outside the EEA within the Google group; those transfers are covered by the European Commission's standard contractual clauses and, where applicable, by the EU–US Data Privacy Framework, together with the supplementary measures described in that provider's documentation.
We use no advertising network, no external font or script service, and no third-party analytics platform, so no personal data leaves the site for those purposes.
7. Your rights
You may exercise the following rights at any time, free of charge:
- Access: to know whether we process your data and obtain a copy.
- Rectification: to correct data that is inaccurate or incomplete.
- Erasure: to have your data deleted where it is no longer needed for the purpose it was collected for.
- Restriction: to have processing limited in the cases set out in Art. 18 GDPR.
- Objection: to object to processing based on our legitimate interest.
- Portability: to receive the data you provided in a structured, machine-readable format.
- Withdrawal of consent: at any time, without affecting the lawfulness of processing carried out before the withdrawal.
Write to info@unitastech.dev, or to the postal address in section 1, stating the right you wish to exercise. We may ask for reasonable proof of identity. We will reply within one month, extendable by two further months where the request is complex, in which case we will tell you.
If you consider that your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es. We would appreciate the chance to resolve the matter with you first.
8. Security
We apply technical and organisational measures appropriate to the risk, including transport encryption (HTTPS), access control to the server and to the mailbox, storage of logs outside the public web root, a honeypot and validation on the form to limit automated abuse, and the minimisation described above: we do not store raw IP addresses for analytics, and the visitor hash is salted and rotated daily. No system is absolutely secure; we review these measures periodically.
9. Minors
This website addresses professionals and is not directed at minors. We do not knowingly collect data from persons under 14 years of age. If you believe a minor has sent us data, write to us and we will delete it.
10. Automated decisions and profiling
We do not take decisions with legal or similarly significant effects about you on a solely automated basis, and we do not build behavioural profiles from your visit to this site.
11. Changes to this policy
We may update this policy to reflect changes in the website or in the law. The version published here is the one in force, and the revision date appears below. Where a change is substantial and processing relies on your consent, we will ask for it again.
Last updated: September 2026.