This is an English translation of the Spanish original, which prevails in case of discrepancy.
1. Data controller
In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), you are informed that the personal data collected through https://soberania.eu will be processed by:
- Company name: ARQUITECTURA DE SISTEMAS DE IA, S.L. ("SoberanIA")
- Tax ID (NIF): B26912824
- Registered office: C/ de la Grandeza Española, 70, Puerta A, Planta Baja, Madrid, Spain
- Tax address: C/ Cidro, 3, 28044 Madrid, Spain
- Privacy email: privacidad@soberania.eu
2. Purposes of processing
- Handling enquiries: receiving, managing and answering enquiries sent through the contact forms or other available channels.
- Commercial requests: handling requests about our services in AI systems architecture, private and sovereign AI, automation, technology integration and regulatory compliance.
- Pre-contractual management: preparing proposals, quotes and possible agreements.
- Follow-up: contacting the data subject to clarify requirements or provide further information.
- Legal obligations: complying with the legal obligations applicable to the company.
The data will not be used for purposes incompatible with the above.
3. Legal basis
- Pre-contractual measures (art. 6.1.b GDPR): handling requests for information, proposals or quotes.
- Legitimate interest (art. 6.1.f GDPR): managing professional communications arising from an enquiry received.
- Legal obligation (art. 6.1.c GDPR): where processing is necessary to comply with a legal requirement.
- Consent (art. 6.1.a GDPR): for specific purposes, such as sending electronic commercial communications.
Sending an enquiry does not constitute authorisation to receive subsequent advertising.
4. Categories of data
- Identification: first name and surname.
- Contact: email address and, if provided, telephone number.
- Professional: company, position and role.
- Request details: the content of the message and any information provided voluntarily.
- Technical: data generated by use of the website and by the tools actually installed on it (see the Cookie Policy).
We do not request special categories of data. Please do not include sensitive information or third-party data that is not necessary to handle your enquiry.
5. Source and mandatory nature
The data is obtained directly from the data subject. Mandatory fields are marked as such; failing to provide them may prevent us from handling the request. Whoever provides the data is responsible for its accuracy and for keeping it up to date.
6. Retention period
- The data will be kept for as long as necessary to handle the enquiry or manage the request.
- Afterwards it may be kept, blocked, for the statutory limitation periods of any potential liabilities.
- If a contractual relationship is formalised, the data will be kept for its duration and, afterwards, for the periods required by applicable law.
- Data processed on the basis of consent will no longer be used for that purpose once consent is withdrawn.
7. Recipients
SoberanIA does not sell personal data. Data will only be disclosed to third parties where there is a legal obligation or a valid legal basis.
We may use providers that access data in order to deliver technology services (web hosting, email, maintenance, security, form management), with whom the data processing agreements required by art. 28 GDPR are signed.
Current providers:
- IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany): web hosting and email, with whom the corresponding data processing agreement has been signed. Messages sent through the contact form are received exclusively by email on this service and are not stored in any additional system.
- Google Ireland Limited (Google Fonts): font service loaded when you visit the website (see section 8).
8. International transfers
When you visit the website, your browser requests the fonts from Google's servers (Google Fonts), which discloses the device's IP address to Google. Google may process this information outside the European Economic Area, in particular in the United States. These transfers are covered by the European Commission's adequacy decision for entities certified under the EU-US Data Privacy Framework and, where applicable, by the standard contractual clauses.
Apart from this case, SoberanIA does not carry out international transfers of personal data. If new providers that process data outside the European Economic Area are engaged, this will be reported here.
9. Rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw consent at any time where processing is based on it, by writing to privacidad@soberania.eu and stating the right you wish to exercise. Where necessary, we may request additional information, proportionately, to verify your identity.
If you consider that the processing infringes the applicable rules, you may lodge a complaint with the Spanish Data Protection Agency (AEPD): https://www.aepd.es
10. Security
We apply technical and organisational measures appropriate to the risk to protect the data against unauthorised access, loss, destruction, alteration or improper disclosure. Persons with access to the data are bound by a duty of confidentiality.
11. Cookies
This website may use cookies and similar technologies. Their purposes, duration, providers and configuration options are detailed in the Cookie Policy. Non-essential cookies are only set with your prior consent, which you may accept, reject or configure at any time.
12. Third-party links
The site may contain links to external pages whose privacy policies and data processing we do not control. We recommend reviewing them before providing personal data.
13. Automated decisions
For the purposes described, no automated individual decisions are taken and no profiling is carried out that produces legal effects or similarly significant effects on individuals.
14. Changes
We may update this policy due to regulatory, technical or operational changes. The current version will always be available at https://soberania.eu with its update date.
15. Applicable law
This policy is governed by the GDPR, the LOPDGDD and other applicable Spanish and European legislation.