1. Data controller

2. Legal basis for processing

The processing of personal data collected through the Website is based on the following legal bases under Regulation (EU) 2016/679 (GDPR):

3. Purposes of processing

Personal data provided by users will be processed for the following purposes:

4. Data collected

Depending on how users interact with the Website, INNOVATECH may process the following categories of data:

INNOVATECH does not collect special categories of data (health, beliefs, religion, racial origin, etc.) through the Website. Should they be necessary to provide the legal service, the data subject’s explicit consent will be requested.

5. Retention periods

Data will be kept for as long as necessary to fulfil the purpose for which it was collected and, in any event, for the periods required by law:

6. Recipients of the data

INNOVATECH will not disclose or communicate users’ personal data to third parties, except in the following cases:

Data will not be transferred to third countries outside the European Economic Area, unless those countries offer an adequate level of protection or the appropriate safeguards required by the GDPR are applied.

7. Data subjects’ rights

Users may at any time exercise the following rights recognised by the GDPR and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD):

To exercise these rights, users may write to INNOVATECH at:

The request must include the user’s full name, a copy of their ID card or other proof of identity and a description of the right they wish to exercise. INNOVATECH will reply within one month of receiving the request, which may be extended by two further months where necessary, taking into account the complexity and number of requests.

Users also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan, 6, 28001 Madrid, Spain, through its electronic office at www.aepd.es.

8. Minors

The Website is not aimed at children under 14. INNOVATECH will not knowingly collect data from children under that age. If the Firm becomes aware that it has received personal information from a child under 14 without the consent of their legal guardians, it will delete it immediately.

9. Security

INNOVATECH has adopted the technical and organisational measures needed to protect personal data and prevent its alteration, loss, processing or unauthorised access, taking into account the state of the art, the nature of the data stored and the risks to which it is exposed. The Website has an SSL certificate to encrypt communications.

10. Changes to this Privacy Policy

INNOVATECH reserves the right to modify this Privacy Policy to adapt it to legislative developments or changes in the processing carried out. Changes will take effect from their publication on the Website. Users are advised to review this document periodically.

This English version is provided for information purposes. In the event of any discrepancy, the Spanish version shall prevail.