WEBSITE PRIVACY POLICY

I. PRIVACY POLICY AND DATA PROTECTION

In compliance with current legislation, Quantech (hereinafter also referred to as the «Website») commits to adopting the necessary technical and organizational measures to ensure a level of security appropriate to the risk of the data collected.

Laws incorporated in this privacy policy

This privacy policy is adapted to the current Spanish and European regulations on personal data protection online. Specifically, it complies with the following regulations:

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data (GDPR).
Organic Law 3/2018, of December 5, on Personal Data Protection and the Guarantee of Digital Rights (LOPD-GDD).
Royal Decree 1720/2007, of December 21, approving the Regulation for the development of Organic Law 15/1999, of December 13, on the Protection of Personal Data (RDLOPD).
Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the data controller

The data controller of the personal data collected on Quantech is: Quantech ATZ, with Tax ID: ESA61223160, registered in Registro Mercantil de Barcelona, whose representative is Quantech (hereinafter, «Data Controller»). Contact details are as follows:

Address: C/ GRAN CAPITAN S/N Edificio C1 – Campus Nord UPC, 08034 Barcelona, España
Contact phone: 932047256
Contact email: info@quantech.es

Personal Data Register

In compliance with the GDPR and LOPD-GDD, we inform you that the personal data collected by Quantech through the forms on its pages will be incorporated and processed in our file to facilitate, expedite, and fulfill the commitments established between Quantech and the User, or to maintain the relationship established through the forms completed, or to address a request or inquiry. Additionally, in accordance with GDPR and LOPD-GDD, unless the exception provided in Article 30.5 of GDPR applies, a record of processing activities specifying the treatment activities carried out and other established circumstances is maintained.

Principles applicable to personal data processing

The processing of User personal data will be subject to the following principles outlined in Article 5 of GDPR and Article 4 and subsequent articles of Organic Law 3/2018:

Principle of lawfulness, fairness, and transparency: Consent will always be required from the User, with fully transparent information provided about the purposes for which the personal data is collected.
Principle of purpose limitation: Personal data will be collected for specific, explicit, and legitimate purposes.
Principle of data minimization: Only strictly necessary personal data will be collected for the purposes for which they are processed.
Principle of accuracy: Personal data must be accurate and kept up-to-date.
Principle of storage limitation: Personal data will only be retained in a manner that allows identification of the User for the time necessary for the purposes of processing.
Principle of integrity and confidentiality: Personal data will be processed securely and confidentially.
Principle of proactive responsibility: The Data Controller will ensure compliance with the aforementioned principles.

Categories of personal data

The categories of data processed by Quantech are solely identifying data. Special categories of personal data as defined in Article 9 of GDPR are not processed.

Legal basis for personal data processing

The legal basis for personal data processing is consent. Quantech commits to obtaining explicit and verifiable consent from the User for the processing of their personal data for one or more specific purposes.

The User has the right to withdraw consent at any time. Withdrawing consent will be as easy as granting it. As a general rule, withdrawing consent will not affect the use of the Website.

When the User is required or able to provide their data via forms for inquiries, information requests, or matters related to the Website’s content, they will be informed if providing any data is mandatory because it is essential for the proper execution of the operation.

Purposes of processing personal data

Personal data is collected and managed by Quantech to facilitate, expedite, and fulfill the commitments established between the Website and the User, or to maintain the relationship established in the forms completed by the User, or to address a request or inquiry.

Additionally, the data may be used for commercial purposes, including personalization, operations, statistics, and activities within Quantech’s social purpose, as well as for data extraction, storage, and marketing studies to tailor the Content offered to the User and improve the quality, functionality, and browsing experience of the Website.

When personal data is obtained, the User will be informed of the specific purpose(s) for which the data will be used.

Data retention periods

Personal data will only be retained for the minimum time necessary for the purposes of their processing or until the User requests their deletion.

When personal data is obtained, the User will be informed of the retention period or, when that is not possible, the criteria used to determine this period.

Recipients of personal data

User personal data will not be shared with third parties.

When personal data is obtained, the User will be informed of the recipients or categories of recipients of the personal data.

Personal data of minors

In compliance with Articles 8 of GDPR and 7 of Organic Law 3/2018, only individuals aged 14 and over can lawfully provide their consent for their personal data to be processed by Quantech. For minors under 14, the consent of parents or guardians will be required, and processing will only be lawful to the extent they authorize it.

Data confidentiality and security

Quantech commits to adopting the technical and organizational measures necessary, at the appropriate security level, to ensure the security of personal data and prevent its accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

The Website has an SSL (Secure Socket Layer) certificate, ensuring that personal data is transmitted securely and confidentially, as data transmission between the server and the User is fully encrypted.

However, due to the nature of the Internet, Quantech cannot guarantee complete invulnerability to potential hacking or fraudulent access. In case of a security breach that poses a high risk to Users’ rights and freedoms, Quantech will notify the User without undue delay.

Personal data will be treated as confidential by the Data Controller, who commits to ensuring its confidentiality by legal or contractual obligation among employees, partners, and any individuals granted access to the information.

Rights arising from the processing of personal data

The User has the following rights over Quantech regarding their personal data, which can be exercised against the Data Controller as recognized by the GDPR and Organic Law 3/2018:

Right of access: The User has the right to obtain confirmation of whether Quantech is processing their personal data, and if so, obtain information about their specific data and the processing activities carried out.
Right to rectification: The User has the right to have inaccurate personal data corrected or completed when incomplete, considering the purposes of processing.
Right to erasure («right to be forgotten»): The User has the right, under certain circumstances, to request the deletion of their personal data.
Right to restriction of processing: The User can request that the processing of their personal data be limited in certain circumstances.
Right to data portability: The User has the right to receive their personal data in a structured, commonly used, and machine-readable format.
Right to object: The User can object to the processing of their personal data.
Right not to be subject to automated decisions: The User has the right not to be subject to a decision based solely on automated processing, including profiling, unless permitted by law.

To exercise these rights, the User must send a written communication to the Data Controller including identification details, the specific request, and proof of identity. Requests can be sent to the following contact details:

Postal Address: C/ GRAN CAPITAN S/N Edificio C1 – Campus Nord UPC, 08034 Barcelona, España
Email: info@quantech.es

Links to third-party websites

The Website may include hyperlinks or links to external websites that are not operated by Quantech. These websites have their own privacy policies, and Quantech is not responsible for their data processing activities.

Complaints to the supervisory authority

If the User believes their personal data rights are violated, they may lodge a complaint with the appropriate supervisory authority, such as the Spanish Data Protection Agency (AEPD).

II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

Users must read and agree to this Privacy Policy before providing their consent for the processing of their data. Use of the Website implies acceptance of the Privacy Policy.

Quantech reserves the right to modify this Privacy Policy as required by changes in regulations or internal policies. Users are encouraged to periodically review this page to stay updated.

This Privacy Policy was last updated to comply with Regulation (EU) 2016/679 and Organic Law 3/2018.