This is an English translation provided for convenience. The binding version is the Spanish original, available at Política de Privacidad. In the event of any discrepancy, the Spanish text prevails.
In compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Act 3/2018 (LOPDGDD), we set out below how we process your personal data at onext.
1. Key information on data protection
Controller
ONEXT INNOVATION, SL
Tax ID (CIF)
B93847648
Purpose
Handling enquiries, providing services and sending the newsletter
Legal basis
Consent of the data subject
Recipients
No data will be disclosed except where required by law
Rights
Access, rectification, erasure, objection, restriction and portability
2. Who is the controller of your data?
3. What personal data do we collect?
At ONEXT INNOVATION, SL we collect the personal data you voluntarily provide through the forms available on our website:
3.1. Contact form
- Name and surname
- Email address
- Company (optional)
- Message or enquiry
3.2. Newsletter (where applicable)
- Email address
- Name (optional)
3.3. Browsing data
In addition, when you visit our website we automatically collect certain information about your device, including information about your web browser, IP address, time zone and some of the cookies installed on your device. For more information, see our Cookie Policy.
4. For what purposes do we process your personal data?
The personal data you provide will be processed for the following purposes:
Handling enquiries
Responding to and managing the requests for information or enquiries you submit through the contact forms.
Provision of services
Managing the contracting of technology consulting, AI implementation, DevSecOps, QA and Talent as a Service.
Commercial communications
Sending you information about our services, news and content (always with your express consent).
Improving your experience
Analysing use of the website in order to improve our services and the user experience.
5. What is the legal basis for processing your data?
The legal basis for processing your personal data is:
a) Consent of the data subject (Art. 6(1)(a) GDPR): by completing the contact or subscription forms, you give your express consent to the processing of your personal data.
b) Performance of a contract (Art. 6(1)(b) GDPR): when you request our services, processing your data is necessary in order to perform the contract.
c) Legitimate interest (Art. 6(1)(f) GDPR): for sending commercial communications about services similar to those contracted, provided you have not objected to the processing.
6. How long will we keep your data?
Contact data: until you request erasure, or for 2 years from the last interaction.
Client data: for the duration of the business relationship and thereafter for the limitation period of the applicable legal obligations (normally 6 years from the last invoice).
Newsletter data: until you unsubscribe or cancel your subscription.
7. To which recipients will your data be disclosed?
Your personal data will not be transferred or disclosed to third parties, except in the following cases:
a) Legal obligation: where a legal obligation so requires (tax, judicial or administrative authorities).
b) Service providers: we may share your data with third-party service providers that help us operate our business (email marketing platforms, hosting services, web analytics tools).
8. What are your rights?
Anyone has the right to obtain confirmation as to whether we are processing personal data concerning them. Data subjects have the right to:
Right of access
Obtain information about what data we are processing
Right to rectification
Request correction of inaccurate data
Right to erasure
Request deletion of your data
Right to object
Object to the processing of your data
Right to restriction
Request restriction of processing
Right to portability
Receive your data in a structured format
How to exercise your rights
To exercise your rights, send a request to info@onext.es stating:
- • Your full name and email address
- • The right you wish to exercise
- • A copy of your ID document
We will respond within a maximum of 1 month.
Right to lodge a complaint
If you believe the processing does not comply with the regulations, you may lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es
9. Security measures
ONEXT INNOVATION, SL undertakes to adopt the necessary technical and organisational measures, at a level of security appropriate to the risk of the data collected.
The security measures implemented include:
- SSL/TLS encryption on all website communications
- Access to personal data restricted to authorised staff only
- Regular backups
- Protection through strong passwords
- Regular updating of security systems
- Confidentiality agreements with employees and suppliers
10. Contact
For any query relating to this Privacy Policy, you can contact us: