PRIVACY POLICY
Last updated: [Augusto 2026]
At INCIMAT INNOVATION AND TECHNOLOGIES, we are committed to protecting the privacy and personal data of users of our website. This Privacy Policy explains how we collect, use and protect personal data provided through this website in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and applicable Spanish data protection legislation.
1. Data Controller
The controller responsible for the processing of personal data collected through this website is:
Data Controller: INCIMAT INNOVATION AND TECHNOLOGIES SLU
Tax Identification Number (NIF/CIF): B88203948
Registered Office: C/ JAIME EL CONQUISTADOR 22 – 28045 MADRID SPAIN
Email: info@incimat.com
Website: www.incimat.com
Hereinafter, INCIMAT.
2. Personal Data We May Collect
INCIMAT may collect personal data when users contact us, complete forms available on the website or maintain a professional or commercial relationship with the company.
Depending on the circumstances, the data processed may include:
First and last name.
Company or organisation.
Job title or professional position.
Email address.
Telephone number.
Information voluntarily included by the user in forms or communications.
Information necessary to manage commercial, contractual or professional relationships.
Technical and browsing data, where applicable, in accordance with our Cookie Policy.
Users are requested not to provide sensitive personal data through the website’s general contact forms.
3. Purposes of Processing
Personal data provided to INCIMAT may be processed for the following purposes:
Responding to enquiries and requests for information.
Managing enquiries submitted through contact forms, email or other available communication channels.
Managing service and quotation requests.
Assessing the requirements of potential clients and preparing proposals, quotations and offers for engineering, consultancy or other professional services provided by INCIMAT.
Managing client relationships.
Administering existing professional, commercial and contractual relationships with our clients.
Managing professional communications.
Maintaining communications relating to projects, services, proposals, contracts and other professional relationships.
Compliance with legal obligations.
Complying with legal, tax, accounting and administrative obligations applicable to INCIMAT.
Website and information security.
Preventing fraudulent use, unauthorised access, security incidents and other activities that may compromise the security of our systems.
Should INCIMAT use personal data in the future to send newsletters or marketing communications that are not directly related to an existing contractual relationship, the relevant consent will be obtained whenever legally required.
4. Legal Basis for Processing
The legal basis for processing will depend on the specific purpose:
Consent of the data subject, where the user voluntarily provides personal data through a form or expressly authorises a particular processing activity.
Pre-contractual measures, where processing is necessary to prepare quotations or proposals or to respond to requests relating to a potential contractual relationship.
Performance of a contract, where processing is necessary to manage services contracted by a client.
Compliance with legal obligations, where INCIMAT is required to process certain information under applicable legislation.
Legitimate interests, where processing is necessary to protect our systems, prevent fraud, ensure security or manage certain professional relationships, provided that the rights and interests of the data subject do not override those interests.
5. Data Retention
Personal data will only be retained for as long as necessary to fulfil the purpose for which it was collected.
Information obtained through enquiries or requests for information will be retained for the period necessary to respond to the request and, subsequently, for a reasonable period to address any potential liabilities.
Where a contractual or professional relationship exists, personal data may be retained for the duration of that relationship and thereafter for the periods required under applicable legislation.
Where processing is based on consent, personal data may be retained until the data subject withdraws that consent, without prejudice to any statutory retention periods that may apply.
6. Recipients of Personal Data
As a general rule, INCIMAT will not disclose personal data to third parties unless:
Disclosure is necessary to provide a requested service.
There is a legal obligation to do so.
Disclosure is necessary for the performance of a contractual relationship.
The data subject has expressly authorised the disclosure.
INCIMAT may use service providers that have access to certain personal data in order to provide services necessary for the operation of the company or website, including web hosting, email services, IT maintenance, management tools, professional services and technology providers.
Where such providers act as data processors, INCIMAT will implement the appropriate agreements and safeguards required under applicable data protection legislation.
7. International Data Transfers
Certain technology providers used by INCIMAT may process information from countries outside the European Economic Area.
Where international transfers of personal data take place, INCIMAT will implement the safeguards required under applicable legislation, including, where appropriate, European Commission adequacy decisions, Standard Contractual Clauses or other legally recognised mechanisms.
8. Data Subject Rights
Users may exercise the rights recognised under applicable data protection legislation, including:
Access: obtain information about the personal data we process about you.
Rectification: request the correction of inaccurate or incomplete information.
Erasure: request deletion of your personal data where applicable.
Objection: object to the processing of your personal data in certain circumstances.
Restriction of processing: request the temporary restriction of the processing of your personal data.
Data portability: receive your personal data in a structured, commonly used and machine-readable format where applicable.
Withdrawal of consent: withdraw previously given consent at any time.
To exercise these rights, please contact:
info@incimat.com
The request must provide sufficient information to identify the data subject and specify the right they wish to exercise.
Withdrawal of consent will not affect the lawfulness of processing carried out prior to its withdrawal.
9. Right to Lodge a Complaint
If you believe that the processing of your personal data does not comply with applicable data protection legislation, you have the right to lodge a complaint with the competent supervisory authority.
In Spain, the competent authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD).
10. Data Security
INCIMAT implements reasonable and appropriate technical and organisational measures designed to protect personal data against loss, alteration, unauthorised access, disclosure or unlawful processing.
These measures will be reviewed and updated where necessary, taking into account the nature of the personal data processed, existing risks and technological developments.
11. Personal Data Provided by Third Parties
Where a user provides personal data relating to third parties, the user must ensure that they have a lawful basis for doing so and that the relevant individuals have been informed where required.
The user is responsible for the accuracy and legitimacy of the information provided.
12. Accuracy of Personal Data
Users guarantee that the information provided is true, accurate, complete and up to date.
Users should notify INCIMAT of any changes to their personal data where necessary to ensure that the information remains accurate.
13. Minors
The services provided by INCIMAT are primarily intended for businesses, professionals and adults.
INCIMAT does not intentionally seek to collect personal data relating to minors through the general forms available on this website.
14. Cookies and Similar Technologies
This website may use cookies and similar technologies to ensure its proper operation, obtain statistical information or provide additional functionality.
The use of these technologies is specifically governed by our Cookie Policy, where users can obtain further information about the cookies used and manage their preferences where applicable.
15. Links to Third-Party Websites
The INCIMAT website may contain links to websites, platforms or services operated by third parties.
INCIMAT does not control the privacy policies of such third parties. We therefore recommend reviewing their respective privacy policies before providing personal data.
16. Changes to this Privacy Policy
INCIMAT may amend this Privacy Policy where necessary as a result of legislative changes, guidance issued by data protection authorities, changes to our processing activities or modifications to the services offered through the website.
Where significant changes are made, the date shown at the beginning of this Privacy Policy will be updated.