Privacy Policy

Last updated: May 2026 · In the event of any discrepancy, the Spanish version prevails.

I. Data controller

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), the controller of the personal data collected through this Website is:

Sivicom Engineering, S.L. is not required to appoint a Data Protection Officer (DPO) under Article 37 of the GDPR. For any question about the processing of personal data, you can contact us at the address above.

II. Applicable legal framework

This privacy policy complies with the Spanish and European data protection legislation in force. In particular:

III. Data we process and how we use it

Data collected

The personal data collected through the contact form on this Website (first name, surname, email address, phone and message) will be included in Sivicom Engineering's processing activities for the sole purpose of handling the request for information or query made by the User.

Categories of data

Only identification and contact data are processed. Special categories of personal data within the meaning of Article 9 of the GDPR (data concerning health, ethnic origin, religious beliefs, trade union membership, etc.) are never processed.

Processing principles

The processing of the User's personal data is subject to the principles of Article 5 of the GDPR: lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality; and accountability.

Legal basis for processing

The legal basis for processing the data provided through the contact form is the User's express consent (Art. 6.1.a GDPR), given freely, specifically, in an informed and unambiguous way by ticking the box provided for that purpose in the form. The User may withdraw their consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

Purpose of processing

Personal data are collected and managed exclusively to:

The data will not be used to send unsolicited commercial communications without obtaining separate, specific consent for that purpose.

Retention periods

Personal data will be kept for the time strictly necessary to handle the request and, in any case, for a maximum of 24 months from the last communication with the User, unless the User requests their erasure earlier or they must be kept by legal obligation or for the exercise or defence of claims.

Recipients

As a general rule, the User's personal data will not be disclosed to third parties. The contact form is handled by an in-house service hosted on Sivicom Engineering servers, so the data are not transmitted to external form management providers.

However, the Website uses the following third-party services, which may process User data:

International data transfers

Google LLC is based in the USA and may process data outside the European Economic Area (EEA). Sivicom Engineering ensures that this transfer is made with the appropriate safeguards provided for in Chapter V of the GDPR (Google's adherence to the EU–US Data Privacy Framework).

IV. Minors

Only people over 14 may lawfully give their consent to the processing of their personal data, in accordance with Article 7 of the LOPDGDD. If the User is under 14, they must have the express authorisation of their parents or legal guardians, and the processing is lawful only to the extent that such authorisation has been given.

V. Data security

Sivicom Engineering adopts the technical and organisational measures needed to guarantee the integrity, confidentiality and availability of the personal data processed, in accordance with Article 32 of the GDPR, preventing their destruction, loss, accidental or unlawful alteration, and unauthorised access or disclosure.

This Website has an SSL/TLS certificate that encrypts communications between the User's browser and the server. The data are treated confidentially by Sivicom Engineering and by any staff or third party who may access them in the course of their duties, all of whom are bound by a duty of secrecy.

VI. User rights

The User may exercise the following rights recognised in the GDPR and the LOPDGDD at any time and free of charge:

To exercise any of these rights, the User may write to info@sivicom.cat with “GDPR rights” in the subject line, giving their first name, surname and a clear description of the request in the message. Sivicom Engineering may verify the identity of the requester by means proportionate to the request, without demanding unnecessary documentation. A reply will be provided within one month at most, extendable by up to two further months in particularly complex cases.

If the User considers that the processing of their data breaches current legislation, they also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

VII. Third parties and external links

The Website may include hyperlinks to third-party websites. Sivicom Engineering is not responsible for the privacy practices or the contents of those websites. Users are advised to check the privacy policy of every site they visit.

VIII. Changes to the privacy policy

Sivicom Engineering reserves the right to amend this Privacy Policy to adapt it to legislative or case-law changes or to the criteria of the Spanish Data Protection Agency. The date of the last update appears at the beginning of this document.

Where changes are significant or affect processing previously consented to, Sivicom Engineering will inform the affected Users before the changes take effect, so that they can exercise their rights if they see fit.

We use our own and third-party cookies to analyse traffic and improve your experience. More information.