Privacy Policy

60Nd is committed to protecting the privacy of users who access this website and/or any of its services. Use of the website and/or any of the services offered by 60Nd implies the user's acceptance of the provisions of this Privacy Policy and that their personal data will be treated as stipulated. Although there may be links from our website to other websites, this Privacy Policy does not apply to third-party companies or organizations. 60Nd does not control the content of third-party websites and accepts no responsibility for their content or privacy policies.

1 · Owner information

In compliance with article 10 of Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce, the identification data of the Owner is set out below:

2 · Applicable laws

This privacy policy is based on current Spanish and European regulations on the protection of personal data on the Internet. Specifically, it respects the following rules:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
• Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
• Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE).

3 · Privacy issues

In compliance with the GDPR and the LOPD-GDD, we provide the following information on the processing of personal data you may provide to us.

Responsible for the file

60Nd; our details can be found in section 1 above.

Registration of personal data

Personal data collected through the forms on our pages will be incorporated and processed in our file in order to facilitate, speed up and comply with the commitments established between 60Nd and the user, to maintain the relationship established in the forms, or to respond to a request or query. A register of processing activities is kept in accordance with the GDPR.

Legal basis for processing

The legal basis is consent. 60Nd obtains the user's express and verifiable consent for the processing of their personal data for one or more specific purposes. The user may withdraw consent at any time; it is as easy to withdraw as to give. Other bases: compliance with legal obligations, and legitimate interest for sending our own advertising.

Categories & origin of data

Only identifying data is processed; special categories (Article 9 GDPR) are never processed. Data originates from customers receiving services, users of website services, website forms, and cookies used to improve the browsing experience and analyse usability (see the Cookies policy).

Retention period

Data is retained only for the minimum time necessary for the purposes of processing, and never longer than legally established, or until the user exercises their right to cancellation, opposition or restriction. Certain identification and traffic data may be kept up to 2 years if required by courts. As a general rule, and under article 30 of the Commercial Code, company documentation is kept for 6 years.

Purposes of processing

Customer management: to provide contracted services and invoice them. Management of potential customers: to send information about our products and services to people with a legitimate interest and invite them to relevant events, with prior express consent.

Recipients & processors

We do not sell your personal data and we do not share it with third parties for their own purposes. We do rely on the following service providers, who act as processors on our instructions under Article 28 GDPR:

• Web3Forms: delivers contact-form and download-request submissions to us by email. Receives the data you type into those forms.
• Intuition Machines, Inc. (hCaptcha): anti-abuse verification on those same forms. Receives your IP address and browser signals. United States.
• Google Ireland Ltd / Google LLC (Google Analytics 4): audience measurement, and only if you have accepted analytics cookies. Receives usage data with IP anonymisation enabled. United States. See our Cookie Policy to accept, reject or withdraw.

Google LLC and Intuition Machines, Inc. are established in the United States. Transfers rely on the EU-US Data Privacy Framework and, where applicable, the European Commission's Standard Contractual Clauses.

Children's data

Only those over 14 years of age may consent to the processing of their personal data; for minors under 14, the consent of parents or guardians is required.

Your rights

You may exercise the rights of access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, objection, and the right not to be subject to automated decisions including profiling. You may also file a complaint with the competent Supervisory Authority (AEPD). Exercise these rights by sending us a letter with a copy of an identifying document to our postal or email address in section 1.

4 · Principles applicable to processing

Processing is subject to the principles of Article 5 GDPR and Article 4 et seq. LOPDGDD: lawfulness, fairness and transparency; purpose limitation; data minimization; accuracy; limitation of the retention period; integrity and confidentiality; and proactive responsibility.

5 · Security measures

We apply the security measures established in article 32 of the GDPR to guarantee a level of security appropriate to the risk, ensuring the confidentiality, integrity, availability and resilience of processing systems. Measures include staff information on data-processing policies, regular backups, data access control, and regular verification and assessment processes.

6 · Secrecy and security of personal data

60Nd adopts the technical and organizational measures appropriate to the risk to guarantee the security of personal data and prevent its accidental or unlawful destruction, loss, alteration or unauthorized disclosure. The website holds an SSL certificate, so data is transmitted encrypted. Should a personal data breach likely to entail a high risk to rights and freedoms occur, the Data Controller undertakes to inform the user without undue delay. Personal data is treated as confidential by the Data Controller and all persons to whom it is made accessible.

7 · Links to third-party websites

60Nd incorporates social-network plugins that allow access from the website, which may store social-media cookies in the user's browser. These networks have their own data-protection and cookie policies and are responsible for their own files and privacy practices. For information: linkedin.com/legal/privacy-policy.

8 · Acceptance and changes

By using the website, the user confirms they have read and agree with the conditions of this Privacy Policy and accepts the processing of their personal data in the manner, periods and for the purposes indicated. 60Nd reserves the right to modify this Privacy Policy according to its own criteria or motivated by legislative, jurisprudential or doctrinal changes of the Spanish Data Protection Agency. The user is advised to check this page periodically.

Last updated: 30 May 2024