Privacy policy

Last updated: October 2026

Data controller

• Controller: IATSAE Networks SL
• Tax ID (NIF): B64625718
• Address: C/ Pompeu Fabra 5, Edificio Podium, 08840 Viladecans (Barcelona), Spain
• Email: hola@iatsae.com
• Phone: +34 936 38 96 32

IATSAE processes personal data in accordance with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), and Law 34/2002 on Information Society Services (LSSI-CE).

This website is aimed at companies and professionals. A summary of this information is shown next to the form; the full version is here.

Requests for information (contact form)

• Data: name, email and message (required) and, if you provide them, company, phone and the business lines you are interested in. We also record the page and language from which you send the request.
• Purpose: to answer your request, contact you and, where appropriate, prepare and follow up a commercial proposal. Your request is received by the team of the business line you are interested in.
• Legal basis: taking steps at your request prior to entering into a contract (art. 6.1.b GDPR) and our legitimate interest in maintaining professional contact with the company you represent (art. 6.1.f GDPR and art. 19 LOPDGDD).
• Retention: while the request is handled; if no business relationship follows, the data are deleted 24 months after the last contact.

If you give us data about other people (for example, a colleague), you must have informed them beforehand.

Registration for grants and the daily alert

• Data: name and email (required), region and, if you provide them, company, phone, province, town, sector, type and size of company and what you would like to fund. We also store the date of registration and of your consent.
• Purpose: to verify your email with a code, to give you access to the full grant pages and, only if you tick the box, to send you a daily email with the new grants that fit your profile. Your data is also added to our email tool (Brevo) to manage these emails.
• Legal basis: providing the service you request when you register (Art. 6.1.b GDPR) and, for the daily alert, your consent (Art. 6.1.a GDPR and Art. 21 LSSI-CE), which you can withdraw at any time using the unsubscribe link in every email.
• Retention: while you keep your registration or until you ask us to erase your data at hola@iatsae.com. Unsubscribing from the daily alert does not delete your registration. The verification code expires after 15 minutes.
• AI-generated grant pages: the grant radar uses an artificial intelligence service (Google Gemini) only with public information about the calls; no personal data is sent to it.

Form security

To protect the form against automated submissions we may use Cloudflare Turnstile, which analyses technical browser signals. Legal basis: our legitimate interest in the security of the website (art. 6.1.f GDPR). Technical security logs are kept for short periods.

Analytics and advertising (only with your consent)

• Data: cookie identifiers, IP address (shortened by Google), pages visited, traffic source, device and browser, and actions on the website (for example, sending a request or registering for grants).
• Purpose: statistical knowledge of how the website is used, to improve it, and measuring the effectiveness of our Google ads.
• Legal basis: your consent (Art. 6.1.a GDPR and Art. 22.2 LSSI-CE), which you give or refuse in the cookie notice and can withdraw at any time using “Cookie settings”.
• Retention: Google Analytics data is kept for a maximum of 14 months.

Social networks and group websites

IATSAE has profiles on LinkedIn, Instagram and YouTube. If you interact with them, we will process your data to manage that relationship, in accordance with each network’s terms. The websites of the group’s business lines linked from this site have their own privacy policies.

Recipients and processors

We do not share data with third parties unless required by law. To provide the service we use the following providers, who act as data processors under the contract required by art. 28 GDPR:

International transfers

Some of these providers process data outside the European Economic Area, mainly in the United States. These transfers are based on the European Commission’s adequacy decision on the EU-US Data Privacy Framework where the provider has joined it or, otherwise, on the standard contractual clauses approved by the European Commission (art. 46 GDPR). You can ask us for a copy of these safeguards at hola@iatsae.com.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent you have given at any time, without affecting the lawfulness of prior processing.

To exercise them, write to hola@iatsae.com or to our postal address, stating “Data protection” and the right you wish to exercise. We will reply within one month, extendable by two further months in complex cases.

If you believe the processing does not comply with the law, you can lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan 6, 28001 Madrid; www.aepd.es).

Minors

This website is aimed at companies and professionals and we do not knowingly process data of children under 14 (art. 7 LOPDGDD).

Security

IATSAE applies appropriate technical and organisational measures to ensure the confidentiality, integrity and availability of data, including encrypted transmission (HTTPS) of the form and protection against automated submissions.

Changes to this policy

We may update this policy to reflect legal changes or changes to the website’s services. The date of the last update is shown at the top of the page.