Privacy policy

This Privacy Policy (hereinafter, the ‘PRIVACY POLICY‘) regulates, in general terms, the collection and processing by FUNDACIÓN TECNALIA RESEARCH & INNOVATION (hereinafter, ‘TECNALIA‘) of (i) the personal data that you provide us with as a user of this website (hereinafter, the ‘WEBSITE’), including the services that are available from time to time through the WEBSITE; and (ii) other data collected through other collection systems duly identified below. All this notwithstanding the specific provisions set out in certain sections, forms or services available on the WEBSITE in order to provide you with the relevant information and, where appropriate, obtain your consent.

TECNALIA reserves the right to modify the PRIVACY POLICY to adapt it to legislative, legal and/or administrative updates, as well as to the practices that it develops from time to time on the WEBSITE, taking into account at all times your rights and interests.

In any event, TECNALIA will provide you with the appropriate technical resources so that you can access the PRIVACY POLICY in order to give due fulfilment to the information obligations that we have to observe in accordance with the applicable data protection regulations.

The Data Controller responsible for processing your data is FUNDACIÓN TECNALIA RESEARCH & INNOVATION, an entity with registered address in Parque Científico y Tecnológico de Bizkaia. Astondo Bidea, Edificio 700. 48160 Derio (Bizkaia), registered in the Register of Foundations of the Basque Country under registration number F-69 and holding N.I.F. G-48975767.

For any matter relating to the protection of personal data you may contact us at the following address dpo@tecnalia.com.

 

The data we process at TECNALIA have been provided by you, through (i) the various forms you fill out during navigation through the WEBSITE and/or through other channels (e.g. registration as a user of the WEBSITE –where any – contact forms, request for quote forms, etc.); (ii) by sending a reference email; or (iii) by other appropriately identified acquisition systems, such as the registration of visits to our sites and the video surveillance system implemented at our facilities.

In the event that the personal data belong to a third party, you ensure that you have duly informed that third party of the privacy policy and have obtained their authorisation to provide their data to TECNALIA for the purposes set forth below.

In addition, we inform you of the possible processing of your social media data through the corporate profiles that TECNALIA keeps available on each social network in which it is present, all following the terms and conditions established in each social network.

When indicated (fields marked with a ‘*’), the provision of the required personal data will be mandatory and your refusal to provide them or the provision of incorrect data will result in the inability to fulfil your request and/or the provide the required services.

The data that we process at TECNALIA are those that you have provided us during your navigation through the WEBSITE, through the appropriate forms that we use to formalise our contact with you and/or via email, as well as those others that, if applicable, we get through TECNALIA’s corporate profiles on the social networks where we are present.

In particular, TECNALIA processes the following categories of data:

• Identifying and contact information (e.g., name, surname, national identity document number, and, where applicable, personal address, email address, and personal telephone number).
• Professional contact information (company where you work, position and duties, professional postal and email address, and professional telephone number) to the extent that (i) you provide it through the corresponding forms and it is necessary for contacting you and/or for maintaining our business relationship with you or your company; or (ii) it is provided by your company or by you in any other way and is necessary for the performance of the contractual relationship with you or your company.
• Identification codes and passwords as a registered user of the WEBSITE and/or the applications accessible through it.
• Internet browsing data (e.g., IP address, website visits, Wi-Fi connections, etc.).
• Data relating to the contracting of TECNALIA services that you formalize through the WEBSITE and/or through other means.
• Banking and financial transaction details.
• Data on personal characteristics, education, employment, etc. (in the case of job applications/offers and/or TECNALIA selection processes in which you participate voluntarily).
• Images captured through the relevant technical means during activities, events, or projects organized or led by TECNALIA.
• Images captured by the video surveillance system installed at the entrances to our facilities.
• Data relating to complaints made through our internal information system and its corresponding ethics hotline.

The processing of your personal data is intended for the following purposes:

• To manage and process your registration as a user of the WEBSITE, when possible and based on your request for pre-contractual measures or the contractual relationship established with you in this regard.
• To manage your access to and use of the content and services that TECNALIA makes available to you through the WEBSITE, including blog services, social networks, or any other functionalities that may be accessible from the WEBSITE at any given time, all based on your request for pre-contractual measures or the contractual relationship established with you in this regard.
• To obtain statistical data on access, downloads, and use of the content and services made available to you through the WEBSITE, based on your consent. • To process and manage the contracting and, where applicable, subsequent invoicing of services that you may formalize with TECNALIA through the WEBSITE or by any other means (including the issuance and management of offers and quotes and, in general, maintaining, managing, and monitoring the contractual relationship you establish with us as a client of our services), all based on (i) your request for pre-contractual measures or the contractual relationship established with you in this regard, or (ii) on the basis of legitimate interest in the relationship if you are acting on behalf of your company.
• To process and manage your request to participate in activities, events, and/or projects (online or in-person) organized or led by TECNALIA, as well as your subsequent participation therein, all based on your request for pre-contractual measures or the contractual relationship established with you in this regard.
• To manage and publicize activities and events organized by TECNALIA in which you have voluntarily participated. Using your voice and/or image for this purpose, based on your consent: Conduct surveys of any kind related to our activities, based on the legitimate interest of the entity (e.g., quality of processes, products, and services, etc.).
• Process and manage requests for information, suggestions, complaints, or claims submitted through the WEBSITE or email, all based on your consent.
• To conduct surveys of any kind related to our activities, based on the legitimate interest of the entity (e.g., quality of processes, products, and services, etc.).
• To process and manage requests for information, suggestions, complaints, or claims submitted through the WEBSITE or email, all based on your consent.
• To manage a contact register in order to foster and establish commercial and/or collaborative relationships with third-party operators, in which you will be included, based on your consent.
• To send you, through various means, including electronic, commercial and advertising communications from TECNALIA regarding products, services, offers, promotions, and any other relevant information related to the activities of said entity and its affiliated entities, provided that (i) this is based on your consent; or (ii) it is based on the legitimate interest of TECNALIA (marketing to clients who have contracted similar products or services).
• To send you, by different means, including electronic, communications about possible job vacancies, provided that you have consented to this through the means established for this purpose and on the basis of your consent.
• To manage your job application or your registration for a job offer and your participation in the corresponding selection process, all based on your request for pre-contractual measures.
• To attend to and manage the information provided through the internal information channel accessible via the WEBSITE and, where appropriate, investigate the reported facts, all based on compliance with the legal obligations that TECNALIA is required to observe (Law 2/2023, of February 20, regulating the protection of persons who report regulatory infringements and the fight against corruption).
• To record the access and presence of third parties (visitors) at TECNALIA’s facilities, all based on the legitimate interest of the entity (security of persons and property).
• To guarantee the safety and integrity of people and property by capturing images through the video surveillance system implemented at the entrances and inside our facilities, all based on the public interest (safety of people and property).

We remind you that, when consent is the basis for the legitimization of the processing, you can revoke it at any time, freely and free of charge, under the terms indicated in Section 7 below.

We would like to inform you that your personal data may be transferred to the following third parties:

• Agencies, Authorities and Public Administrations to which, if appropriate, TECNALIA has a legal obligation to communicate your data.
• With the following Entities in which TECNALIA has a stake, for the purposes of responding to your requests and queries and/or sending you commercial communications regarding said entities and their respective activities or products.

Certinalia S.L.U.:

• • Nif: B-20991220
  • Registered office: Azpeitia (Gipuzkoa), Anardi Area n.5
  • Telephone: +34 678 860 822
  • E-mail: info@certinalia.com

Laboratorium Sanitatis  S.L.,Unipersonal:

• • Nif: B-01373158
  • Registered office: 01510 Miñano (Alava), Parque Tecnológico de Alava, Leonardo da Vinci, n. 11.
  • Telephone: +34 946 430 850
  • E-mail:  labsan@labsan.es

Octantis Tecnalia Group SL, Unipersonal:

• • Nif: B-95711800
  • Registered office: Laida bidea s/n, edificio 204, Parque Científico y Tecnológico de Bizkaia, 48170, Zamudio (Bizkaia)
  • Telephone: +34 946 430 850
  • E-mail:  info@octantis.es

Furthermore, we inform you that your personal data may be communicated to third parties that provide services to TECNALIA, as Processors, some of whom have data processing centres located outside the European Economic Area, your data may therefore be subject to international data transfer, subject to applicable legal guarantees. In particular, TECNALIA uses third-party technology services located in the USA to manage the delivery of electronic business communications and to develop online events. The corresponding international data transfers are covered in the use of standard contractual clauses for the transfer of personal data to Processors in charge of the processing established in third countries approved by the European Commission.

Any other international data transfers are not planned.

In general, personal data will be retained as long as it remains necessary for the purpose for which it was collected or until, at an earlier time, you revoke your consent or request its deletion, as well as the additional time necessary to fulfil the legal obligations that TECNALIA must observe.

In any case, we inform you that TECNALIA has established internal data cleansing policies designed to control the retention periods of the personal data in its possession, they may therefore be cancelled when they are no longer necessary and/or appropriate for the purpose for which they were collected.

In particular, the following is stated:

• Regarding the registration of visits to our facilities, the data will be kept for a maximum period of one month.
• With regard to the video surveillance system implemented in our premises, it is stated that the images taken will be subject to suppression within a maximum period of one month.
• For job application management, your data will be retained for a maximum period of 36 months.

The applicable data protection regulations give you a number of rights relating to your personal data that you may exercise during the processing of your personal data. These rights are as follows:

• Access to your data: You have the right to access your data in order to know what personal data we are processing.
• Request rectification or erasure of your data: in certain circumstances, you have the right to rectify any inaccurate personal data concerning you that are the subject of processing by us, or even to ask us to erase them when, among other reasons, the data are no longer necessary in relation to the purposes for which they were collected.
• Request the restriction of the processing of your data: in certain circumstances, you have the right to ask us to limit the processing of your data, in which case we inform you that we will only retain them for the exercise or defence of claims as provided for in the applicable data protection regulations.
• Data portability: in certain circumstances, you have the right to receive the personal data that you have provided us, in a structured commonly used and machine-readable format and to transmit it to another Data Controller.
• Object to the processing of your data: in certain circumstances and for reasons related to your particular situation, you have the right to object to processing of your data in which case, we would cease to process them unless, for legitimate compelling reasons, or the exercise or defence of possible claims, they must be retained.

You also have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent prior to withdrawal.

You may exercise these rights by written request addressed to TECNALIA, at the postal address indicated in the section 1 or by sending an e-mail addressed todpo@tecnalia.com.

Finally, we want to indicate that you have the right to lodge a complaint with the supervisory authority concerned (in Spain, the Spanish Data Protection Agency), especially when you have not been able to exercise your rights to your satisfaction. You can contact the Authority through its website: www.aepd.es.

TECNALIA will process your data at all times in an absolutely confidential manner and keeping the mandatory duty of secrecy in respect of them, in accordance with the provisions of the applicable regulations regarding data protection, taking the appropriate technical and organisational measures to ensure the security of your data and prevent its alteration, loss, unauthorised processing or access, taking into account the state of the technology, the nature of the data stored and the risks to which they are exposed.

In addition, we inform you that TECNALIA has established a Cookie Policy that is accessible through the following link.

Last Updated: 17/02/2026