Privacy Policy
1. Identity of the controller
Data Controller: Entra Technologies S.L., a limited liability company incorporated under Spanish law, with registered office in Madrid, Spain (hereinafter, "Entra", "we", "us" or "our").
Contact email: privacy@entratechnologies.com
2. Data we collect
We may collect and process the following categories of personal data depending on your interaction with us:
- Contact form data: Name, email address, company name, job title, phone number, and any information you voluntarily include in message fields.
- Cookies and similar technologies: Essential cookies required for website functionality and, with your consent, analytics cookies to understand how visitors use our site.
- Analytics data: Aggregated and, where consent is granted, individualised usage data including pages visited, session duration, referral source and interaction patterns.
- Device and technical information: IP address, browser type and version, operating system, device type, screen resolution, language preferences, and time zone.
- Pioneer Program data: Information submitted through the Pioneer Program expression-of-interest form, including facility details, equipment manufacturers and operational data.
- Partner Network data: Business contact information, company details, areas of expertise and partnership preferences.
3. Purpose and legal basis
We process your personal data for the following purposes, each supported by a legal basis under Article 6 of the GDPR:
- Responding to enquiries and managing contact form submissions — Legal basis: consent (Art. 6(1)(a) GDPR) when you voluntarily submit the form.
- Managing Pioneer Program participation — Legal basis: performance of pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR).
- Managing Partner Network relationships — Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in developing business partnerships, and pre-contractual measures (Art. 6(1)(b) GDPR) where applicable.
- Website analytics and improvement — Legal basis: consent (Art. 6(1)(a) GDPR) for non-essential analytics; legitimate interest (Art. 6(1)(f) GDPR) for essential site functionality and security.
- Compliance with legal obligations — Legal basis: compliance with a legal obligation to which the controller is subject (Art. 6(1)(c) GDPR).
- Future platform service provision — Legal basis: performance of a contract (Art. 6(1)(b) GDPR), to be specified in detail in the applicable service agreement and Data Processing Agreement (DPA).
4. Categories of data
The personal data we process falls into the following categories:
- Identification data: Full name, username, user ID.
- Contact data: Email address, phone number, postal address.
- Professional data: Company name, job title, role, industry sector, facility details.
- Technical and navigation data: IP address, browser type, operating system, device information, pages visited, session data, cookies and similar identifiers.
We do not collect special categories of personal data (Article 9 GDPR) unless strictly necessary and with your explicit consent.
5. Recipients of data
Entra Technologies does not sell, rent or trade your personal data to third parties under any circumstances.
Your data may be shared with the following categories of sub-processors, solely for the purposes described in this policy:
- Amazon Web Services (AWS), region eu-west-1: Cloud infrastructure and hosting services. Data resides exclusively within the European Union.
- Clerk: Authentication and user identity management services.
- Typeform: Form collection and management for contact, Pioneer Program and Partner Network submissions.
- Analytics providers: Website analytics tools, activated only with your prior consent.
All sub-processors are bound by data processing agreements that ensure compliance with the GDPR and provide equivalent safeguards for your personal data.
6. International transfers
Entra Technologies is committed to maintaining EU-only data residency. Our primary infrastructure is hosted on AWS in the eu-west-1 (Ireland) region, ensuring that your personal data remains within the European Economic Area.
In the event that any sub-processor requires data transfer outside the EEA, we shall ensure that appropriate safeguards are in place, including:
- European Commission adequacy decisions (Art. 45 GDPR).
- Standard Contractual Clauses (Art. 46(2)(c) GDPR).
- Binding Corporate Rules where applicable (Art. 47 GDPR).
You may request information about the specific safeguards applied to any transfer by contacting privacy@entratechnologies.com.
7. Data retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Contact form submissions: 2 years from the date of submission, unless a contractual relationship is established.
- Cookies: Retention periods vary by cookie type; please refer to our cookie settings for details.
- Pioneer Program and Partner Network data: For the duration of your participation and up to 2 years thereafter, unless a contractual relationship is formalised.
- Platform data: As specified in the applicable Data Processing Agreement (DPA) executed between the parties.
- Legal obligations: Where required by law, data may be retained for the periods mandated by applicable legislation.
Upon expiry of the applicable retention period, your data will be securely deleted or irreversibly anonymised.
8. Your rights as a data subject
Under the GDPR and the LOPDGDD, you have the following rights with respect to your personal data:
- Right of access (Art. 15 GDPR): Obtain confirmation of whether we process your data and access a copy of it.
- Right to rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete data.
- Right to erasure (Art. 17 GDPR): Request deletion of your data when it is no longer necessary for the purposes for which it was collected.
- Right to restriction of processing (Art. 18 GDPR): Request that we limit the processing of your data under certain circumstances.
- Right to data portability (Art. 20 GDPR): Receive your data in a structured, commonly used and machine-readable format.
- Right to object (Art. 21 GDPR): Object to the processing of your data based on legitimate interest or for direct marketing purposes.
- Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.
To exercise any of these rights, please contact us at privacy@entratechnologies.com. We will respond to your request within one month, as required by Article 12(3) of the GDPR.
9. Cookies
Our website currently uses essential cookies only, which are strictly necessary for the website to function correctly. These cookies do not require your consent.
We may implement analytics cookies in the future, which will only be activated with your prior and explicit consent. You will be able to manage your preferences through our cookie settings panel at any time.
For detailed information about the cookies we use, their purpose and duration, please refer to the cookie settings accessible from any page of our website.
10. Security measures
Entra Technologies implements appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These measures include:
- Encryption in transit: All data transmitted between your device and our servers is protected using TLS 1.3.
- Encryption at rest: Stored data is encrypted using AES-256 encryption.
- Access controls: Role-based access controls, multi-factor authentication and the principle of least privilege are applied across all systems.
- ISO 27001 alignment: Our security practices are aligned with the ISO 27001 information security management standard.
- Regular review: Security measures are reviewed and updated periodically to reflect evolving threats and best practices.
11. Children's privacy
Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child under 16, we will take immediate steps to delete such data.
If you are a parent or guardian and believe that your child has provided us with personal data, please contact us at privacy@entratechnologies.com.
12. Changes to this policy
Entra Technologies reserves the right to update or modify this Privacy Policy at any time. In the event of material changes, we will notify you with a minimum of 30 days' advance notice via the email address you have provided or through a prominent notice on our website.
The "Effective" date at the top of this policy indicates when it was last updated. We encourage you to review this policy periodically.
13. Supervisory authority
If you consider that the processing of your personal data infringes the GDPR or the LOPDGDD, you have the right to lodge a complaint with the competent supervisory authority:
Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan 6, 28001 Madrid, Spain
Website: www.aepd.es
Phone: +34 901 100 099
If you are located in another EU Member State, you may also lodge a complaint with your local data protection authority.
14. Contact
For any questions, requests or concerns regarding this Privacy Policy or the processing of your personal data, please contact:
Entra Technologies S.L.
Madrid, Spain
Privacy: privacy@entratechnologies.com
