Privacy Policy

Data controller

P. A. Bottero Gandia, NIF 23884925T, with address at Calle Campoamor, 46022 Valencia, Spain (hereinafter "Secyda").

Contact email: legal@secyda.eu

Data we collect

Identification data: name, email address, phone number (if provided).

Professional data: organisation, position.

Browsing data: IP address, browser type, pages visited, cookies (see Cookie Policy).

We collect personal data through the following channels: contact form, waiting list, job applications and investor portal.

No specially protected data or special categories of data are processed.

Purposes of processing

Managing contact requests received through the website.

Managing the early-access waiting list.

Managing applications received through the careers page.

Sending communications related to Secyda services, provided the user has given explicit consent.

Managing access to the investor portal (investors.secyda.eu) and dataroom.

Legal basis

Consent of the data subject (Art. 6.1.a GDPR): contact forms, waiting list and commercial communications.

Legitimate interest (Art. 6.1.f GDPR): website usage analysis to improve the service and security measures.

Pre-contractual measures (Art. 6.1.b GDPR): management of applications and investor relations.

Recipients and data processors

Data is not disclosed to third parties except where required by law. Secyda uses the following service providers acting as data processors:

OVH SAS (Germany) — infrastructure hosting. Data stored in EU data centres.

ProtonMail AG (Geneva, Switzerland) — email. Country with an adequacy decision from the European Commission.

OpnForm (self-hosted at forms.agora.secyda.eu, OVH Germany) — form management. Data stored on own servers in the EU. No third-party transfers.

PostHog (self-hosted at lux.agora.secyda.eu, OVH Germany) — behaviour analysis, heatmaps and session recordings (secyda.eu only, never in the dataroom). Data stored on own servers in the EU. No third-party transfers.

Payload CMS — self-hosted in the EU.

Data retention

Contact requests: until the enquiry is resolved plus the applicable statute of limitations.

Waiting list: until the user requests removal or until product launch.

Applications: 24 months from receipt.

Investor data: for the duration of the relationship plus the applicable legal retention period.

Data subject rights

You have the right to access, rectify, erase, restrict processing, port your data and object to processing.

To exercise your rights, write to legal@secyda.eu stating your name and the right you wish to exercise.

You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Security measures

Secyda implements appropriate technical and organisational measures to protect personal data, including: HTTPS/TLS encryption on all communications, hosting on servers located in the European Union, role-based access control, regular backups and continuous infrastructure monitoring.

International transfers

Secyda does not transfer data outside the European Economic Area. All data infrastructure operates on servers located within European Union territory.