Skip to main content
ilitia
Contact
Contact

Privacy Policy

In compliance with personal data protection regulations, specifically the General Data Protection Regulation (GDPR), REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, we inform you about the processing of personal data.

The information about the operation of this website concerns the enquiries you submit through the contact form and the technical means used to receive and respond to them. It includes applications submitted with a CV through the Job application variant; it does not describe personnel or payroll processing unrelated to this form.

1 Who is the controller of your data?

ILITIA TECHNOLOGIES, SRL (hereinafter, ILITIA)
B-82846304
Inocencio Fernández 81, 1º A, 28035 - Madrid (Spain)
+ 34. 91 386 05 06
rgpd@ilitia.com

2 For what purposes do we process your personal data?

We use the form data to respond to and direct your enquiry according to the area of interest and the information you provide. If you choose to answer “How did you hear about us?”, we also receive your voluntary indication of referral source to understand how you came to hear about ILITIA.

Submitting the form does not subscribe you to a newsletter or activate automatic promotional communications. The website also performs technical checks to validate the request, limit abusive submissions and prevent duplicates.

3 Categories of data processed.

General enquiries request a first name, email and message. Job applications require first name, last name, email, CV and privacy acceptance; phone and message are optional. CVs may be PDF, DOC or DOCX up to 5 MB. Business enquiries request the following data:

  • First name, company, corporate email, area of interest and “Tell us more” message: required.
  • Last name and phone number: optional.
  • “How did you hear about us?”: optional, with the options LinkedIn, Webinar, Recommendation, Search engine, Microsoft and Other.
  • Acceptance of the Privacy Policy: required to submit the request.

The request includes the form language, Spanish or English, and a technical submission identifier. An antispam control field that must remain empty is also used. The form does not request a NIF, job title, work address, bank details, Social Security affiliation number, or payslips. Only the Job application variant accepts a CV attachment.

The email generated contains the data provided, the language and an indication of acceptance of the policy; your email address is used as the reply address. Referral source data is included when an option has been selected.

To control duplicates, the server temporarily holds an identifier, a fingerprint of the data and the submission result in memory. The application's technical log includes an operation identifier, the status and duration of the request, without including the form body. This does not exclude operational logs that may be generated by the hosting and email providers.

4 Source of the data

You provide the enquiry data when completing the form or contacting us by email. The “How did you hear about us?” option reflects your voluntary response; it is not obtained through browsing tracking or advertising profiles.

When accessing the root of the website, the language preference communicated by your browser is used to direct you to the Spanish or English version. The form sends the language of the version you are using.

5 What is the legal basis for processing the data?

Data subjects are solely responsible for the accuracy of their personal data. ILITIA is not responsible for the use of false, inaccurate, incomplete and/or outdated data provided.
For these purposes, ILITIA informs you of the lawful bases that will allow the different processing activities:
1st. Compliance with a contractual obligation contained in a contract in which the data subject is expected to be a party, represents a party or is a subject in the provision of the service.
2nd. Compliance with a legal obligation applicable to the controller.
3rd. Legitimate interest.
- Processing is necessary for the purposes of the legitimate interests pursued by the controller. Those interests are not overridden by the interests or fundamental rights and freedoms of the data subject that require protection of personal data. The entity has a legitimate interest in processing data relating to the data subject as part of its business activity, in order to inform them of technology development services that may be useful to the company in which they work. In all cases, the data subject is duly informed.
4th. Express consent.
Express consent constitutes a lawful basis for the processing of personal data.

6 How consent is obtained:

The form presents a Privacy Policy acceptance checkbox, initially unchecked, which you must check to submit the request. This acceptance and the language are included in the email generated. This action does not activate a subscription or authorisation for advertising or browsing tracking.

7 Information retention periods

In compliance with the storage limitation principle, data subjects are informed that the data collected is processed solely and exclusively for the time necessary and for the purposes for which it was collected. ILITIA has established the following retention period. Data will be retained for the duration of the contractual relationship plus an additional maximum period of 10 years after the end of the contract or after the last communication, pursuant to the Civil Code and tax regulations.

8 Transfer and disclosure of data: recipients or categories of recipients

The website uses Microsoft Azure for hosting and resource delivery, and the SendGrid service to send enquiries by email when the form is available. SendGrid receives the message content and the addresses needed to deliver it, including your address as the reply address. The message is sent to the mailbox configured to handle enquiries. Applications and CVs are sent via SendGrid to the HR team at rrhh@ilitia.com; development tests use only the configured test mailbox. The CV is processed temporarily in memory to attach it to the email, without permanent storage on the website server or CV content in application logs. This does not imply that the email provider or recipient mailbox does not retain it.

Open, click and subscription tracking are disabled in messages generated by the form. This does not prevent the existence of the provider's operational delivery logs or hosting logs.

The website includes links to external services and websites, such as Google Maps and LinkedIn. They open when you follow the link; they are not an embedded map or social plugin. Images from the corporate domain and Azure Storage are also used, served through the website's image system. External websites have their own terms and policies.

9 International data transfers

Enquiries are handled through SendGrid and the hosting uses Microsoft Azure services. The actual location of processing and the conditions applicable to possible international transfers by these services remain to be confirmed. This policy does not attribute exclusive residence in the European Economic Area to the sending process or contractual safeguards that have not been verified.

10 Existence of automated decisions producing legal effects for the customer

This website does not carry out automated decision-making with legal effects or commercial profiling. The form applies validations and technical controls against abusive or duplicate submissions.

11 Further processing

If ILITIA requires further processing of your personal data for a purpose other than those set out in this Privacy Policy, you will be informed in advance, including all legally required information and the intended purposes of that processing.

12 Exercise of rights (ARCO rights)

In accordance with the applicable regulations, ILITIA informs you that the following rights derived from the applicable regulations are available to you:

  • Right of access to personal data,
  • Right to rectification,
  • Right to erasure,
  • Right to restriction of processing,
  • Right to data portability;
  • Right to object to the processing of your data and to withdraw the consent given.

We also inform you that you may seek protection of your rights (right to lodge a complaint) before the supervisory authority in each country.

13 How to exercise your rights

To exercise any of the rights mentioned above, you may send a written request identifying yourself and indicating which right you are exercising and which data your request concerns.
1. Email: rgpd@ilitia.com
2. Postal mail:
ILITIA TENCHNOLOGIES, SRL
Inocencio Fernández 81, 1º A, 28035 - Madrid (Spain)
To seek protection of your rights (right to lodge a complaint) before the supervisory authority, you may write to:
Agencia Española de Protección de Datos
C/ Jorge Juan, 6 – 28001 Madrid
Telephone numbers: 901 100 099/91 266 35 17
If you need any clarification, you may contact ILITIA at rgpd@ilitia.com
Technical adaptation of the information on this website: 22/10/2026.