Privacy Policy

At Lutech One Iberia, S.A.U we know how important your privacy is and therefore we care about processing your personal data in a fair, lawful and transparent manner. Through our Privacy Policy, we want to provide you with detailed information about the processing we carry out with the data you provide to us or that we collect directly about you.

If we proceed to update this privacy policy, we will inform you through this website (https://www.sapimsa.es/).

Who is the data controller for your data?

Lutech One Iberia, S.A.U, with CIF A-78696648 and registered office at C/ Alcalá, 490, 3rd floor 28027 – Madrid, Spain is the controller of your personal data (hereinafter, Lutech One Iberia or We).

What personal data do we process?

Lutech One Iberia will process the following categories of user data:

Identification data and contact data: collected through the "contact" form enabled on the website, this includes, your name and surname, postal address, email address, telephone and any other data provided in the form.
Data collected through cookies: with these we process data associated with each visit you make to our site, this includes the IP address, date and time of connection, if applicable, login, server query, web pages viewed or applications used, domain name (URL), sections visited within the web and volume of data used. For more details about the use we make of these cookies and how to configure them, consult our Cookies Policy.

For what purposes and legal bases do we process your data?

To make your requests viable: To be able to answer your queries, process them and attend to your requests, the legal basis being our legitimate interest in responding to your requests.
To be able to send you information: To be able to send you information related to the site and changes to our terms, conditions and policies, our legitimate interest in keeping you informed being the legal basis for the processing.
To carry out our business purposes: To identify usage trends, for example, understand which parts of our site are most interesting to users and be able to focus on offering what users want based on our legitimate interest in optimizing the use of the site for users.

The processing of your personal data will not be subject to automated decisions or profiling.

To whom will we communicate your personal data?

In addition to the Administration and Public Authorities, to whom we may transfer your personal data to the extent required by Law (on the legal basis of said obligation) or necessary and/or convenient for the defense of our legitimate rights (on the basis of our prevailing interest in defending such rights), we may share your personal data as follows:

With companies in our corporate group, which means our subsidiaries, our parent company and its subsidiaries. The legal basis for this processing is our legitimate interest in ensuring efficient management of our contractual relationship.
With our external service providers, agents, subcontractors and other associated organizations. The legal basis for this processing is our prevailing legitimate interest in providing our services in the most effective and efficient way possible.
We may share your personal data as part of a corporate transaction, as well as in connection with or during the negotiation of any merger, sale of company assets, financing or acquisition of all or part of our business. We may transfer your data to a third party as one of the business assets in said transaction. We will notify you by email and/or through a prominent notice on any affected service of any change in ownership of the website, as well as any choices you may have regarding your data as a result of the transaction. In this case, the legitimizing basis for the processing is our legitimate interest in ensuring the development and/or execution of the transaction.
To protect our rights, property, or safety or that of our affiliates or users, or any third party. The legal basis for the processing of personal data is our prevailing legitimate interest in exercising or defending our rights and interests.

In addition to the provisions above, and unless necessary to comply with our obligations arising from any contract concluded between you and We, we will not share your personal data with third parties unless we have obtained your express consent to do so or there is a legitimate basis for it.

How long do we keep your data?

In general, we will process your data as long as the contractual relationship that exists between you and We is still in force and, once concluded, it will be kept for the time required by applicable legislation and during the limitation periods applicable to actions that could derive from the contractual relationship.

As the only exceptions to the above, (i) when the processing is legitimized by your consent, we will keep the data as long as you do not state that you withdraw said consent; and (ii) we will process your contact data indefinitely with the purpose of maintaining business relations with you, unless you object to it at any time.

What security measures will be applied to your personal data?

The processing of the personal data provided will be carried out adopting the necessary technical and organizational measures to prevent its loss, misuse, alteration and unauthorized access, taking into account the state of the technology, the nature of the data and the risk analysis performed.

How can you exercise your rights in relation to your personal data?

You have the following rights related to the personal data we hold about you:

Right to request access: to your personal data and to obtain a copy of the personal data undergoing processing.
Right to request rectification: of incomplete or inaccurate personal data.
Right to request erasure: of your personal data when it is no longer necessary for the purposes for which it was collected or processed, when you have withdrawn your consent and the processing is not based on another legal basis; or you object to the processing because it was based on legitimate interest or in the performance of a task in the public interest, and other grounds to legitimize the processing of your data have not prevailed.
Right to request restriction: of processing of your data.
Right to data portability: in a structured, commonly used and machine-readable format and, when technically feasible, to transmit your data to the controller specified by you.
Right to object: at any time to the processing of your personal data if it is processed in the course of a task carried out in the public interest or based on a legitimate interest.
Right not to be subject to automated decisions: based solely on automated processing that produce legal effects concerning you or significantly affect you in a similar way.
Right to withdraw consent: previously granted consent at any time, without such revocation affecting the lawfulness of the processing based on consent before its withdrawal.

In case you consider that we have infringed your rights, we ask you to transfer your complaint to our data protection officer at the postal address indicated in the introduction of this privacy policy or at the address dpo@lutech.es. Likewise, if you consider that data protection regulations have been violated, you have the right to lodge a complaint with the supervisory authority (Agencia Española de Protección de Datos), although we encourage you to allow us to help you first.

Obligatory or optional nature of the requested data

The mandatory data in each form are identified as such in the forms. Refusal to supply such information will prevent communication with We.

International transfers

SAPIM S.A. does not perform transfers of personal data outside the European Union and/or the European Economic Area.

User commitments

The user agrees to inform Lutech One Iberia of any modification to the information provided. For this purpose, the following email address is available: dpo@lutech.es.

08/07/2026