Privacy policy

1. Data controller

We process your data in accordance with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 (LOPDGDD) and Law 34/2002 (LSSI-CE).

• Identity: Altair Sense, S.L. (Tax ID B93967750)
• Address: Calle Los Prados 166, Edificio Impulsa, 33203 Gijón, Asturias, España
• Email: info@altairsense.com
• We have not appointed a data protection officer as we are not required to; any privacy enquiry can be sent to the email above.

2. What data we process and where it comes from

We only process the data you provide through the contact forms or by writing to us, and minimal technical data about your visit:

• Identification and contact data: name, email and, if you provide them, company, phone and sector.
• The content of your message and any qualification details you choose to provide (number of locations and project timeline).
• Visit origin data sent along with the form: language, the page you write from, referring site and campaign parameters (for example, utm_source) if any. This data is not stored on your device: it is only attached if you submit the form.
• Technical connection data (such as the IP address) automatically logged by the hosting servers for security and operational reasons.

This website is aimed at professionals and companies. It is not directed at persons under 18; if you believe a minor has provided us with data, write to us and we will delete it.

3. Purposes and legal basis

• Handle your enquiry or request (diagnosis, information about solutions or services, sales contact) and reply to you. — Your consent (Art. 6(1)(a) GDPR), given by ticking the box and submitting the form and, where the request precedes a contract, pre-contractual measures taken at your request (Art. 6(1)(b)).
• Prioritise and manage the requests received using the origin and qualification data you send with the form. — Legitimate interest in organising sales handling efficiently (Art. 6(1)(f) GDPR), without disproportionate impact on you.
• Website security and abuse prevention (for example, mass submissions). — Legitimate interest (Art. 6(1)(f) GDPR).
• Compliance with legal obligations and handling of possible claims. — Legal obligation (Art. 6(1)(c) GDPR) and legitimate interest (Art. 6(1)(f)).

We do not use your data to send you commercial communications or newsletters unless you expressly ask us or give separate, specific consent. We do not take automated decisions or build profiles with legal effects on you.

Providing your data is voluntary, but the fields marked with an asterisk are necessary to handle your request.

4. How long we keep your data

• Enquiries with no follow-up relationship: up to 12 months from our last communication, unless you request deletion sooner.
• If a commercial or contractual relationship starts: for its duration and, afterwards, blocked for the applicable legal limitation periods (for example, commercial and tax).
• Technical connection data: the period set by each hosting provider for its security logs.

Once these periods have elapsed, the data is deleted or anonymised.

5. Recipients and processors

We do not sell or disclose your data to third parties for their own purposes. To provide the service we use providers acting as processors under contract (Art. 28 GDPR) who only follow our instructions:

• Website hosting and delivery: Vercel Inc.
• Database where form messages are stored: Supabase Inc.
• Sending the email notification when we receive a message: Resend (Plus Five Five, Inc.).
• Company email and office tools services, from which we manage and answer your enquiry.

We may also disclose data to public authorities, judges and courts where there is a legal obligation.

6. International transfers

Some of the providers above may process data outside the European Economic Area, in particular in the United States. In that case, the transfer relies on the safeguards provided by the GDPR: the adequacy decision of the EU-US Data Privacy Framework where the provider is certified, or the European Commission's standard contractual clauses together with supplementary measures. You can request information about these safeguards at info@altairsense.com.

7. Your rights

You can exercise the following rights at any time:

• Access: know what data of yours we process.
• Rectification: correct inaccurate or incomplete data.
• Erasure: ask us to delete your data.
• Objection: object to processing based on legitimate interest.
• Restriction: ask us to temporarily suspend processing.
• Portability: receive your data in a structured format.
• Withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise them, write to info@altairsense.com stating the right you wish to exercise and proving your identity (a copy of an identity document if there are reasonable doubts). We will reply within one month at most.

If you believe we have not processed your data in accordance with the regulations, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Security

We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration: encrypted communications (HTTPS), restricted database access and providers with security and confidentiality commitments.

9. Lumen platform and other processing

Processing carried out within the Lumen platform (clients, collaborators and authorised users) is governed by the corresponding contract and its data protection documentation, and not by this policy, which refers to the public website.

10. Changes to this policy

We may update this policy to reflect legal changes or changes to our services. The current version is the one published on this page, last updated 7 October 2026.

Altair Sense · Solutions · Sectors · Technical services · Lumen · Contact