Contact us
Data protection

Data protection policy

ACADEMIA SANTA ANA, S.L. (NemoSoft) processes personal data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD) and Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI). Here we explain what data we process, why, for how long and what your rights are.

Data controller

ACADEMIA SANTA ANA, S.L. (NemoSoft) · Tax ID (NIF) B48450381
Avenida Santa Ana 7, office 19 · 48940 Leioa (Bizkaia), Spain
E-mail: sac@nemosoft.es · Telephone: +34 946 575 653

What data we process

This website has no forms or user area and does not install cookies. We only process the data you give us when you write to us or call us (name, company, position, e-mail address, telephone number and the content of your enquiry) and the data needed for our relationship with customers and suppliers (contact, billing and bank details).

Like any web server, our hosting provider's server automatically logs the IP address, the date and time and the page requested on each visit, for security and technical operation purposes.

Purposes and legal basis

  • Answering your enquiries and requests for information or quotations: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in replying to those who contact us (Art. 6(1)(f) GDPR).
  • Providing the contracted services, invoicing them and managing our relationship with customers and suppliers: performance of the contract (Art. 6(1)(b) GDPR) and compliance with legal, tax and accounting obligations (Art. 6(1)(c) GDPR).
  • Informing our customers about our own products and services similar to those contracted: legitimate interest (Art. 6(1)(f) GDPR and Art. 21.2 LSSI). You may object at any time, free of charge, by replying to any of those communications or by writing to sac@nemosoft.es.
  • Keeping the website and our systems secure: legitimate interest (Art. 6(1)(f) GDPR).

We do not make automated decisions or carry out profiling with your data.

Retention period

  • Enquiries that do not lead to a business relationship: as long as needed to deal with them and no longer than one year.
  • Customers and suppliers: for as long as the relationship lasts and then for the statutory periods during which liability may be claimed (six years for commercial records under Article 30 of the Spanish Commercial Code and four years for tax records under the Spanish General Tax Law).
  • Commercial communications: until you object to receiving them.
  • Server logs: only as long as strictly necessary for security reasons.

Once those periods have elapsed, the data are blocked for the time required by law and then erased (Art. 32 LOPDGDD).

Recipients and transfers

We do not disclose your data to third parties unless required by law: for example, to the tax authorities, to banks to manage collections and payments, or to the courts.

Our web hosting and e-mail providers have access to them solely in order to provide their services to us, acting as data processors under a contract that complies with Art. 28 GDPR.

Should any of them be located outside the European Economic Area, the transfer would only take place with the safeguards set out in Chapter V GDPR (a European Commission adequacy decision or standard contractual clauses).

Data we process on behalf of our customers

When our customers use our applications and services to process their own personal data (about their employees, customers or suppliers), the customer is the controller of that data and NemoSoft acts as a processor, under the contract signed in accordance with Art. 28 GDPR.

Your rights

You may exercise the rights granted by Articles 15 to 22 GDPR at any time and free of charge:

  • Access: find out whether we process your data and obtain a copy.
  • Rectification of inaccurate or incomplete data.
  • Erasure of your data when they are no longer needed or there is no basis for processing them.
  • Objection to processing based on legitimate interest and to commercial communications.
  • Restriction of processing in the cases provided for in the GDPR.
  • Portability: receive your data in a structured, commonly used format.

Write to us at sac@nemosoft.es or by post to the address above, stating which right you are exercising. If we have reasonable doubts about your identity, we may ask you for the additional information needed to confirm it. We will reply within one month, which may be extended by two further months in complex cases (Art. 12 GDPR).

If you believe we have not handled your rights properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid) or with the supervisory authority of the country where you live.

Security

We apply technical and organisational measures appropriate to the risk to protect your data against loss, alteration and unauthorised access (Art. 32 GDPR). Our staff are bound by a duty of confidentiality (Art. 5 LOPDGDD).

Minors

This website is aimed at companies and professionals. We do not knowingly process data of children under 14 (Art. 7 LOPDGDD).

Cookies

This website does not install cookies or use similar technologies to store or read information on your device, so we do not need to ask for your consent. Should we ever introduce them for purposes that are not strictly technical, we will ask for your consent before installing them (Art. 22.2 LSSI).

E-mail communications

E-mails from NemoSoft and, where applicable, their attachments contain confidential information intended exclusively for the addressee. Their disclosure, copying or distribution to third parties without the prior written authorisation of ACADEMIA SANTA ANA, S.L. is prohibited. If you have received an e-mail in error, please notify us immediately by forwarding it to the sender's address.

Last updated: 21 October 2026.