Privacy and Data Protection Policy

• Trade name: NASSAT
• Legal name: Network & Satellite Systems de España SL
• Address: Málaga - Spain
• Contact email: [email protected]
• Data Protection Officer (DPO): For any query related to the processing of your personal data, you can get in touch via the email above, specifying "Privacy" in the subject line.

The personal data provided by the user through the website will be processed for the following purposes:

• To handle requests for information, enquiries, quotes or contact through the forms provided.
• To manage the commercial, contractual or pre-contractual relationship arising from formal requests for services or products.
• To send informational and promotional communications related to NASSAT services, provided that prior consent exists.
• To comply with applicable legal obligations in tax, commercial or telecommunications matters.

The legal basis for processing your personal data may rely on one or more of the following grounds:

• Explicit consent of the data subject (art. 6.1.a GDPR), in forms where so indicated.
• Performance of a contract or application of pre-contractual measures (art. 6.1.b GDPR).
• Compliance with legal obligations (art. 6.1.c GDPR).
• Legitimate interest of the controller in service-improvement actions or website security (art. 6.1.f GDPR).

No data will be shared with third parties except by legal obligation. Nevertheless, certain external providers that render services to NASSAT (for example, hosting, web maintenance, sending communications, tax or accounting management) may have access to the data, with whom the corresponding data-processing agreements have been signed in accordance with art. 28 GDPR.

No international data transfers outside the European Economic Area (EEA) are foreseen. Should they be required in the future, compliance with Chapter V of the GDPR will be guaranteed through standard contractual clauses, adequacy decisions or other legal mechanisms.

The data will be retained for the time necessary to fulfil the purpose for which it was collected and, subsequently, for the legally required periods for compliance with tax, commercial or evidence-retention obligations.

As the owner of your personal data, you may exercise the following rights at any time:

• Access: to know what data is being processed.
• Rectification: to request the modification of inaccurate data.
• Erasure: to request the deletion of your data (right to be forgotten).
• Restriction of processing: to restrict processing in certain circumstances.
• Portability: to receive your data in a structured format or transmit it to another controller.
• Objection: to object to the processing of your data based on legitimate interest.

You can exercise your rights by email addressed to [email protected], including a copy of your ID or equivalent document to verify your identity.

NASSAT has adopted the appropriate technical and organisational measures to guarantee the integrity, confidentiality, availability and resilience of the personal data it processes, in accordance with the provisions of art. 32 of the GDPR. These include:

• Encryption protocols and use of HTTPS on the website.
• Database access control via credentials.
• Internal privacy policies and ongoing training of authorised personnel.
• Backups and contingency plans.

If you consider that your rights have not been properly addressed, you can lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es

This policy may be updated at any time to adapt to regulatory changes, AEPD criteria or NASSAT internal operations. Periodic review is recommended.