Privacy Policy

Last updated: May 5, 2026

1. Data controller

2. Purposes of processing

Personal data collected through the Website's contact form is processed for the following purposes:

• Handling requests for information about and demonstrations of the Grafiti-ID product.
• Managing the business relationship with public administrations, police and security forces, and companies.
• Sending commercial communications related to Labrax Soluciones products (only where express consent has been given).

3. Legal basis for processing

• Consent of the data subject (Art. 6.1.a GDPR): by completing the contact form and checking the acceptance box.
• Legitimate interest (Art. 6.1.f GDPR): for the management of business relationships with public bodies.
• Performance of a contract (Art. 6.1.b GDPR): when a contractual relationship is established.

4. Data collected

The contact form collects: first and last name, job title, organization or municipality, institutional email address, phone number (optional), and comments (optional).

5. Retention period

Data will be retained for as long as the business relationship is maintained and, subsequently, for the applicable legal limitation periods. Contact data that does not result in a customer relationship will be deleted after 12 months from the last communication.

6. Data recipients

Data will not be transferred to third parties, except where legally required. Data is hosted on servers located within the European Union, under the guarantees of the GDPR.

7. Rights of the data subject

The data subject may exercise the following rights by contacting privacidad@labraxsoluciones.com:

• Access: to know what personal data is being processed.
• Rectification: to request the correction of inaccurate data.
• Erasure: to request the deletion of data.
• Restriction: to request the restriction of processing.
• Portability: to receive data in a structured format.
• Objection: to object to processing on legitimate grounds.

The data subject also has the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Security measures

Labrax Soluciones, S.L. applies appropriate technical and organizational measures to ensure the security of personal data, in accordance with the National Security Framework (ENS) High level and the ISO 27001 and ISO 9001 certifications.

9. Changes

Labrax Soluciones, S.L. reserves the right to modify this Privacy Policy to adapt it to legislative or case-law developments. Any modification will be published on this page, indicating the date of the last update.