1. Data Controller

In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), users are informed that personal data collected through this website will be processed by:

Data Controller: LEAPWAVE TECHNOLOGIES, S.L.
Tax Identification Number (NIF): B72560394
Registered Office: Avenida Gregorio Peces Barba, 1, Parque Científico de la Universidad Carlos III de Madrid, 28919 Leganés, Madrid, Spain
General contact: info@leapwavetech.com
Sales & IP: sales@leapwavetech.com
Careers: careers@leapwavetech.com
Website: https://leapwavetech.com/

For data protection matters, users may contact LeapWave Technologies at:

info@leapwavetech.com

2. Personal data we process

LeapWave Technologies processes only personal data that is appropriate and necessary for the purposes for which it has been collected.

Depending on the user’s interaction with the website and the Company, the following categories of personal data may be processed:

• Identification data: name and surname.
• Professional contact data: work email address, company or organisation and professional position where provided.
• Enquiry information: type of enquiry, message and any additional information voluntarily provided by the user.
• Commercial and contractual data: information relating to quotations, products, intellectual property licensing, engineering services, custom R&D projects, partnerships or other commercial relationships.
• Billing and administrative data: where necessary to manage an existing commercial or contractual relationship.
• Recruitment data: CV, professional experience, education, qualifications, skills, contact information and any other information voluntarily provided in connection with a job application.
• Technical data: IP address, browser, device, operating system, access logs and other technical information generated when using the website.
• Cookie and browsing data: where the use of a particular cookie or similar technology involves the processing of personal data.

Users should avoid providing personal information that is not necessary for the purpose of their enquiry.

3. Purposes of processing and legal bases

3.1. Contact and information requests

Personal data submitted through the contact form, email or other communication channels may be processed to:

• Respond to enquiries.
• Provide technical or commercial information.
• Respond to requests concerning products.
• Manage requests relating to intellectual property licensing.
• Respond to custom R&D or engineering enquiries.
• Manage partnership or collaboration proposals.
• Arrange meetings or further communications concerning the user’s request.

Legal basis: taking steps at the request of the data subject prior to entering into a contract where the enquiry relates to a potential commercial relationship, and the legitimate interest of LeapWave Technologies in responding to professional and business enquiries addressed to the Company.

3.2. Commercial and contractual relationships

Where an enquiry develops into a commercial relationship, data may be processed to:

• Prepare and manage quotations.
• Negotiate and execute agreements.
• Manage orders and product supply.
• Manage technology or intellectual property licences.
• Provide engineering, R&D or technical services.
• Manage payments and invoicing.
• Maintain communications with customers, suppliers, partners and other professional contacts.
• Manage the administrative and commercial relationship.

Legal basis: performance of a contract or taking pre-contractual steps at the request of the data subject, as well as compliance with applicable legal obligations.

3.3. Recruitment and job applications

When a candidate sends a CV or contacts LeapWave Technologies regarding employment opportunities, their data may be processed to:

• Assess their application.
• Evaluate their professional profile.
• Contact the candidate.
• Conduct selection processes.
• Arrange interviews.
• Manage possible recruitment.

Legal basis: taking pre-contractual measures at the request of the candidate.

Where LeapWave Technologies wishes to retain a CV for consideration in future recruitment processes beyond the current selection process, the candidate may be asked for consent where required.

3.4. Administrative, accounting and legal obligations

Personal data may be processed where necessary to comply with accounting, tax, commercial, regulatory or other legal obligations applicable to LeapWave Technologies.

Legal basis: compliance with legal obligations.

3.5. Website and information systems security

Technical information may be processed to:

• Maintain website security.
• Detect unauthorised access.
• Prevent fraud or misuse.
• Analyse technical incidents.
• Protect Company systems and information.
• Maintain logs necessary for cybersecurity purposes.

Legal basis: LeapWave Technologies’ legitimate interest in ensuring the security, integrity and proper functioning of its website and information systems.

3.6. Commercial communications

LeapWave Technologies may send information concerning its products, technologies, services, projects, events or other Company activities where there is a lawful basis for doing so.

Where prior consent is required, communications will only be sent after obtaining that consent.

Where permitted by applicable legislation, communications may also be sent to existing customers or professional contacts concerning products or services related to an existing relationship.

Recipients may unsubscribe or object to such communications at any time.

4. Mandatory and optional information

Fields identified as mandatory must be completed in order for LeapWave Technologies to properly process the corresponding enquiry.

Failure to provide required information may prevent the Company from responding to the request or providing the requested service.

Optional information does not need to be provided unless the user considers it relevant to their enquiry.

Users should not include confidential, sensitive or unnecessary personal data in free-text message fields.

5. Data relating to third parties

Where a user provides personal data relating to another individual, the user must ensure that they are legally entitled to provide such information and that doing so is necessary for the corresponding purpose.

Users should avoid sending personal data relating to third parties unless it is strictly necessary.

6. Special categories of personal data

The website and its contact channels are not intended for the collection of special categories of personal data, such as information relating to health, racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data or sexual orientation.

Users are requested not to provide this type of information through general contact forms or email unless there is a specific and legitimate reason for doing so and an appropriate channel has been established.

7. Data retention

Personal data will be retained only for as long as necessary for the purpose for which it was collected.

As a general rule:

• General enquiries: for the time necessary to respond to and follow up the request and, where necessary, during the applicable limitation periods.
• Commercial enquiries: during the negotiation process and, if a contractual relationship is established, for the duration of that relationship and the subsequent periods required by applicable legislation.
• Customer, supplier and partner information: for the duration of the professional or contractual relationship and afterwards for the applicable statutory limitation periods.
• Accounting, tax and billing documentation: for the periods required by applicable tax, commercial and accounting legislation.
• Job applications: for the duration of the recruitment process. Where appropriate, CVs may be retained for a reasonable additional period for future vacancies where there is a lawful basis to do so.
• Commercial communications: until the recipient withdraws consent or exercises the right to object.
• Technical and security logs: for a period proportionate to their security purpose, unless they need to be retained for longer in connection with a security incident or legal responsibility.

Once the relevant retention period has expired, the data will be deleted, anonymised or, where legally required, blocked for the applicable statutory periods.

8. Recipients and service providers

Personal data will not be sold to third parties.

Data may be accessed or processed, where necessary, by service providers assisting LeapWave Technologies with its business operations, such as:

• Website hosting providers.
• Email service providers.
• Website maintenance and IT service providers.
• Contact form or communications platforms.
• Customer relationship or business management tools, where used.
• Cloud storage providers.
• Accounting, tax or legal advisers.
• Recruitment or HR service providers, where applicable.
• Payment or banking providers where required for a commercial transaction.
• Cybersecurity and technical support providers.

These providers will process personal data only where necessary and in accordance with the applicable data protection requirements.

Personal data may also be communicated to public authorities, courts, regulators or other competent bodies when required by law.

9. International data transfers

Some technological service providers may process or access personal data from countries outside the European Economic Area.

Where an international transfer of personal data takes place, LeapWave Technologies will ensure that an appropriate mechanism recognised by the GDPR is in place, such as:

• An adequacy decision adopted by the European Commission.
• Standard Contractual Clauses approved by the European Commission.
• Another legally recognised safeguard or transfer mechanism.

Further information regarding international transfers carried out by specific third-party services may also be provided in their corresponding privacy policies or in the website’s Cookie Policy.

10. Automated decision-making and profiling

LeapWave Technologies does not, as a general rule, make decisions based solely on automated processing that produce legal effects concerning users or similarly significantly affect them.

No automated profiling with such effects is currently envisaged in connection with enquiries submitted through the website.

If this changes, affected individuals will be provided with the information required by applicable data protection legislation.

11. Users’ data protection rights

Individuals whose personal data is processed by LeapWave Technologies may exercise the following rights, where applicable:

• Access: obtain confirmation as to whether their personal data is being processed and receive information about that processing.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of personal data where the legal requirements are met.
• Restriction of processing: request that processing be restricted in the circumstances provided by law.
• Objection: object to processing based on legitimate interests or to direct marketing.
• Data portability: receive personal data in a structured, commonly used and machine-readable format where the legal requirements are met.
• Withdrawal of consent: withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.
• Rights relating to automated decision-making: exercise the rights provided by the GDPR where automated decisions falling within its scope are used.

Requests may be sent to:

Email: info@leapwavetech.com

Postal address:
LEAPWAVE TECHNOLOGIES, S.L.
Avenida Gregorio Peces Barba, 1
Parque Científico de la Universidad Carlos III de Madrid
28919 Leganés, Madrid
Spain

The request should clearly identify the right being exercised.

Where there are reasonable doubts regarding the identity of the person making the request, LeapWave Technologies may request additional information necessary to verify their identity.

12. Right to lodge a complaint

If an individual considers that the processing of their personal data infringes applicable data protection legislation, they may lodge a complaint with the competent supervisory authority.

In Spain, the competent authority is the:

Agencia Española de Protección de Datos (AEPD)
www.aepd.es

This is without prejudice to any other administrative or judicial remedy available to the individual.

13. Security of personal data

LeapWave Technologies implements appropriate technical and organisational measures designed to protect personal data against:

• Unauthorised access.
• Accidental or unlawful destruction.
• Loss.
• Alteration.
• Unauthorised disclosure.
• Improper processing.

Security measures are reviewed and adapted taking into account the nature of the information processed, technological developments and the risks associated with the processing.

However, no system connected to the Internet can guarantee absolute security.

14. Contact by email

Users may contact LeapWave Technologies using the email addresses published on the website.

The content of such communications and the sender’s contact details will be processed solely for the purposes related to the communication and, where appropriate, the subsequent professional or commercial relationship.

Users are requested not to send information that is unnecessary for the purposes of their enquiry.

15. Recruitment communications and CVs

Candidates may send job applications to:

careers@leapwavetech.com

CVs and information submitted by candidates will be used solely for recruitment and professional selection purposes.

Candidates are responsible for ensuring that the information contained in their application is accurate and up to date.

Where references relating to third parties are included, candidates should ensure that they are entitled to provide such information.

16. Cookies and similar technologies

The website may use technical cookies necessary for its operation and, where applicable, analytics or other technologies that require consent.

Cookies that require consent will not be activated until the user has made the corresponding choice through the website’s cookie management system.

Users may accept, reject or configure cookies and may subsequently change or withdraw their consent.

Further information regarding the technologies used, providers, purposes and retention periods should be provided in the Cookie Policy.

17. External links and third-party platforms

The website may contain links to social networks, research organisations, partners, institutions or other third-party websites.

When users access an external website, their personal data may be processed directly by that third party in accordance with its own privacy policy.

LeapWave Technologies does not control the privacy practices of external websites and recommends reviewing their corresponding privacy information.

18. Social networks

LeapWave Technologies may maintain profiles on professional or social networking platforms.

Interaction with those profiles may involve the processing of information made available by users through the relevant platform.

The processing of personal data by the platform itself is governed by the corresponding social network’s own privacy policy and conditions.

LeapWave Technologies will process information received through such platforms only where necessary to manage the interaction, communication or professional relationship with the user.

19. Minors

The LeapWave Technologies website and its products and services are primarily intended for companies, professionals, research institutions and other organisations and are not specifically directed at children.

Minors should not submit personal information through the website without the involvement of their parents or legal representatives where required by applicable law.

20. Accuracy of information

Users are responsible for ensuring that personal data supplied to LeapWave Technologies is accurate, complete and up to date.

Users should inform the Company of any relevant changes to their information.

LeapWave Technologies may take reasonable steps to correct or update information that it knows to be inaccurate.

21. Changes to this Privacy Policy

LeapWave Technologies may update this Privacy Policy to reflect:

• Changes in applicable legislation.
• Guidance issued by supervisory authorities.
• Changes to the Company’s services or activities.
• New website functionality.
• Changes to technology providers.
• Changes in personal data processing activities.

The version in force at any given time will be the version published on this website.