Privacy Policy

1. Data controller

The controller responsible for the processing of the personal data collected through this website is:

Labrax Soluciones, S.L. is not required to appoint a Data Protection Officer under Article 37 of the GDPR. Nevertheless, it makes the above address available to data subjects for any query or to exercise their data protection rights.

2. What data we process and how we obtain it

On this website we only process the personal data you voluntarily provide through the contact and demo request form. Specifically:

• Identification and contact data: name, position, entity or organization, email address and telephone number.
• Content of your enquiry: the information you choose to include in your message.

We do not collect special categories of data (formerly known as "sensitive data") and we ask that you do not include such data in your messages. Browsing the site does not require the provision of personal data; the use of cookies is detailed in the Cookie Policy.

3. Purpose, legal basis and retention

We process the personal data collected through the Website for the following purposes, legal bases and retention periods:

Purpose	Legal basis	Retention
Handling your request for information or a demo received through the contact form.	Consent of the data subject (Art. 6.1.a GDPR), revocable at any time, and/or pre-contractual measures taken at the request of the data subject (Art. 6.1.b GDPR).	Until the request is resolved and, at most, two (2) years from the last contact with the data subject; any subsequent interaction restarts that period. If the request gives rise to a contractual relationship, the period in the following row applies. Once the period has elapsed, the data are deleted —not anonymised— from the management system.
Managing the business relationship with local councils that contract the service.	Performance of a contract (Art. 6.1.b GDPR).	For the duration of the contractual relationship and the subsequent statutory periods (6 years, Art. 30 of the Commercial Code).
Compliance with legal, accounting and tax obligations.	Compliance with a legal obligation (Art. 6.1.c GDPR).	For the statutory periods established (generally 4–6 years).
Sending commercial communications about the software and related services.	Legitimate interest with respect to existing customers (Art. 6.1.f GDPR and Art. 21.2 LSSI) or consent in all other cases.	Until the data subject exercises their right to object or withdraws consent.

Providing the requested data is voluntary but necessary in order to handle your request; if you do not provide it, we will not be able to process it.

4. Recipients and disclosures

Your data will not be disclosed to third parties, except where legally required. Only service providers acting as data processors (hosting services, email or CRM tools) may access it, under the corresponding data processing agreements entered into in accordance with Article 28 of the GDPR.

Additionally, this website does not load resources from third-party servers: typefaces are served from our own domain, so your IP address is not communicated to any external provider when browsing the website. Details can be found in our Cookie Policy.

5. International transfers

As a general rule, data is processed within the European Economic Area. In the event that any provider were to involve an international data transfer, it would only be made to recipients offering adequate safeguards in accordance with Chapter V of the GDPR (an adequacy decision or standard contractual clauses).

6. Your rights

You may exercise the following rights over your personal data at any time:

• Access: find out what data of yours we are processing.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request the deletion of your data when it is no longer necessary.
• Objection: object to the processing of your data.
• Restriction: request the restriction of processing in certain cases.
• Portability: receive your data in a structured, commonly used format.
• Withdraw consent given, without affecting the lawfulness of processing prior to withdrawal.

To exercise these rights, write to us at ayuntamientos@centinel360.es, indicating the right you wish to exercise and enclosing a copy of your ID document or equivalent document proving your identity.

If you believe that the processing of your data does not comply with applicable regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security measures

We have adopted the technical and organizational measures necessary to guarantee the security, confidentiality and integrity of personal data and to prevent its alteration, loss, unauthorized processing or access, taking into account the state of the art and the nature of the data processed.

8. Changes to this policy

This privacy policy may be updated to adapt to legislative developments or changes in the way we provide our services. We will publish any amendment on this same page, indicating the date of the last update.