Privacy Policy

1. Data Controller Information

In accordance with the General Data Protection Regulation (GDPR - EU 2016/679) and Spanish Organic Law 3/2018 on the Protection of Personal Data, users are informed of the following information regarding the processing of their personal data:

• Data Controller: SIMATAI SL
• Address: Ganduxer 39-41, 2-2, 08021 Barcelona, Spain
• Tax ID: B64510001
• Contact Email: hello@btmdata.com
• Data Protection Officer: hello@btmdata.com

2. Personal Data We Collect

2.1. Data provided directly by users

• Registration data: full name, email address, encrypted password, organization
• Contact data: information provided in contact forms, proposal requests, or meeting bookings
• Infrastructure project data: simulation configurations, cluster design parameters, technical and financial estimation results
• Lead capture data: email, company, role, and technical configuration provided in calculators and planning tools

2.2. Automatically collected data

• Navigation data: IP address, browser type, operating system, pages visited
• Cookies and similar technologies: according to our Cookie Policy
• Platform usage data: session time, access frequency, features used

3. Processing Purposes and Legal Basis

4. Data Recipients

Your personal data may be communicated to the following categories of recipients:

4.1. Service providers (data processors):

• Supabase: data hosting and authentication (USA with adequate safeguards)
• Email services: communications management
• Hosting services: web hosting
• Analytics tools: Google Analytics (anonymized)

4.2. Authorities and public bodies:

When legally required: Tax Agency, judicial bodies, law enforcement.

We do not sell data to third parties for commercial purposes. All our providers act as data processors and are contractually obligated to comply with GDPR.

5. International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA). In these cases, we ensure that transfers are made with adequate safeguards:

• European Commission Standard Contractual Clauses
• European Commission adequacy decisions
• Recognized privacy certifications (Privacy Shield, where applicable)

You can request more information about specific safeguards implemented by contacting hello@btmdata.com.

6. Data Retention Period

• Active account data: while the user maintains their active account
• Infrastructure project data: while the account is active and 2 years after cancellation
• Contact data (inquiries): 2 years from last communication
• Marketing data: until consent is revoked or unsubscription is requested
• Navigation data: maximum 26 months (analytical cookies)

After these periods, data will be deleted or anonymized, unless there is a legal obligation to retain it.

7. User Rights

Users can exercise the following rights at any time:

• Right of access: obtain information about what data we process and how
• Right of rectification: correct inaccurate or incomplete data
• Right of erasure: request deletion of your data (right to be forgotten)
• Right of restriction: request that data only be kept for exercising claims
• Right to object: object to processing based on legitimate interest or direct marketing
• Right to data portability: receive your data in structured format and transmit it to another controller
• Right not to be subject to automated decisions: including profiling
• Right to withdraw consent: at any time, without affecting the lawfulness of prior processing

How to exercise your rights:

• Email: hello@btmdata.com
• Postal mail: Ganduxer 39-41, 2-2, 08021 Barcelona, Spain
• Must attach copy of your ID or equivalent document

We will respond to your request within a maximum of one month from receipt, which may be extended by two more months depending on complexity.

Right to lodge a complaint with supervisory authority:

If you believe that the processing of your data violates regulations, you can file a complaint with the Spanish Data Protection Agency (AEPD):

• Website: www.aepd.es
• Address: C/ Jorge Juan, 6, 28001 Madrid
• Phone: 901 100 099 / 912 663 517

8. Security Measures

SIMATAI SL has implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of sensitive data (passwords, payment data)
• Secure connections via HTTPS/SSL protocol
• Access control through authentication and authorization
• Regular backups
• Intrusion detection and prevention systems
• Protection against malware and DDoS attacks
• Periodic security audits
• Staff training in data protection
• Security incident response protocols

In case of personal data security breach, we will notify the supervisory authority and, when appropriate, affected users, within the timeframes established by GDPR.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to improve user experience, analyze platform usage, and personalize content. Cookies are classified as:

9.1. Technical and session cookies (strictly necessary):

• User authentication
• Session maintenance
• Security and fraud prevention

9.2. Analytics cookies:

• Google Analytics (anonymized)
• Usage and behavior analysis

9.3. Preference cookies:

• Selected language
• Display settings

You can configure or reject non-essential cookies at any time through your browser settings or through our cookie management panel.

10. Minors

Our services are intended for persons over 18 years of age. We do not intentionally collect data from minors without explicit consent from their legal guardians. If we detect that we have collected data from a minor without authorization, we will proceed to its immediate deletion.

11. Automated Decisions and Profiling

We do not make automated decisions with significant legal effects nor profiling for discriminatory purposes. Infrastructure simulations, financial estimations, and recommendations generated by the platform are decision-support tools that do not replace professional assessment and are always subject to human review.

12. Privacy Policy Modifications

SIMATAI SL reserves the right to modify this Privacy Policy to adapt it to legislative, jurisprudential, or business practice changes. Substantial modifications will be notified to registered users at least 30 days before taking effect, via email and prominent notice on the platform.

We recommend periodically reviewing this Policy to stay informed about how we protect your data.

13. Data Protection Officer Contact

For any questions related to the processing of your personal data or the exercise of your rights, you can contact:

• Data Protection Officer: hello@btmdata.com
• SIMATAI SL
• Address: Ganduxer 39-41, 2-2, 08021 Barcelona, Spain