Privacy policy
Last updated: 27 October 2026
This policy explains how we process personal data on the UNFT Labs corporate website and when responding to enquiries through its contact channels, under the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018.
1. Data controller
- Company / controller
- UNFT LABS, S.L.
- NIF
- B05621123
- Registered office
- Carrer de la Gerreria, 4, Planta 0, 07680 Manacor, Illes Balears, España
- Company registry
- Palma de Mallorca Commercial Registry, record PM-108315
- Contact
- [email protected]
2. Data we process
The contact form collects your name, email address and message, and optionally your company and the service requested. The enquiry is sent to the UNFT Labs mailbox through the server’s mail service. Infrastructure serving and protecting the website may process your IP address and technical connection, browser and request data.
If you email us, we process your address and the information in your correspondence. Only provide information needed for your enquiry; avoid sensitive data or third-party information without a valid basis. This form does not request identity documents, biometric data, passwords or wallet keys.
3. Purposes and legal bases
- Enquiries and quotes: responding to your message, understanding your project and preparing a proposal. Processing is based on steps taken at your request before entering a contract (GDPR Article 6(1)(b)). For general enquiries, our legitimate interest in responding to people contacting the company applies (Article 6(1)(f)).
- Security and abuse prevention: protecting the website and limiting spam and repeated submissions, based on our legitimate interest in operating a secure, available service (Article 6(1)(f)).
- Contracts and legal duties: if you purchase services, performing the contract and meeting applicable accounting, tax and other legal obligations (Articles 6(1)(b) and 6(1)(c)). Additional service-specific processing will be explained where relevant.
We do not automatically subscribe enquirers to marketing. Confirming that you have read this policy acknowledges receipt of the information; it is not marketing consent. We do not make solely automated decisions with legal or similarly significant effects or create commercial profiles from the contact form.
4. Required information
Your name, email, message and acknowledgement are required to submit the form. Without them we cannot process it through this channel. Company and service of interest are optional. You can also contact us by email.
5. Retention
We retain enquiries for as long as needed to answer them and follow up on the requested project. Once no longer needed, they are deleted, except for data that must be retained with restricted access to meet legal obligations or address potential liabilities during applicable limitation periods. If a contract is concluded, necessary records are retained throughout the relationship and applicable statutory periods.
Hosting technical logs are retained as needed for security, diagnostics and incident resolution. The form does not create an enquiry database or store its own IP hash.
6. Service providers and recipients
Enquiries are sent by email to [email protected]. Hosting, security and email providers may process the data needed to deliver these services. Advisers subject to confidentiality may access information where necessary, and authorities may receive it when legally required. We do not sell your data.
These providers may operate outside the European Economic Area. Any international transfer must rely on an applicable adequacy decision or GDPR safeguards, such as standard contractual clauses and supplementary measures where necessary. You may request information about providers handling your enquiry and applicable safeguards at [email protected].
7. Your rights
You can request access, rectification, erasure, restriction, objection and, where applicable, portability by emailing [email protected] or writing to our registered office above. Specify the right you wish to exercise and enough information to locate your enquiry. We will request additional identity information only if there are reasonable doubts about your identity.
You may object to processing based on legitimate interests on grounds relating to your particular situation. Where processing relies on consent, you may withdraw it at any time without affecting prior lawful processing. We normally respond within one month; any legally permitted extension will be explained and communicated. You may complain to the Spanish Data Protection Agency (AEPD), particularly if you believe we have not properly addressed your rights.
8. Cookies and external services
This website’s code does not include advertising cookies, third-party analytics or tracking pixels. The form uses server-side abuse checks. Hosting or access-control infrastructure may use technical mechanisms necessary to serve and protect the website. If non-essential technologies are introduced, we will provide information and obtain consent before activation where required.
Links to other websites do not transmit the content of your enquiry. Their own terms and privacy policies apply when you visit them. This policy does not replace the specific policies of UNFT Labs applications and products, including ZKI.
9. Security and updates
We apply technical and organisational measures appropriate to the risk, including restricted access and checks against abusive submissions. No system eliminates all risks: do not send secrets or sensitive documents through this form. Changes will be published with an updated date, with additional information provided where necessary.