1. Data Controller
1.1 Who is the data controller and how can I contact them?
The data controller of this Website (the «Website») is the following Spanish company:
- Company Name: Thothalis BV (in constitution)
- Address: Laan van kronenburg 14 1183AS Amstelveen, Netherlands
- Registry: KvK-number 83381988
- Email: info@thothalis.com
2. Origin and Categories of Data
2.1 What data will we process? Where do we obtain it from?
We will process the data you provide to us through contact forms, audit requests, or Website registration,
such as your name, surname, company, job title, phone number, email address, and billing information. All of
these are necessary to evaluate your security needs, present commercial proposals, and provide the
contracted data resilience services.
By providing your data, you guarantee its truthfulness and/or accuracy. Additionally, we may collect
unassociated analytical navigation data (time of visit, sections viewed, country of connection) to optimize
the design, security, and technical performance of our service platform.
2.2 Will we process specially protected data?
No, we do not request or process special categories of data (e.g., ethnic origin, religious beliefs, political
opinions, etc.) through the Website. Note: The offered backup solution infrastructure subsequently
contracted (e.g., Keepit or other offered solution) may store data that the client chooses to back up in an
encrypted and immutable manner, which is regulated by a separate Data Processing Agreement (DPA).
3. Purpose and Legal Basis of Processing
3.1 For what purposes and on what legal bases will we process your data?
Main Provision and Technical Implementation: To manage your information requests, perform
initial security audits, and provide the
contracted cloud backup and data resilience
services.
Necessity for the performance of
pre-contractual measures or the service
contract requested by you.
Centralized Group Management and Technical
Support: For global client management,
provision of centralized technical infrastructure,
and enterprise-level support.
Legitimate interest in offering unified
customer service, ensuring service
continuity, and optimizing the group’s
technological infrastructure within the EU.
Information Security and Anti-fraud Measures:
To monitor the platform to prevent
unauthorized access, cyberattacks, and ensure
Website availability.
Thothalis’s legitimate interest in
protecting its digital assets, intellectual
property, and the security of user data.
Commercial Communications: To send you
relevant information, technical updates, or
compliance news (GDPR, NIS2, DORA)
regarding our data protection services.
Legitimate interest in informing our
corporate clients about related security
solutions, or explicit consent if there is no
prior contractual relationship.
3.2 Will we make decisions based solely on automated processing?
No, Thothalis does not carry out automated profiling nor does it make automated decisions that produce
legal effects or significantly affect you.
4. How long will we keep your data?
We will retain your personal data for as long as the commercial relationship or your status as a Website user
is maintained. In the event of prolonged inactivity regarding consultation requests, we will proceed to delete
your data.
Upon termination of the contractual relationship, the data will be kept duly blocked and only available to
competent administrative authorities or courts to address potential legal responsibilities arising from the
processing, for the prescription periods established by Spanish law.
5. Recipients
5.1 Will we communicate your data to third parties?
Yes, your data may be communicated or accessible to the following entities:
-
- 1. Technology and Cybersecurity Providers: Cloud and independent storage providers (such as Keepit A/S), acting strictly as data processors under contracts that guarantee confidentiality, copy immutability, and GDPR compliance.
- 2. Legal Obligations: Tax authorities, regulatory bodies, or courts in compliance with applicable laws.
6. International Transfers
6.1 Will your personal data be transferred to third countries?
We do not routinely transfer personal data outside the European Economic Area (EEA). However, as is
common today, some IT and cloud service providers may host data or operate servers located outside the
EEA. In such cases, and only when strictly necessary to operate the Website and/or provide the services you
request, international data transfers may occur within the framework of our providers’ service delivery.
In all instances, we ensure that appropriate safeguards are in place, such as entering into Standard
Contractual Clauses (SCCs) approved by the European Commission or relying on official adequacy
decisions, to guarantee that your data remains fully protected in accordance with applicable data
protection laws.
7. Rights
7.1 What rights protect you?
In accordance with the GDPR and Organic Law 3/2018 (LOPDGDD), you have the rights of Access,
Rectification, Erasure («right to be forgotten»), Restriction of processing, Portability, and Objection.
Furthermore, you have the right to object to receiving commercial communications at any time.
7.2 How can you exercise your rights?
You may send a written communication to the Thothalis Legal Department via email to info@thothalis.com,
specifying the right you wish to exercise under the subject «Exercise of Privacy Rights.» To protect the
confidentiality of the information, we may request proof of identity (such as a copy of your ID card or
company representation powers) if there are reasonable doubts about it. This procedure is completely free
of charge.
7.3 Right to complain
If you believe that the processing of your data violates regulations, you have the right to file a complaint
with the local supervisory authority. However, we invite you to contact us first at info@thothalis.com to
resolve any issues directly and amicably.
8. Cookies Policy
A cookie is a small text file that is downloaded to your device when accessing certain web pages to store
and retrieve information about your navigation.
What types of cookies does Thothalis use?
How can I configure or delete cookies?
You can manage your preferences, accept, or reject cookies at any time through the Cookie Settings Panel
permanently accessible at the bottom corner of our Website, or by configuring your internet browser
settings (Chrome, Edge, Firefox, Safari).
9. Security and Additional Measures
As specialists in business continuity and information protection, Thothalis applies the strictest
organizational, technical, and technological controls. We have implemented advanced measures to prevent
the alteration, loss, theft, or unauthorized access to data, actively protecting the integrity of our digital
channel in accordance with international best practices in security.
