PRIVACY POLICY OF HTTPS://KNOWTRANSFER.COM/
In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 ("GDPR"), Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights ("LOPDGDD"), Law 34/2002 on Information Society Services and Electronic Commerce ("LSSI-CE"), and any other applicable legislation, KNOWTRANSFER, S.L. hereby informs users of the website about the processing of personal data carried out throughhttps://knowtransfer.com/.
The protection of personal information and the respect for privacy constitute fundamental commitments for KNOWTRANSFER, S.L. Therefore, this Privacy Policy explains in a transparent, accessible and understandable manner how personal information is collected, used, stored, protected and disclosed.
- DATA CONTROLLER
The controller responsible for the processing of personal data collected through this website is:
KNOWTRANSFER, S.L.
CIF: B19918697
Registered Office:
C. Ecuador, 11
36203 Vigo (Pontevedra)
Spain
Contact email: gdpr@knowtransfer.com
The Company acts as data controller regarding personal data collected through the website, user accounts, contractual relationships, commercial communications, marketplace services, research activities and any other services offered through the platform.
- PURPOSES OF PROCESSING
KNOWTRANSFER processes personal data for different purposes depending on the relationship established with the user.
2.1. Website Navigation and Security
When users access the website, certain technical information may be automatically collected, including IP addresses, browser information, operating system data, device identifiers, access logs and other technical information necessary to guarantee the proper operation and security of the platform.
Such processing is necessary to ensure website availability, cybersecurity, fraud prevention, incident detection and system integrity.
The legal basis for this processing is the legitimate interest of KNOWTRANSFER pursuant to Article 6(1)(f) GDPR.
2.2. Contact Requests and Information Enquiries
Personal data submitted through contact forms, email communications or other communication channels may be processed for the purpose of responding to requests, providing information, handling enquiries, preparing quotations and managing any pre-contractual relationship requested by the user.
The legal basis for such processing is either:
a) The implementation of pre-contractual measures requested by the data subject pursuant to Article 6(1)(b) GDPR.
b) The consent of the data subject pursuant to Article 6(1)(a) GDPR.
2.3. Customer and Supplier Management
KNOWTRANSFER may process personal data necessary for the management of contractual relationships with customers, suppliers, collaborators and business partners.
Such processing may include:
● Contract administration.
● Project management.
● Customer support.
● Supplier coordination.
● Billing and accounting management.
● Regulatory compliance.
The legal basis is the performance of a contract pursuant to Article 6(1)(b) GDPR and compliance with legal obligations pursuant to Article 6(1)(c) GDPR.
2.4. Marketplace and Dropshipping Services
KNOWTRANSFER operates a marketplace platform through which products, services, educational resources, research materials, innovation services and other solutions may be offered either directly by KNOWTRANSFER or through third-party suppliers.
When users purchase products or services through the platform, KNOWTRANSFER may process personal information necessary for:
● Order management.
● Payment processing.
● Delivery coordination.
● Supplier management.
● Returns management.
● Customer support.
● Fraud prevention.
To fulfil these purposes, personal data may be shared with selected suppliers participating in the marketplace or dropshipping model.
Such information may include:
● Name and surname.
● Delivery address.
● Telephone number.
● Email address.
● Purchase information.
● Shipping information.
● Transaction details.
The legal basis for this processing is the performance of a contract pursuant to Article 6(1)(b) GDPR.
2.5. Doctoral Candidates and Research Activities
KNOWTRANSFER may process personal information relating to doctoral candidates, researchers, innovation professionals, universities, technology transfer offices and research institutions.
The data processed may include:
● Identification information.
● Professional information.
● Academic information.
● Curriculum vitae.
● Research interests.
● Publications.
● Institutional affiliations.
● Participation in projects and initiatives.
Such processing shall only be carried out for purposes directly related to research collaboration, innovation management, doctoral programmes, technology transfer activities and related services.
2.6. Commercial Communications
Where users have provided consent, KNOWTRANSFER may send information regarding:
● Products.
● Services.
● Events.
● News.
● Educational activities.
● Research initiatives.
● Commercial offers.
Recipients may withdraw their consent at any time through the unsubscribe mechanisms included in each communication or by contacting gdpr@knowtransfer.com.
2.7. Artificial Intelligence Services
The website may incorporate Artificial Intelligence technologies and automated systems designed to provide assistance, recommendations, support services, content generation or analytical functionalities.
Interactions with such systems may involve the processing of information voluntarily submitted by users.
Users are advised not to provide sensitive personal information unless expressly requested and legally justified.
AI-generated outputs should not be considered professional, legal, medical, financial or scientific advice.
- LEGAL BASIS FOR PROCESSING
The processing of personal data carried out by KNOWTRANSFER is based on one or more of the following legal grounds:
● Consent of the data subject (Article 6(1)(a) GDPR).
● Performance of a contract (Article 6(1)(b) GDPR).
● Compliance with legal obligations (Article 6(1)(c) GDPR).
● Legitimate interests pursued by KNOWTRANSFER (Article 6(1)(f) GDPR).
Where processing is based on consent, such consent may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal.
- CATEGORIES OF PERSONAL DATA
Depending on the services used, KNOWTRANSFER may process:
● Identification data.
● Contact details.
● Professional information.
● Academic information.
● Contractual information.
● Billing and payment data.
● Customer service communications.
● Technical information.
● IP addresses.
● Device information.
● Security logs.
● Browsing information.
As a general rule, KNOWTRANSFER does not intentionally process special categories of personal data unless legally justified and supported by an appropriate legal basis.
- RECIPIENTS OF THE DATA
Personal data may be disclosed to:
● Technology service providers.
● Hosting providers.
● Cloud infrastructure providers.
● CRM providers.
● Email service providers.
● Marketplace suppliers.
● Logistics and delivery companies.
● Payment service providers.
● Legal advisors.
● Auditors.
● Public authorities and regulatory bodies when legally required.
All service providers acting on behalf of KNOWTRANSFER process personal data under appropriate Data Processing Agreements in accordance with Article 28 GDPR.
- INTERNATIONAL DATA TRANSFERS
Where personal data is transferred outside the European Economic Area, KNOWTRANSFER shall ensure that appropriate safeguards are implemented.
Such safeguards may include:
● Adequacy decisions adopted by the European Commission.
● Standard Contractual Clauses approved by the European Commission.
● Supplementary technical and organizational measures where necessary.
Users may request additional information regarding international transfers by contacting gdpr@knowtransfer.com
- DATA RETENTION PERIODS
Personal data shall not be retained longer than necessary for the purposes for which they were collected.
Unless a longer retention period is required by law:
● Contact requests: 12 months from the last interaction.
● Customer and supplier information: throughout the contractual relationship and subsequently during applicable limitation periods.
● Accounting and tax documentation: 6 years.
● Anti-money laundering documentation (where applicable): 10 years.
● Commercial communications data: until consent is withdrawn or an objection is exercised.
● Security logs: generally 12 months unless longer retention is required due to incidents or legal obligations.
Once retention periods expire, personal data shall be securely deleted, anonymized or blocked where required by law.
- DATA SUBJECT RIGHTS
Users may exercise the following rights:
● Right of access.
● Right to rectification.
● Right to erasure.
● Right to restriction of processing.
● Right to data portability.
● Right to object.
● Right not to be subject to automated individual decision-making.
Requests may be submitted at:
gdpr@knowtransfer.com
The Company may request reasonable proof of identity before responding to any request.
- WITHDRAWAL OF CONSENT
Where processing is based on consent, users may withdraw such consent at any time without affecting the lawfulness of processing previously carried out.
- AUTOMATED DECISION-MAKING
As a general rule, KNOWTRANSFER does not carry out automated decision-making producing legal or similarly significant effects on individuals.
Where AI-based functionalities are used, they are intended to assist users and do not replace human decision-making.
- CHILDREN
The services offered through this website are not directed to children under 14 years of age.
KNOWTRANSFER does not knowingly collect personal information from minors without appropriate authorization.
If personal information relating to a minor is detected without a valid legal basis, it shall be deleted as soon as reasonably possible.
- SECURITY MEASURES
KNOWTRANSFER implements appropriate technical and organizational measures designed to ensure a level of security appropriate to the risks involved.
Such measures may include:
● Encrypted communications through TLS.
● Access controls.
● Multi-factor authentication.
● Security monitoring.
● Vulnerability management.
● Incident response procedures.
● Data backup systems.
● Staff confidentiality obligations.
Security measures are periodically reviewed and updated where appropriate.
- COOKIES
The website uses cookies and similar technologies.
Detailed information regarding cookies is available in the Cookie Policy.
Non-essential cookies are only activated after obtaining the user's consent.
Users may modify their cookie preferences at any time.
- RIGHT TO LODGE A COMPLAINT
If a user considers that the processing of personal data infringes applicable data protection legislation, he or she has the right to lodge a complaint with the competent supervisory authority.
In Spain, the competent authority is:
Spanish Data Protection Agency (AEPD)
- CHANGES TO THIS PRIVACY POLICY
KNOWTRANSFER reserves the right to modify this Privacy Policy whenever necessary to adapt it to legislative developments, regulatory requirements, technological changes or business needs.
Material changes shall be appropriately communicated where required by law.
Users are encouraged to periodically review this Privacy Policy.