Privacy Notice

1. Data controller

Abstract Networks S.L.U.

Plaça de Tetuan 35, 3-2
08013 Barcelona, Spain

Email: info@abstrakt.network · Phone: +34 680 480 095

We have not appointed a Data Protection Officer. You may address any privacy request to the contact details above with the subject “Data Protection”.

2. Personal data we process

Website visitors:

• Contact form data (name, company, work email, phone if provided, message contents) to respond to enquiries.
• Technical logs (IP address, user agent, error traces) retained briefly for security, abuse prevention, and service diagnostics.
• Cookies: we use only strictly necessary cookies for load balancing and session security. No analytics, advertising, or third-party tracking cookies are set.

Customers using our products:

• Account and billing data supplied in the Master Services Agreement or Statement of Work.
• Network and fraud telemetry generated by our trust, routing, and anti-abuse services in accordance with the relevant contract and Data Processing Agreement.
• Biometric templates only where a customer activates voice verification and collects explicit consent from end users. A non-biometric option is always available.

3. Purpose and lawful bases

• Handling enquiries, demos, and pre-contractual discussions — Article 6(1)(b) GDPR (taking steps at the request of the data subject).
• Operating the website securely, preventing fraud and abuse, and improving availability — Article 6(1)(f) legitimate interest.
• Delivering contracted services, support, and billing — Article 6(1)(b) contract performance.
• Optional product updates or marketing communications — Article 6(1)(a) consent (you may withdraw at any time).
• Voice biometric verification (if enabled by a customer) — Article 9(2)(a) explicit consent obtained by the customer as controller for that processing.

4. Data recipients and international transfers

We use EU-based infrastructure providers and EU or EEA subprocessors when possible. If a transfer outside the EEA is necessary, we rely on adequacy decisions or the Standard Contractual Clauses under Article 46 GDPR and implement additional safeguards such as encryption and access controls.

We never sell personal data. A list of core subprocessors is available upon request and is annexed to our Data Processing Agreement.

5. Retention

• Contact enquiries: deleted 12 months after the last interaction unless a commercial relationship develops.
• Server logs: retained for a maximum of 30 days unless required for security investigations.
• Contractual data: stored for the duration of the agreement plus statutory limitation periods (normally 5–6 years under Spanish law).
• Biometric templates: encrypted and purged automatically according to the retention period configured by the customer (default 30 days).

6. Your rights

Under GDPR you may request access, rectification, erasure, restriction, portability, or object to processing. You may also withdraw consent at any time without affecting prior lawful processing. Send requests to info@abstrakt.network or by post to the address above. If we act as a processor (for customer traffic), we will forward the request to the relevant controller.

You can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD) at www.aepd.es if you believe your rights are infringed.

7. Cookies

The site currently uses only technical cookies required for security, routing, or remembering form state. No advertising or analytics cookies are set. If this changes, we will update this notice and present a consent banner before placing any non-essential cookie.

8. Security

We apply encryption in transit and at rest, least-privilege access, monitoring, and regular security reviews. Where legally required, we notify customers and authorities of breaches without undue delay.

9. Updates

This notice was last updated on 14 October 2025. Material changes will be announced on this page with a new effective date.