Privacy Policy

1. Data controller

Grupo Unlix, S.L. (OSHTIA, a product of Grupo Unlix)
Tax ID: B83733162
Registered office: C/ Alarcón, 15, 1.º B — 28200 San Lorenzo de El Escorial, Madrid
Operational headquarters: Colmenar Viejo, Madrid
Email: info@oshtia.com
Web: oshtia.com

2. Data we collect

We process only the data you provide directly:

• Contact form: name, email address, phone, company or organisation, position, enquiry type and message content.
• Technical anti-abuse data: form start time and technical data needed to detect automated submissions or protect the service.
• Commercial relationship: contact data of customers and providers needed for contract and billing management.

We do not collect data from children under 14. If you learn that a minor has provided us data without parental consent, contact us to delete it.

3. Purpose and legal basis

4. Retention period

Data is kept as long as needed for the purpose for which it was collected and for the applicable legal periods.

5. Data sharing

We do not share your data with third parties except in the following cases:

• When there is a legal obligation (tax authority, courts, law enforcement).
• Technology providers contracted as data processors, without permission to use data for their own purposes (hosting, email, CRM).

When a provider involves international transfers, the safeguards required by current regulations apply.

6. Your rights

Under the GDPR (EU) 2016/679 and the LOPDGDD, you may exercise the following rights at any time:

• Access: know what data we process about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request that we delete your data when it is no longer needed.
• Objection and restriction: object to processing or request that it be restricted.
• Portability: receive your data in a structured, commonly used format.

To exercise them, write to info@oshtia.com and state the right you wish to exercise. We will request identification only where needed to verify your identity. We respond within the applicable legal period.

If you believe the processing does not comply with regulations, you may file a complaint with the Spanish Data Protection Agency (aepd.es).

7. Cookies

Technical cookies, strictly necessary and exempt from consent: they store your language and theme preferences, and your decision about analytics cookies.

Third-party analytics cookies, subject to your consent: we use Google Tag Manager and Google Analytics 4 (Google Ireland Limited) to measure in aggregate how the site is used and improve it. No Google script is loaded until you accept: if you decline, or simply ignore the notice, no analytics cookie is set and no data is sent. This may involve an international transfer to the USA, covered by the EU-US Data Privacy Framework.

You can change or withdraw your decision at any time from the Cookies link in the footer, or by clearing the site data in your browser.

8. Security

We apply reasonable technical and organizational measures to protect your data, including encryption in transit (TLS) and access limitation.

9. Changes to this policy

We may update this policy after regulatory or service changes. The current version and its date will be available on this page.