Privacy policy
Last updated: 8 August 2026
This policy explains what data is processed when you visit unexalabs.com, why, and for how long. It follows Regulation (EU) 2016/679 (GDPR) and Spanish Organic Act 3/2018. This is a courtesy translation; in the event of any discrepancy, the Spanish version prevails.
1. Data controller
Owner: Sonia Barrado Sojo
Trading as: Unexa Labs
Tax ID (NIF): 76020676H
Registered address: C/ Tiberíades, 9 · 03189 Orihuela (Alicante) · Spain
Email: contacto@unexalabs.com
Website: unexalabs.com
2. What data is processed and why
This site has no forms, no sign-up, no shopping cart and no analytics or advertising tools. The only processing is the following:
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| IP address and technical request data (date and time, page, browser) in the server logs | Keeping the service running, spotting incidents and preventing abuse and attacks | Legitimate interest in the security of the site (art. 6(1)(f) GDPR) | Rotated automatically; no more than 30 days |
| Your email address and the content of your message, if you write to us | Handling and answering your enquiry | Legitimate interest in replying to people who contact us (art. 6(1)(f) GDPR) | For as long as the matter lasts and the statutory claim period |
| Your chosen language, stored in your browser's local storage | Remembering your preference on your next visit | Necessary to provide the service you requested (art. 22.2 LSSI) | Until you clear your browser data |
No profiling is carried out, no automated decisions with legal effects are taken, and no special categories of data are processed. This site is not directed at children under 14.
3. Who else is involved
The site relies on the following providers, acting as processors or as third parties with technical access to the data indicated:
- OVHcloud (server hosting, data centre in France): server logs.
- Cloudflare (DNS service): domain name resolution.
- MXroute (email): messages you send to our addresses.
- Google Ireland Limited (Google Fonts): when the page loads, your browser requests the typefaces from Google's servers, which receive your IP address. This may involve access to data from the United States under the EU-US Data Privacy Framework. We are working on hosting the typefaces on our own server so that this connection disappears.
No data is shared with anyone else, except where required by law.
4. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to contacto@unexalabs.com, stating which right you are exercising. We reply within one month.
If you believe your request was not handled properly, you may lodge a complaint with the Spanish Data Protection Agency (aepd.es), C/ Jorge Juan 6, 28001 Madrid.
5. Security
The site is served over HTTPS and applies security headers to reduce the risk of content tampering. The server is kept up to date and administrative access is restricted and protected with a key and two-factor authentication.
6. Changes to this policy
If anything relevant changes, this page and its update date will be revised. We suggest checking it from time to time.