Lynxby DOMINION

Privacy policy

Data controller

The controller of the personal data collected through this site is:

Company name
Global Dominion Access, S.A.
Registered office
Plaza Pío Baroja 3, 1ª planta, 48001 Bilbao (Bizkaia), España
CIF
A-95034856
Telephone
944 793 787
Companies register
Registro Mercantil de Bizkaia, Tomo 3791, Folio 127, Hoja BI-25418

You may contact the group Data Protection Officer at dpo.corporate@dominion-global.com regarding any matter relating to the processing of your data.

Processing carried out on this site

This is a product website: it has no private area, requires no registration, and takes no automated decisions affecting you. Only the four processing operations described below take place.

1. Demonstration requests, turnkey project enquiries, information requests and partner programme applications

Data processed
Full name, company and work email address. For a demonstration request and a turnkey project enquiry, also the sector. For a partner programme application, also the company profile and its geographic scope. Optionally, phone number, role, modules of interest, deployment model, number of sites, current state of the plant, a request for a site visit, expected rollouts, company website, interest in the training and whatever you include in the message field.
Purpose
To handle your request, prepare the demonstration, study the rollout project or assess your partner programme application, and maintain the commercial contact arising from it.
Legal basis
Your consent, given by ticking the box on the form (art. 6(1)(a) GDPR). For managing the subsequent commercial relationship, the legitimate interest of the company (art. 6(1)(f) GDPR).
Retention period
Until you withdraw consent or object. From that point the data is blocked for one year, available solely to the competent authorities, and then deleted.
Recipients
Data is not disclosed to third parties, save where legally required. It is communicated to the infrastructure provider acting as processor (see below).
Mandatory fields
The fields marked as required are needed in order to handle the request. Without them we cannot reply to you.

2. Site access logs

Data processed
IP address, date and time of the request, resource requested, response code and browser user agent.
Purpose
To ensure the security of the site, detect and prevent abuse, diagnose technical incidents, and produce aggregate counts of visits and traffic sources.
Legal basis
The controller’s legitimate interest in the security and proper functioning of its systems (art. 6(1)(f) GDPR).
Retention period
Kept for as long as they are needed for the purposes described, and deleted through periodic purges. No copies are kept once purged.
Recipients
Only the infrastructure provider, acting as processor.

The counts produced from these logs are aggregate: visits per page, source and date. They identify no individual, are not turned into a profile, and are not used for advertising purposes.

These logs are not cross-referenced with the data you submit through the form.

4. Site audience measurement

Data processed
A random identifier stored in the measurement cookies, the pages visited and when, the source of the traffic, the country inferred from the IP address, the language, and the device and browser type. Also usage actions: modules ticked in the configurator, arrival at the price summary, and form submission.
Purpose
To know which content is read, by what route the site is reached and at what point it is abandoned, in order to improve it. Measurement is aggregate: the aim is not to know any individual.
Legal basis
Your consent, given in the cookie notice (art. 6(1)(a) GDPR and art. 22.2 of Spanish Law 34/2002). If you do not give it, this processing does not take place at all: the tool is not loaded and no cookie is placed.
Retention period
14 months from the last visit, after which the data associated with the identifier is deleted automatically.
Recipients
Google Ireland Limited, acting as processor (see below).
Decisions not taken
The measurement property is configured without Google Signals and without advertising personalisation. No advertising profiles are built, this data is not combined with data from other sites or with your Google account, and nothing is shared with the Google advertising network.

Google Analytics does not store the IP address: it uses it to infer the country and then discards it.

You may withdraw consent at any time from the “Cookies” link in the footer, without affecting the lawfulness of processing carried out beforehand.

3. Email sent to the domains

Data processed
The content and metadata of email messages sent to any address at the domains lynxplatform.net and lynxplatform.cloud: sender, recipient, subject, body and attachments.
Purpose
To forward the message to the commercial mailbox so that it can be dealt with. The domains have no mailboxes of their own.
Legal basis
Legitimate interest in handling communications addressed to us (art. 6(1)(f) GDPR). Sending the message is a voluntary act by the sender.
Retention period
The original message is kept for a maximum of 7 days in the forwarding system and is then deleted automatically. Retention thereafter in the destination mailbox is governed by DOMINION corporate policy.
Recipients
The DOMINION commercial mailbox. Messages are communicated to the infrastructure provider, acting as processor.

Messages identified by the system as spam or containing malicious software are discarded without being forwarded.

Processors and where the data is held

The infrastructure for this site, the delivery of form notifications and the forwarding of email sent to the domains are provided through Amazon Web Services EMEA SARL, acting as processor under a contract with the safeguards required by article 28 GDPR. This data is hosted and processed entirely in data centres located in the European Union (Ireland region).

The audience measurement described in processing operation 4 is provided through Google Ireland Limited, registered in Dublin, also acting as processor. European traffic is collected on servers in the European Union, but the processing may involve access from the United States by Google LLC.

That transfer relies on the EU-US Data Privacy Framework, to which Google LLC is certified, and on the standard contractual clauses approved by the European Commission. It is the only transfer outside the European Economic Area that this site makes, and it occurs only if you have consented to measurement.

Your rights

You have the right to obtain confirmation as to whether DOMINION is processing personal data concerning you, and to exercise the rights of access, rectification, erasure, restriction of processing, objection and portability. Where processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out beforehand.

You may exercise these rights, providing proof of identity, through either of these channels:

  • By email, at dpo.corporate@dominion-global.com
  • By post, at Plaza Pío Baroja 3, 1ª planta, 48001 Bilbao (Bizkaia), Spain

If you consider that your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Security measures

All communication with this site is encrypted using TLS. Access to data received through the form is restricted to the staff who must handle the request. The infrastructure applies technical and organisational measures appropriate to the risk of the processing, in accordance with article 32 GDPR.

Changes to this policy

This policy may be amended to reflect regulatory changes, guidance from the supervisory authority or the evolution of this site. The date of the last update appears at the foot of this page.