Privacy Policy — Spain

1. Purpose

This policy describes how FORQUANTIQ processes the personal data of individuals who interact with the website forquantiq.com/en/ and its contact forms, in the context of its commercial activity aimed at the Spanish market and provided from Colombia.

2. Data controller

FORQUANTIQ S.A.S., a company incorporated in Colombia, is the controller of the personal data collected through this site. FORQUANTIQ has no permanent establishment in Spain; the operation is provided as a service exported from Colombia. Any inquiry about the processing of data may be addressed to info@forquantiq.com.

3. Legal framework

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) — applicable because the offer is directed at individuals in Spain, in accordance with its territorial scope (Article 3(2) GDPR).
• Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), to the extent applicable.

4. Data collected

Through the website forms, FORQUANTIQ collects: full name, company, tax ID/VAT number (when provided voluntarily), email address, phone or WhatsApp number, country, client type, service of interest and the content of the message sent by the data subject.

5. Purposes of processing

• To respond to inquiries and requests for information about FORQUANTIQ's services.
• To contact the data subject in order to follow up commercially on their request.
• To prepare proposals or offers related to the services requested.
• Internal statistical purposes regarding the company's commercial management.

6. Legal basis for processing

Processing is based on the data subject's consent, given by ticking the acceptance box on the contact form, in accordance with Article 6(1)(a) GDPR.

7. International data transfers

FORQUANTIQ provides its services from Colombia, a country that does not have an adequacy decision from the European Commission. This does not mean that every interaction with FORQUANTIQ constitutes an international transfer of personal data — it depends on the actual processing:

• Contact form on this site: the data the data subject voluntarily provides (name, company, email, phone, message) are transferred to FORQUANTIQ in Colombia in order to respond to their request. This transfer relies on the European Commission's 2021 Standard Contractual Clauses (SCCs) as a safeguard provided for by the GDPR.
• Provision of Secure Web 360: the service mainly analyzes technical information (domains, IP addresses, digital assets, vulnerabilities, configuration and technological exposure), which as a general rule is not personal data. Where providing the service to a client in Spain/EEA does involve the processing of personal data subject to the GDPR, the usual B2B scheme applies: the client acts as data controller and FORQUANTIQ as data processor, formalized through the services agreement, a Data Processing Agreement (DPA) and the SCCs corresponding to the international data flow. Secure Web 360 is designed under a data minimization principle, avoiding access to end users' personal data beyond what is strictly necessary for the service.

This section will be updated if the scope of processing changes from what is described here.

8. Rights of the data subject

Under the GDPR, the data subject has the right to access, rectify and erase their data, as well as to request restriction of processing, to object to it and to data portability. The data subject also has the right to lodge a complaint with the competent supervisory authority (in Spain, the Spanish Data Protection Agency — AEPD).

9. Procedure for exercising rights

The data subject may exercise the rights described by writing to info@forquantiq.com, stating their full name, the right they wish to exercise and a clear description of their request.

10. Data retention

Data will be kept for as long as necessary to handle the data subject's request and, where applicable, for the legally required periods.

11. Effective date

This policy is effective from 10 October 2026 and remains in force until replaced by a later version. Any modification will be published on the FORQUANTIQ website.