Privacy Policy

Who is responsible for your data?

The sole data controller is InnovaSphere, an organisation established under the laws of Armenia, with its headquarters at 42/2 Hayrik Mudaryan, 0012 Yerevan, Armenia.

InnovaSphere’s locations in Madrid and Dubai are operational offices used to support clients and collaborations. They are not separate legal entities, separate data controllers or representatives appointed under Article 27 of the GDPR.

For privacy questions or to exercise your rights, contact contact@innovasphere.io.

What data do we process?

You can browse most of the website without identifying yourself. When you contact us, we may process your name, professional contact details, organisation, area of interest and the information included in your enquiry or subsequent correspondence.

Our hosting and security systems may also process limited technical information such as IP address, browser type, requested pages, date and time, and security events. The contact form uses Cloudflare Turnstile to distinguish legitimate enquiries from automated abuse. Cloudflare may process limited device, browser and network information for that security purpose. This information is used to deliver and protect the website, not to build advertising profiles.

Why do we process it?

We process enquiries to respond to you, assess possible scientific or business collaboration and take steps you request before entering into an agreement. We also process limited technical information for our legitimate interests in operating a reliable, secure website, and information required to comply with legal obligations or defend legal claims.

Optional analytics or marketing technologies, if introduced, will only operate after valid consent. They are not currently active on this website.

Who may receive the data?

Access is limited to authorised InnovaSphere personnel and service providers supporting hosting, email, security and professional advice where they need the information to perform their role. These include IONOS for website hosting and email delivery and Cloudflare for contact-form abuse prevention. Providers acting on our behalf must protect the data and use it only for the relevant service. We may disclose information when required by law or a competent authority.

International transfers

InnovaSphere is headquartered in Armenia and collaborates internationally. An enquiry from the European Economic Area may therefore involve access from or transfer to Armenia or another country outside the EEA. Where European data-protection law applies, we use the safeguards required for the relevant transfer, such as contractual protections, and provide further information on request.

How long do we keep it?

Routine enquiries are retained only as long as needed to respond and manage the relationship, normally no longer than 24 months after the last meaningful interaction. Information forming part of a contract, funded-project record or legal obligation may be kept for the applicable statutory or contractual period. Security logs are retained for a shorter period unless an incident requires further investigation.

Your rights

Where the GDPR or another applicable law gives you these rights, you may request access, correction, deletion, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw consent at any time. Withdrawal does not affect processing already carried out lawfully.

You may also complain to the data-protection authority in the country where you live or work, or where you believe an infringement occurred. We do not use this website to make decisions about you based solely on automated processing.

Changes to this policy

We may update this policy when our services, providers or legal obligations change. The date at the top identifies the current version. Material changes affecting consent will be presented to you before the relevant processing begins.