Privacy policy

Last updated: November 2026

This legal notice sets out the conditions that govern the use of the website scanoss.com (the “website”), owned by SCAN OPEN SOURCE SOLUTIONS, S.L. (“SCANOSS”, “we”, “us”), and the relationship between SCANOSS and the people who use it (“users”). By accessing the website, you accept these conditions.

2. Owner and contact information

SCAN OPEN SOURCE SOLUTIONS, S.L.
Paseo de la Castellana, 81, Floor 15
28046 Madrid, Spain
Tax ID (CIF): B05462742
Email: support@scanoss.com

Data Protection Officer: Julián Coccia, reachable at support@scanoss.com.

3. General terms of use

Anyone who accesses the website becomes a user and agrees to comply with these conditions and with any other applicable law.

SCANOSS may update the information on the website, including these conditions, at any time and without prior notice. Publication on the website is sufficient for changes to take effect.

Accessing the website does not create a contractual or professional services relationship between the user and SCANOSS, except where a separate agreement is signed.

If you decide not to accept these conditions, please do not access or use the website or the services offered through it.

4. Intellectual and industrial property rights

The website and its contents, including programming, design, logos, text, graphics and other elements, are the property of SCANOSS or are used under licence or with the authorisation of their owners, and are protected by intellectual and industrial property law.

Reproducing, distributing, publicly communicating, transforming or commercially exploiting all or part of the website’s contents requires the prior written authorisation of SCANOSS, except where the law allows otherwise. Open source software and datasets published by SCANOSS are governed by the licences that accompany them.

Third-party trademarks, logos and content that appear on the website belong to their respective owners. Their appearance does not imply any endorsement, sponsorship or recommendation by SCANOSS or by them.

Third parties may link directly to specific pages of the website. To report a possible infringement of intellectual or industrial property rights, please write to support@scanoss.com.

5. Disclaimer of liability

The information on this website is provided “as is”, without warranty of any kind, express or implied. SCANOSS is not liable for information on the website that has been altered or introduced by a third party.

SCANOSS works to keep the website available and free of errors, but cannot rule out interruptions caused by technical faults, maintenance or circumstances beyond its control.

The website may contain links to third-party websites. SCANOSS does not control and is not responsible for their content. If we become aware that a linked site contains unlawful content, we will remove the link and, where appropriate, inform the competent authorities.

In accordance with articles 11 and 16 of Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI), SCANOSS will cooperate with users and the authorities to remove or block content that may breach the law or the rights of third parties. If you find content of this kind on the website, please let us know at support@scanoss.com.

7. Applicable law and jurisdiction

These conditions are governed by Spanish law. Any dispute related to the website or its use will be resolved by the Courts and Tribunals of Madrid, unless the law establishes a different jurisdiction for consumers.

8. How we process your personal data

Who is responsible for processing your personal data?

SCAN OPEN SOURCE SOLUTIONS, S.L., with the contact details listed in section 2, is the controller of your personal data. We process it in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

What personal data do we collect?

  • Data you give us through contact, demo, download and newsletter forms, such as your name, email address, company and job title, and the content of your message.
  • Browsing data collected through cookies and similar technologies, as described in the cookie policy.
  • Server data, such as IP address, browser type and pages requested, which our servers record automatically and which we use only to produce traffic statistics and keep the website secure.
  • Data from LinkedIn and other social platforms, as described in section 9.

What do we use your personal data for?

  • To answer your enquiries and process the requests you make through our forms.
  • To send you our newsletters and commercial communications about SCANOSS products and services, including Earnie, by email or other electronic means, where you have agreed to receive them.
  • To carry out market research and statistical analysis that help us improve our website, content and services.
  • To measure the performance of our marketing content, as described in section 9.

We do not sell your personal data, and we do not give third parties access to it for their own marketing purposes.

On what legal basis do we process your personal data?

  • Your consent (Article 6.1(a) GDPR): newsletters, commercial communications and non-essential cookies. You can withdraw your consent at any time, for example by using the unsubscribe link in each email or the cookie settings on the website.
  • Steps taken at your request (Article 6.1(b) GDPR): answering your enquiries and processing your requests.
  • Our legitimate interest (Article 6.1(f) GDPR): market research, statistical analysis, website security and measuring the performance of our own marketing.

How long do we keep your personal data?

We keep personal data only for as long as necessary for the purpose for which it was collected, or for as long as the law requires us to keep it. When it is no longer needed, we delete it securely or anonymise it. Data used for commercial communications is kept until you withdraw your consent. Specific retention periods for data obtained from social platforms are set out in section 9.

Who do we share your personal data with?

We do not share your personal data with third parties, except where required by law or where necessary to provide our services. In that case we share it with service providers, such as hosting, email and analytics providers, that process it on our behalf under data processing agreements that comply with the GDPR.

Some of these providers may process data outside the European Economic Area. Where this happens, we make sure that appropriate safeguards are in place, such as an adequacy decision of the European Commission or Standard Contractual Clauses.

What are your rights?

You have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased (“right to be forgotten”);
  • restrict or object to the processing of your data;
  • receive your data in a portable format;
  • not be subject to decisions based solely on automated processing, including profiling;
  • withdraw your consent at any time, without affecting the lawfulness of processing carried out before you withdrew it.

To exercise these rights, write to support@scanoss.com or to the postal address in section 2. If you believe we have not handled your data correctly, you can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) at www.aepd.es.

9. Data obtained from LinkedIn and other social platforms

SCANOSS uses official application programming interfaces (APIs) provided by LinkedIn and other social platforms to measure the performance of its own marketing content. This section explains what data we obtain through these integrations, why, and how it is handled. It applies in addition to section 8.

Which integrations do we use?

We operate an internal marketing dashboard connected to LinkedIn through the LinkedIn Community Management API. The dashboard is used only by SCANOSS staff and is not offered to customers or third parties.

What data do we obtain?

  • SCANOSS LinkedIn Page data: performance statistics for posts published on the SCANOSS LinkedIn Page, such as impressions, reach, reactions, comments, reposts and clicks. We also obtain aggregate follower statistics, such as follower counts and follower growth.
  • Team member post statistics: aggregate performance statistics, such as impressions, reach and engagement counts, for LinkedIn posts published by SCANOSS team members. We obtain these only for team members who have individually authorised our application through LinkedIn’s authorisation process.
  • Post identifiers: the reference identifier of each post, used only to match statistics to our internal content planning.

We do not store the text or media of posts. We do not collect or store personal data about other LinkedIn members, such as the names or profiles of people who react to, comment on or share our content. We do not use LinkedIn data for profiling, advertising targeting or any purpose other than those described here.

For what purposes do we process this data?

  • To measure and report on the performance of SCANOSS marketing content.
  • To help SCANOSS team members understand the reach of their own professional content.

On what legal basis do we process this data?

  • SCANOSS Page statistics: our legitimate interest in measuring the effectiveness of our own marketing activities (Article 6.1(f) GDPR).
  • Team member post statistics: the consent of each team member, given when they authorise our application on LinkedIn (Article 6.1(a) GDPR). Consent can be withdrawn at any time.

Who can access this data?

Statistics for the SCANOSS LinkedIn Page are available to the SCANOSS marketing team.

Statistics for an individual team member’s posts are visible only to that team member and to the marketing staff member responsible for managing the dashboard. This data is not included in exports, internal digests or reports shared beyond the dashboard, and it is not disclosed to third parties.

Where is this data stored and for how long?

Data is stored on servers controlled by SCANOSS. Access credentials for the LinkedIn integration are stored securely and are never shared.

Statistics are kept only for as long as needed for marketing reporting, and for no longer than 24 months. Access authorisations granted through LinkedIn expire periodically and must be renewed by the person who granted them.

How can access be withdrawn?

Team members who have authorised our application may withdraw access at any time. They can notify us at support@scanoss.com, or remove the application in their LinkedIn settings under Data privacy > Permitted services.

When access is withdrawn, we stop collecting that person’s statistics. We delete the statistics already stored about them within 30 days.

The rights described in section 8 also apply to data obtained from LinkedIn.

10. Required and optional information

Fields marked with an asterisk (*) in our forms are required to process your request. If you do not complete them, we may not be able to respond. All other fields are optional.

You guarantee that the personal data you provide is accurate, and you agree to tell us about any changes.

11. Security measures

SCANOSS applies the principles set out in Article 5 of the GDPR. We process personal data lawfully, fairly and transparently, and limit it to what is necessary for the purposes described in this policy.

We have implemented appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure, in accordance with the GDPR and the LOPDGDD.

For more information about how we protect your data, contact us at support@scanoss.com.

12. Cookie policy

In accordance with the LSSI and the GDPR, we ask for your consent before installing any cookies that are not strictly necessary for the website to work.

What are cookies?

Cookies and similar technologies, such as pixels and local storage, are small files or pieces of code that a website stores on or reads from your device. They are used to make the website work, to remember your preferences and to understand how the website is used.

Cookies that require consent and cookies that do not

Technical cookies, and cookies that are necessary for the website to work or to provide a service you have requested, do not require your consent. Analytics, advertising and similar cookies are installed only if you accept them.

Types of cookies

By purpose:

  • Technical and functional cookies let you navigate the website and use its features.
  • Analytics cookies help us measure how the website is used so we can improve it.
  • Advertising cookies help manage the advertising shown on a website, for example by limiting how often an ad is displayed.
  • Behavioural advertising cookies store information about your browsing to show you advertising based on your interests.
  • Social media cookies are set by social platforms to let you share content. These platforms may be able to track your activity on other websites.
  • Security cookies store encrypted information that helps protect the website and its users.

By who manages them:

  • First-party cookies are set by our own domain.
  • Third-party cookies are set by another organisation’s domain, which processes the data they collect.

By duration:

  • Session cookies are deleted when you close your browser.
  • Persistent cookies remain on your device for a set period, which can range from minutes to years.

Cookies and tools used on this website

Technical cookies (always active)

  • PHPSESSID: keeps your session active while you browse. Duration: session.
  • gdpr[privacy_bar], gdpr[consent_types] and gdpr[allowed_cookies]: store your cookie consent choices. Duration: 1 year.

Google Analytics 4 (analytics, requires consent)

Provided by Google Ireland Limited. If you consent, GA4 uses a JavaScript tag and cookies to measure page views, interactions such as clicks, form submissions and video plays, session duration, traffic sources and referral paths, device and browser type, approximate location (city or country), site searches and conversions such as form completions or downloads. Where available and consented to, it may also report aggregate demographic and interest data. We use IP anonymisation and other privacy features GA4 offers.

Microsoft Clarity (analytics, requires consent)

Provided by Microsoft Corporation. If you consent, Clarity records how visitors interact with our pages, including mouse movements, clicks and scrolling, to produce session recordings and heatmaps. It also collects device, browser and approximate location data, referral sources, page performance and JavaScript errors.

Clarity automatically masks form fields, such as passwords, email addresses and phone numbers, so this information is not captured in recordings.

Leadfeeder (analytics, requires consent)

If you consent, Leadfeeder uses a tracking script, cookies and reverse IP lookup to identify the companies that visit our website, rather than individual visitors. It records which pages visitors from those companies view, how long they stay and how they arrived.

Where publicly available business information exists, Leadfeeder may add company details and contact information for people in relevant roles at those companies, such as names, job titles and business email addresses. We use this information to understand which organisations are interested in SCANOSS and to prioritise our sales outreach.

How to manage cookies

You can change or withdraw your consent at any time through the cookie settings on this website. You can also manage cookies in your browser:

  • Delete cookies by clearing your browsing history. This removes cookies from all websites, and you may lose saved logins or preferences.
  • Manage cookies for specific sites in your browser’s privacy and cookie settings.
  • Block cookies entirely. Some websites and features may not work properly if you do.

Instructions for the most common browsers:

13. Data Processing Addendum

Customers who need the terms under which SCANOSS processes personal data on their behalf can download our Data Processing Addendum.

Data Processing Addendum