SOSCHAIN Personal Privacy Notice
Version 1.2.0. Fundación UNID, tax ID G02793479, is controller for SOSCHAIN account, security, acceptance, preferences and service operations it determines. It was entered in the Castilla y León Foundations Register by resolution of 23 February 2021. Its published statutory address is Calle Condes de Gómara 6, 5C, Apartado 80, Soria, Spain, and its privacy and rights channel is contact@unid.es. This channel is not described as a data protection officer unless one is formally appointed.
We process account and identity data; authority and relationship evidence; contact and location; selected health and emergency data; card, communication and device metadata; consent, opt-out, withdrawal and audit evidence; and technical security data. Purposes are authentication, service delivery and protection, authority checks, authorised communications, compliance, incident response and secondary use only under a permitted purpose, legal basis, permit and applicable safeguards.
The emergency front, index service and continuity-backup service are distinct roles even when the same contracted provider performs more than one. The active service schedule must identify the provider and data-protection role for each. An insurer, municipality, foundation or another authorised tenant may supply the selected index. An index is limited to discovery metadata and authorised opaque references. The SOSCHAIN human continuity backup and VetChain animal continuity backup contain only their respective selected encrypted content and remain governed by separate purpose, retention, deletion, recovery and emergency-release rules.
Legal bases may include contract, legal duty, legitimate security interests, consent and the applicable GDPR Article 9(2) condition for special-category data. Human break-glass access is not based on accepting the terms: where available, it relies on vital interests, healthcare provision or another documented statutory authority.
Data are disclosed only to contracted providers, organisations authorised for the exact purpose, legally competent authorities and research projects with a valid basis, permit and safeguards. International transfers require a GDPR Chapter V safeguard. Retention is defined by category; optional account data are erased or anonymised where applicable, while acceptance, access and incident evidence may remain for legal duties and claims.
Individuals can exercise their rights, reversibly opt out of secondary use and withdraw applicable consent through the portal, or write to contact@unid.es when portal access is unavailable. Opt-out or withdrawal works prospectively and does not erase effectively anonymised results or records that must be retained. Decisions producing legal effects are not made solely by automation unless authorised with safeguards. Individuals may complain to the AEPD.