Last updated: 09 October 2026
This policy explains how personal data is processed in HTP Tool (the "Tool"), in accordance with the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Fundación Hidrógeno Aragón (FHA) — [pending — to be completed], Tax ID [pending — to be completed], [pending — to be completed]. Privacy contact: h2v@hidrogenoaragon.org.
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| Access requests: name, email, organisation, country, intended use, date and IP address of the request | Assess the request, create the account and contact you about it; prevent abuse of the form | Your consent (art. 6.1.a GDPR), given in the form; legitimate interest in preventing abuse (art. 6.1.f) | 12 months from the request |
| Account: username, password (stored only as a secure hash), account type, creation date, last login, account end date | Provide the Tool and control access to it | Performance of the service you asked for (art. 6.1.b) | While the account exists; deleted when the account is closed |
| Your scenarios and simulations: inputs, project locations and results you create | Store your work so you can use it across sessions | Performance of the service (art. 6.1.b) | While the account exists; deleted with it |
| Usage activity: for each account, the time spent on the Tool and the days and sessions in which it was used, the number of logins, of clicks on the Simulate buttons, of PDF reports downloaded, of scenarios and simulations created (including those later deleted) and the module they belong to, and the date of the last visit | Understand how the Tool is used and improve it, detect problems, give technical support, and report aggregated usage figures to the projects that fund the Tool. Only the administrators of the Tool see this data, per account; it is not shared with other users | Legitimate interest in improving and supporting the service and in accounting for its use (art. 6.1.f). You can object at any time (see section 5) | While the account exists; deleted with it. Published figures are aggregated and do not identify anyone |
| Server logs: IP address, pages requested, date and time, errors, failed login attempts | Security, protection against attacks, and fixing errors | Legitimate interest in keeping the service secure (art. 6.1.f) | 90 days |
The usage activity is measured by the Tool itself while you use it (a small request is sent every 30 seconds while a page is open, visible and in use); it does not use cookies, fingerprinting or any third-party analytics service, and it does not record what you type or the content of your simulations.
We do not use your data for advertising, we do not sell it, and we do not make automated decisions with legal effects about you. Please do not enter personal data of other people in your simulations.
Passwords are stored as salted hashes, never in clear; connections use HTTPS; repeated failed logins are blocked temporarily; each account only sees its own data.
You can ask to access, rectify or erase your data, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on consent you can withdraw it at any time, without affecting earlier processing. Where it is based on our legitimate interest (such as the usage activity) you can object to it on grounds relating to your situation, and we will stop it unless we show compelling grounds. You can also ask for a copy of the usage data recorded for your account. Write to h2v@hidrogenoaragon.org from the email linked to your request or account, or include your username.
If you think your rights have not been respected, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
The Tool is not intended for children under 14, and we do not knowingly grant them accounts.
We will update this policy if the processing changes; the date at the top shows the latest version.