Data controller
The data controller is EBRE AI S.L., with CIF B26970483 and registered address at C/ Trinquet, 57, 43580 Deltebre. Contact email: info@ebreai.com. EBRE AI S.L. has not appointed a Data Protection Officer. For any privacy-related question, the indicated email may be used.
Scope of this policy
This policy applies to personal data that EBRE AI S.L. collects directly through its corporate website, contact forms, information requests, demo requests, commercial communications, support, contracting, billing or relationships with clients, suppliers and prospective clients.
It does not replace the privacy policy of client landings or /book pages of Digital Agenda. In those environments, the main controller of the end user’s data will normally be the business receiving the appointment and EBRE AI S.L. will act as technology provider and data processor.
Personal data we may process
We may process identification and contact data such as name, surname, email, telephone, company, role, sector, message sent, commercial interest, requested service, billing data, contractual data and communications maintained with EBRE AI S.L.
We may also process minimal technical data derived from website use, such as security logs, data needed to prevent abuse, blocklists, protection against attacks or technical operation of the website. If Google Analytics or another analytics tool is activated, browsing data will be processed according to the Cookie Policy and only where legally applicable.
Purposes of processing
Data will be processed to handle information requests, answer enquiries, prepare commercial proposals, manage demos, process contracting, provide support, manage billing and administration, maintain the commercial or contractual relationship, send communications related to requested services, maintain website security, prevent abuse and comply with legal obligations.
Data may also be processed to improve EBRE AI S.L. services, analyze interest in Digital Agenda and organize commercial follow-up of prospective clients, always within applicable legal limits.
Legal basis
The legal basis may be the application of pre-contractual measures when the user requests information, a quote or a demo; performance of a contract when there is a commercial or service relationship; compliance with legal obligations in tax, accounting, commercial or administrative matters; and the legitimate interest of EBRE AI S.L. in answering enquiries, maintaining security, preventing abuse, managing professional relationships and improving its services.
When commercial email communications require consent, it will be requested specifically. For commercial communications related to services similar to those already contracted, EBRE AI S.L. may act in accordance with applicable regulations, always offering an easy way to object or unsubscribe.
Commercial communications
EBRE AI S.L. may send commercial email communications about its services, news or proposals when there is a valid legal basis. The recipient may object or unsubscribe at any time through the mechanism indicated in the communication or by writing to info@ebreai.com. Commercial communications by SMS or WhatsApp will not be sent unless an appropriate legal basis and specific information are enabled.
Recipients and providers
Data may be processed by providers necessary for the activity of EBRE AI S.L., including hosting, cloud, database, email, support, authentication, CRM if used, billing, administration, monitoring, security, DNS, domains and technical tools.
Technical providers used or planned may include Google Cloud Services, Google Cloud SQL, MongoDB Atlas, OpenAI API, own Keycloak, Labsmobile, Cloudflare, Google DNS and associated technical management services. Data may also be disclosed to public administrations, courts, tribunals or authorities where there is a legal obligation.
International transfers
Some technology providers may be located outside the European Economic Area or allow access from third countries. Where international transfers are necessary, EBRE AI S.L. will apply the safeguards required by data protection regulations, such as adequacy decisions, standard contractual clauses or other valid mechanisms.
Data retention
Data will be retained for the time necessary to handle the request, maintain the pre-contractual, contractual or commercial relationship, provide the service, manage support and comply with legal obligations. Data associated with contracts, billing or legal responsibilities will be retained for the periods required by applicable regulations.
Lead, contact or request data with no active relationship is periodically reviewed and cleaned to avoid retaining unnecessary information. Technical security logs will be retained for the time strictly necessary to prevent abuse, manage incidents or protect the infrastructure.
Rights
You may exercise the rights of access, rectification, erasure, objection, restriction of processing and portability by writing to info@ebreai.com. The request must allow the applicant to be identified and specify the right they wish to exercise.
You may also file a complaint with the Spanish Data Protection Agency if you consider that the processing of your data does not comply with the regulations.
Cookies and analytics
The corporate website of EBRE AI S.L. may use technical cookies necessary for its operation. If Google Analytics or another analytics tool is used on public pages, this will be explained in the Cookie Policy and consent will be requested where applicable before loading non-technical cookies. This analytics will be used for aggregate measurement of the system or corporate website of EBRE AI S.L., not as individualized analytics for a specific client.
Security
EBRE AI S.L. applies reasonable technical and organizational measures to protect personal data and its systems, including access control, authentication, infrastructure management, backups, monitoring, security measures against abuse and technical maintenance. These measures do not completely eliminate risk, but seek to reduce and manage it proportionately.
Updates to this policy
EBRE AI S.L. may update this policy to adapt it to legal, technical, organizational or service changes. The current version will be the one published on the corporate website.