Privacy policy
What data we process, why, for how long and how to exercise your rights.
01 Data controller
This privacy policy has been drafted in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
- Controller
- GAPS INNOVA, S.L. (hereinafter, "AI Mate")
- Tax ID
- B62285564
- Address
- Canonge Domenech 15, 1-1 · 17310 Lloret de Mar (Girona), Spain
- Privacy contact
- m.domingo@ai-mate.es · +34 648 921 535
02 What data we process
We only process the data you give us directly or that is generated when you browse:
- Identification and contact data: name, surname, email, phone and company, when you write to us, book a call or subscribe to our communications.
- Professional data: job title, industry and context of your company, when you share them so we can prepare a meeting or proposal.
- Browsing data: IP address, device type and pages visited, collected in line with our cookie policy.
- AI Mate assistant: the website assistant is guided: you choose between options and don't type free text. Your choices are not stored or sent to third parties.
We do not process special categories of data (health, beliefs, etc.) or make automated decisions with legal effects on you.
03 Purposes and legal basis
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Responding to your enquiries and contact requests. | 6.1.b Pre-contractual steps at your request. |
| Managing call and meeting bookings (Google Calendar). | 6.1.b Pre-contractual steps at your request. |
| Managing the contractual relationship if you become a client. | 6.1.b Performance of a contract. |
| Sending you newsletters and marketing communications about our services. | 6.1.a Your express consent, which you can withdraw at any time. |
| Analysing use of the website to improve it (analytics). | 6.1.a Your consent via the cookie banner, where required. |
| Complying with legal obligations (tax, commercial). | 6.1.c Legal obligation. |
Consent is given through a clear affirmative act: ticking the relevant box when submitting a form or accepting cookies in the banner. If you don't provide the data marked as mandatory, we won't be able to deal with your request.
04 How long we keep it
- Enquiries and contacts: for as long as it takes to handle your request and then for the statutory limitation periods for any liability.
- Clients: for the duration of the contractual relationship and the legal retention periods (tax and commercial).
- Newsletter: until you withdraw your consent or unsubscribe.
- Browsing data: according to the periods set out in the cookie policy.
When it is no longer needed, the data will be kept blocked for the legally required periods and then deleted.
05 Who we share it with
We do not sell or transfer your data to third parties. Only providers that act as data processors for us can access it, under contracts in line with Article 28 GDPR:
| Provider | Service | Location / safeguards |
|---|---|---|
| Google (Workspace, Calendar) | Company email and call scheduling | EU/US · Data Privacy Framework and standard contractual clauses |
| Hostinger | Website hosting (VPS server) | EU · Server located in the European Union |
| Company page and communications | EU/US · Data Privacy Framework and standard contractual clauses |
We may also disclose data to public authorities when required by law.
06 Your rights
You can exercise the rights granted to you by the GDPR at any time:
- Access: find out what data of yours we process.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask us to delete your data.
- Objection: object to certain processing.
- Restriction: ask us to restrict processing.
- Portability: receive your data in a structured, commonly used format.
You can also withdraw your consent at any time, without affecting the lawfulness of prior processing.
Write to us at m.domingo@ai-mate.es stating the right you want to exercise. We will reply within one month at most.
If you believe we have not handled your rights properly, you can file a complaint with the Spanish Data Protection Agency (aepd.es · C/ Jorge Juan 6, 28001 Madrid).
07 Security
We apply the technical and organisational measures needed to ensure the security, confidentiality and integrity of your data and to prevent its alteration, loss or unauthorised access, in accordance with Article 32 GDPR and taking into account the state of the art, the nature of the data and the risks to which it is exposed.
08 Minors and changes to this policy
Our services are aimed at companies and professionals. We do not knowingly collect data from children under 14. If we detect data from a minor without the consent of their legal representatives, we will delete it.
We may update this policy to reflect new legislation or the guidance of the Spanish Data Protection Agency. The current version will always be published on this page, with its update date.
Questions? Write to us at m.domingo@ai-mate.es.