1. Data controller
- Controller: GPS LOBBO TEAM, S.L. (Automatiza ToDo)
- NIF: B-19401306
- Registered office: Avenida del Paral·lel 144, planta 2, puerta 1, 08015 Barcelona, España
- Contact: info@automatizatodo.com
We have no Data Protection Officer because none of the cases that make one mandatory apply (Art. 37 GDPR): we are not a public authority, and we process neither data on a large scale nor special categories of data. For anything concerning your data, write to the address above and a person will answer.
2. What we process and why
Each processing activity is listed separately, with its purpose, legal basis and retention period. If a piece of data is not here, we do not collect it.
- Purpose: Answering your enquiry, preparing a quote and following up on that request.
- Data: Name, email address, subject and the content of your message. If you write on behalf of a company, also whatever company details you give us.
- Legal basis: Steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR). You write so that we answer, and answering is the processing.
- Retention: Three years from the last contact if no contract follows. If one does, for the duration of the relationship and the legal retention periods that follow it.
- Purpose: Sending you news about what we do, if you subscribe.
- Data: Your email address.
- Legal basis: Your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time without affecting mailings already sent.
- Retention: Until you unsubscribe. Every email carries the link, and you can also just write to us.
- Purpose: Returning, through the public tool on this site, a suggestion of what could be automated in a given industry.
- Data: The industry or description you type into the form. No personal data is needed to use it: please do not type any.
- Legal basis: Legitimate interest in offering a demonstration tool for the service (Art. 6(1)(f) GDPR), and your own use of it.
- Retention: The query is processed to give you the answer and is not kept linked to you.
- Purpose: Understanding which pages get visited and what people look for, to improve the site. We learn how many people read a section, not who each one is.
- Data: Pages viewed, time on each, approximate country, language, device and browser type, and where you arrived from. Your IP address is processed by Google to derive the country and is not passed on to us.
- Legal basis: Your consent (Art. 6(1)(a) GDPR and Art. 22.2 LSSI). Without it nothing loads: if you decline, analytics never starts.
- Retention: Fourteen months in Google Analytics, and then it is deleted.
3. Who else sees your data
We do not sell or share your data with anyone. We do work with providers that process it on our behalf, under a data processing agreement and only for what is stated:
| Provider | What for | Where processed |
|---|---|---|
| Google Cloud EMEA Limited (Firebase) | Hosting of the site and of the database where your enquiry is stored. | European Union |
| Resend, Inc. | Sending email: the one that reaches us with your enquiry, the confirmation you receive, and the newsletter. | United States, under the European Commission’s Standard Contractual Clauses |
| Google Ireland Limited (Google Analytics 4) | Website audience measurement. | European Union, with possible access from the United States under the EU-US Data Privacy Framework |
| Google Ireland Limited (modelos Gemini) | Generating the answer of the site’s suggestion tool. | European Union, with possible access from the United States under the EU-US Data Privacy Framework |
We may also have to disclose data to public authorities, a court or law enforcement where a legal obligation requires it.
4. Transfers outside the European Economic Area
Some of the providers above have a parent company in the United States. Where that involves access to data from outside the EEA, the transfer relies on the Standard Contractual Clauses approved by the European Commission or on certification under the EU-US Data Privacy Framework, depending on the provider, as stated in the table above.
5. Your rights
You can exercise these rights at any time by writing to info@automatizatodo.com from the address you contacted us with, or to our registered office. We reply within one month:
- Access: find out what data of yours we hold and what we do with it.
- Rectification: correct anything inaccurate.
- Erasure: have it deleted when no longer necessary.
- Objection: object to processing based on legitimate interest.
- Restriction: ask us to keep it but not use it while a dispute is resolved.
- Portability: receive what you gave us in a machine-readable format.
- Withdraw consent you had given, without affecting processing carried out before withdrawal.
If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (aepd.es), C/ Jorge Juan 6, 28001 Madrid. We would appreciate hearing from you first: most things get sorted in one email.
6. Security and minors
We apply reasonable technical and organisational measures to protect your data: encryption in transit, access restricted to those who need it, and providers with contractual guarantees. No system is infallible, but in the event of a breach posing a risk to your rights we would act in accordance with Art. 33 GDPR.
This site is aimed at professionals and businesses. It is not intended for children under 14 and we do not knowingly collect their data.
7. Changes
If we change how we process data (for example by adding a provider), we update this policy and its date. If a change affects you materially and we have a way of telling you, we will.