Privacy Policy
1. Who is the controller of your data?
The controller of your personal data is EDICCIO DIGITAL PUBLISHING, S.L., a single-member limited liability company (hereinafter, “EDICCIO”), with Tax ID (NIF) B21925185 and registered office at Carrer Vallseca 176, P1 PTA2, Sant Cugat del Vallès, Barcelona (Spain).
We inform you that the website ediccio.ai (hereinafter, the “Website”) and the customer panel accessible at app.ediccio.ai (hereinafter, the “Customer Panel”) are owned by EDICCIO.
This Privacy Policy governs the processing that EDICCIO carries out, as controller, of the personal data of those who interact with EDICCIO through the Website, the Customer Panel or its forms and contact channels.
The processing operations described in this Privacy Policy apply only depending on the relationship the User has with EDICCIO and the channels, services or features they use.
The User may contact EDICCIO about any matter relating to data protection at the following email address: privacy@ediccio.ai.
2. Privacy recommendations and responsible use.
Please read carefully and follow the recommendations below:
- Keep your computer equipped with properly updated antivirus software against malicious software and spyware applications that could jeopardise your Internet browsing and the information stored on your computer.
- Read and review this Privacy Policy and all the legal texts made available by EDICCIO in its online environments.
- Review the privacy policies and terms of the third parties you access through EDICCIO’s links, as EDICCIO is not responsible for their content, services or data processing.
- Provide truthful and up-to-date information and notify EDICCIO of any relevant change to your data. The User is responsible for the accuracy of the information they provide.
- Take the necessary measures to protect your data and access credentials. EDICCIO is not responsible for incidents arising from the User’s failure to comply with these obligations.
- Do not provide EDICCIO with personal data of third parties, including data of minors, or special categories of personal data, unless this is necessary for the relevant purpose and you have a sufficient legal basis for doing so.
- EDICCIO’s Online Environments and Service are intended for companies and professionals.
3. Information about the data collected by EDICCIO.
As controller, EDICCIO may process the following categories of personal data, depending on the relationship the User has with EDICCIO and the channels or features they use:
Information provided by the User: this includes the data the User provides directly to EDICCIO when requesting access, filling in a form or contacting EDICCIO through the channels made available. In particular:
- Identification and contact data: name, work email address, company, job title or, where the User makes contact through WhatsApp, phone number or BSUID identifier.
- Content of communications: the information the User provides when requesting access, filling in a form or contacting EDICCIO, including the content of their messages.
- Account and Customer Panel access data: work email address, email verification status, internal account identifier, status and dates associated with the account, customer organisation to which it is linked and authentication data necessary to manage access.
- Billing data: for paying customers, the billing and tax data necessary to issue the corresponding invoice.
- Consents and preferences: information on whether the User has agreed to receive communications or to the creation of a profile, as well as on the subsequent withdrawal of those consents and the date on which these occur.
Data used and derived to create a needs profile: only where the User has given their consent, EDICCIO may use the information they provide through the forms or channels made available and generate, from that information, derived or inferred data relating to, among other things, their goals, needs, difficulties, interests, preferences or sentiment.
Information collected automatically: when the User browses the Website, EDICCIO transiently processes the IP address and the User-Agent (technical information about the browser and device) to obtain aggregate statistics. The Website does not install cookies or store information on the User’s device. The Customer Panel uses local storage solely for authentication and session management. For more information, see section 6, “Analytics and cookies or similar technologies”.
In addition, EDICCIO processes the IP address in the technical logs of access to the Customer Panel for security purposes.
4. For what purposes does EDICCIO process your data and what is the legal basis?
EDICCIO processes the personal data of Users for the following purposes, on the legal basis that applies in each case:
| Purpose | Legal basis |
|---|---|
| Handling enquiries and access requests. | Taking pre-contractual steps at the User’s request (Art. 6(1)(b) GDPR), where the User is the future contracting party. For general enquiries or contact made on behalf of a company, EDICCIO’s legitimate interest in handling the request and maintaining the professional relationship (Art. 6(1)(f) GDPR). |
| Managing access to and use of the Customer Panel by authorised users. | Performance of a contract (Art. 6(1)(b) GDPR), where the User is a party to it, or the legitimate interest of EDICCIO and of the customer organisation in managing access for its authorised users (Art. 6(1)(f) GDPR). |
| Ensuring the security of the Website and service, preventing fraud and misuse and resolving technical issues. | EDICCIO’s legitimate interest (Art. 6(1)(f) GDPR). |
| Obtaining aggregate statistics on the use of the Website. | EDICCIO’s legitimate interest in understanding the use and functioning of the Website (Art. 6(1)(f) GDPR). |
| Sending news and updates about EDICCIO’s products and services where the User has subscribed. | The User’s consent (Art. 6(1)(a) GDPR), which they may withdraw at any time. |
| Creating a profile of the User’s needs from the information they share on the early access form or with EDICCIO’s assistant, in order to show them the Service and personalise the demonstration and the subsequent follow-up. | The User’s consent (Art. 6(1)(a) GDPR), optional and revocable at any time. |
| Managing billing and complying with the legal, tax and regulatory obligations applicable to EDICCIO. | Performance of a contract (Art. 6(1)(b) GDPR), where necessary to manage the contractual relationship, and compliance with a legal obligation (Art. 6(1)(c) GDPR). |
EDICCIO does not use the User’s personal data to make automated decisions that produce legal effects concerning the User or similarly significantly affect them. Furthermore, the creation of the profile is optional and is not a condition for early access to the Service.
5. Retention of the data.
EDICCIO retains personal data securely and only for the time necessary to fulfil the purposes for which they were collected and, thereafter, where necessary, for the legally established periods in order to address any potential liabilities. Where erasure applies, the data will be kept blocked in accordance with Article 32 LOPDGDD, solely for the limitation period of the liabilities arising from the processing and at the disposal of the competent authorities, without commercial use. Once that period has ended, the data will be destroyed.
In particular:
- Enquiries and access requests: for as long as there is an active interest in the request or communication and, once that interest has ended, for a maximum of 30 days, unless erasure is due earlier. The closure of the request will be determined by its resolution, withdrawal or the end of the requested follow-up; it will not be kept open solely because of a commercial interest of EDICCIO.
- Needs profile and data derived from it: for as long as the User’s consent remains in place and the profile is still necessary for the purpose consented to. If consent is withdrawn or erasure is requested, EDICCIO will stop using the profile immediately and will erase it without undue delay and, as an operational maximum, within 30 days, without prejudice to any blocking that legally applies.
- Account and billing data: for as long as the account or the corresponding relationship with EDICCIO remains active and, thereafter, where necessary, for the applicable periods in order to address any potential liabilities.
- News and updates: for as long as the User maintains their consent and, in any event, until they unsubscribe or withdraw that consent. Once the User has unsubscribed, only the minimum data necessary to respect the exclusion from future mailings will be kept and, where applicable, the evidence of consent for the periods during which liability may be claimed, without being reused for advertising.
- Technical logs of access to the Customer Panel: these will be kept for a period of 90 days from their generation.
- Documentation subject to tax, accounting or legal retention obligations: for the periods established in the applicable legislation.
6. Analytics and cookies or similar technologies.
Website (ediccio.ai): Under the technical configuration currently in place, the Website does not use cookies or other technologies for storing information on the User’s device.
EDICCIO uses “Umami”, a web analytics tool hosted on EDICCIO’s own infrastructure in the European Union, for the purpose of obtaining statistical information on the use of the Website. Umami does not install cookies or store information on the User’s device.
To compile these statistics, the IP address is processed transiently. Umami keeps per-visit records that include a pseudonymous hash renewed monthly, the page visited, the source of the visit, information about the browser and device, the language, the approximate geographical location and the query string of the URL. The statistics on the use of the Website are obtained from these records. The records are kept for a maximum of 13 months.
Customer Panel (app.ediccio.ai): It uses the browser’s local storage exclusively to enable authentication and maintain the User’s session. This storage is strictly technical in nature and is not used for analytics, advertising or tracking purposes.
7. Rights of Users
Under the terms provided for in the applicable legislation, Users may exercise the following rights:
- To access their personal data;
- To request the rectification of any inaccurate data;
- To request the erasure of their data;
- To request that the processing of their data be restricted;
- To object to the processing of their data;
- To request the portability of their data;
- Not to be subject to decisions based solely on the automated processing of their data that produce legal effects concerning the User or similarly significantly affect them, where applicable.
In addition, the User may withdraw at any time any of the consents given, both the one relating to profiling and the one relating to the sending of commercial communications by email, without such withdrawal affecting the lawfulness of the processing carried out previously. Withdrawal may be made through the following means: (i) by writing to privacy@ediccio.ai; (ii) to withdraw the consent relating to profiling, by replying STOP-PROFILE on WhatsApp or by email to agent@ediccio.ai; and (iii) to unsubscribe from commercial email communications, by using the unsubscribe link included in the communications or by replying “unsubscribe”.
The User may exercise all these rights at the following email address: privacy@ediccio.ai, stating the reason for their request. The User may also send their request by ordinary post to the following postal address: Carrer Vallseca 176, P1 PTA2, Sant Cugat del Vallès, Barcelona (Spain).
Where there are reasonable doubts about their identity, EDICCIO may request only the additional information necessary to verify it. Requests will be handled without undue delay and, in any event, within one month, within which a reply will be given or the User will be informed whether more time is needed because of the complexity or number of requests, with a maximum extension of a further two months and an explanation of the reasons. Exercising these rights is free of charge, unless the request is manifestly unfounded or excessive.
Without prejudice to any other remedy, the User has the right to lodge a complaint with the competent Supervisory Authority, in particular in the Member State (in Spain, the AEPD), if they consider that the processing of their personal data does not comply with the legislation, as well as where a request to exercise their rights has not been met.
8. Security and confidentiality of the data.
EDICCIO adopts the appropriate technical and organisational measures to ensure a level of security appropriate to the risk, allowing access to the data only to authorised personnel.
EDICCIO maintains security measures aimed at preventing the loss, misuse, alteration, unauthorised access to or disclosure of personal data. These measures include mechanisms for encrypting data in transit and at rest, as well as access control and authentication measures.
Likewise, EDICCIO undertakes to comply with the duty of secrecy and confidentiality with regard to personal data, in accordance with the applicable legislation.
9. Recipients.
EDICCIO may disclose or allow access to personal data where necessary to fulfil the purposes described in this Privacy Policy or to comply with a legal obligation.
In particular, the data may be processed by or disclosed to the following categories of recipients:
- EDICCIO’s service providers: technology providers of infrastructure, hosting, authentication, communications and other services necessary for the operation of EDICCIO’s online environments and channels (mainly Amazon Web Services). Where these providers process personal data on behalf of EDICCIO, they act as processors, following its instructions and in accordance with the corresponding data processing agreements.
- Messaging platforms: where the User chooses to contact EDICCIO through WhatsApp, Meta/WhatsApp will process the phone number and the content of the communications in accordance with its own terms and privacy policy. EDICCIO will receive and keep those messages in order to attend to and reply to the User.
- Professional advisers: lawyers, auditors, tax advisers, accountants or other professionals subject to the corresponding confidentiality obligations.
- Public administrations, courts, tribunals and competent authorities: where the disclosure is required to comply with a legal obligation or for the establishment, exercise or defence of claims.
EDICCIO does not sell Users’ personal data or disclose them to third parties for third-party behavioural advertising purposes.
10. International transfers.
EDICCIO uses Amazon Web Services (AWS) as its main provider of technology infrastructure for the processing and storage of the data; this infrastructure is hosted mainly in Ireland, within the European Union.
However, EDICCIO uses Amazon CloudFront, the AWS content delivery network (CDN) service, the use of which may involve the processing of certain personal data outside the European Economic Area. These transfers are made under the applicable adequacy decisions of the European Commission, including, for transfers to the United States, the EU-U.S. Data Privacy Framework. Where no adequacy decision applies, the AWS DPA provides for the application of the Standard Contractual Clauses approved by the European Commission.
In addition, the use of WhatsApp Business as a contact channel may involve international transfers of certain data by WhatsApp Ireland Limited to Meta group entities located in the United States. These transfers are made under the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework.
The User may request information about international transfers and the applicable mechanisms and safeguards by writing to privacy@ediccio.ai.
11. Changes.
EDICCIO may update this Privacy Policy when necessary, for example, to reflect the addition of new features, changes of providers or developments in the applicable legislation.
The date of the last update makes it possible to identify the version of the Privacy Policy in force.
Where a change is material, EDICCIO will inform the User, before it takes effect, through the Online Environments, by email or by another appropriate means of communication.
12. Questions
If you have any questions about our Privacy Policy, please contact us by sending an email to privacy@ediccio.ai.
Furthermore, if you consider that your rights are not properly safeguarded, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD). You may contact the AEPD by telephone on 900 293 183, through its electronic office or through its other official channels.