The purpose of this policy is to inform interested parties about the various data processing activities carried out by this organization through the website, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, and Organic Law 3/2018 of December 5, on the Protection of Personal Data and the guarantee of digital rights.

IDENTIFICATION AND CONTACT DETAILS OF THE CONTROLLER

CAPILLARY IO SL, located at C/ ISAAC PERAL Nº1, DUPLICADO 4º F (50001 ZARAGOZA), ZARAGOZA, with VAT number ESB99564148. Contact phone and email: info@capillary.io

PURPOSES OF THE PROCESSING OF YOUR PERSONAL DATA

  • USERS/VISITORS OF THE WEBSITE

We will process the personal data provided for the following purposes:

  • To respond to inquiries, complaints, and incidents submitted through our website’s contact channels.
  • To understand user behavior on the website in order to detect possible cyberattacks.
  • With your consent, to measure whether Google Ads campaigns result in enquiries, demo bookings, signups, store visits, qualified leads, or sales, and to evaluate campaign performance. Advertising personalization is disabled on this website.
  • To comply with legal obligations directly applicable to us and governing our activity.
  • To protect and exercise our rights or respond to any kind of claims.
  • If applicable, to send commercial communications related to our business activities and/or news or newsletters related to our sector. Refusal to authorize this will prevent us from sending you such information.
  • If applicable, to manage your participation in contests and promotions carried out by the organization. Refusal to authorize this will prevent participation.
  • If applicable, to send satisfaction and/or quality surveys. Refusal to authorize this will prevent service evaluation.
  • To manage, administer, and monitor your activity on the blog/forum. Refusal to authorize this will prevent participation.

  • USERS/VISITORS OF THE WEBSITE

  • Based on your consent to process your data for the purposes outlined above. Refusal to provide your personal data will make it impossible to process your data for such purposes.

  • Google Ads measurement storage and associated attribution processing are based on the consent selected in the cookie banner. You may reject or withdraw that consent without losing access to the website.

  • To comply with the legal obligations applicable to us. In this case, the data subject cannot object to the processing.

  • Based on our legitimate interest to protect our image, business, and track record by preventing attacks on our website. In this case, the data subject cannot object to the processing but may exercise their rights as set out in the “Rights” section of this policy.

DATA RETENTION PERIODS OR CRITERIA

The personal data provided will be retained for as long as necessary to fulfill the purposes for which they were initially collected.

Once the data is no longer necessary for the intended processing, it will be properly blocked and made available, where appropriate, to the relevant public administrations, courts, or the Public Prosecutor’s Office during the statute of limitations period for any actions that may arise from the relationship with the client and/or the legally established retention periods.

AUTOMATED DECISIONS AND PROFILING

The website does not make decisions producing legal or similarly significant effects based solely on automated processing. Capillary.io uses Google Ads attribution and aggregated campaign reporting after consent, but disables advertising personalization on this website.

RECIPIENTS

During the processing of your personal data, the organization may share your data with the following recipients:

  • Courts and Tribunals.
  • Law enforcement agencies.
  • Other competent public authorities or bodies, when legally required to do so.
  • Service providers acting on our behalf where necessary to operate the website, handle enquiries, protect the service, and measure consented advertising. For Google Ads measurement this includes Google Ireland Limited and, where applicable, other Google group entities as described in Google’s privacy documentation.

INTERNATIONAL DATA TRANSFERS

Some technology providers may process data outside the European Economic Area. Where this involves an international transfer, CAPILLARY IO SL will rely on an applicable adequacy decision or appropriate safeguards under Chapter V GDPR, such as the European Commission’s Standard Contractual Clauses, together with supplementary measures where required. See our Cookies Policy for the Google Ads measurement details and links to Google’s information.

SOCIAL MEDIA

To keep you informed of our activity and updates, we inform you that CAPILLARY IO SL has an official profile on various social media platforms.

All users may join our social media pages or groups. However, please note that unless we request your data directly (e.g., through marketing actions, contests, promotions, or any other valid method), your data belongs to the respective social network. Therefore, we recommend that you read their terms of use and privacy policies carefully and configure your privacy preferences.

Below are links to the privacy policies of the social networks where we are present, so you can always access and configure your privacy settings:

Facebook: https://www.facebook.com/privacy/policy/?entry_point=facebook_page_footer

X: https://x.com/privacy

LinkedIN: https://linkedin.com/legal/privacy-policy

Youtube: https://policies.google.com/privacy

Instagram: https://privacycenter.instagram.com

RIGHTS

Data subjects may request more information about the processing of their personal data and exercise their rights of access, rectification, and erasure at any time, free of charge. They may also request the restriction of processing, object to it, request data portability (when technically feasible), withdraw previously granted consent, and, if applicable, opt out of automated decision-making and profiling.

To exercise these rights, you may use the forms provided by the organization or write to the postal or email address indicated above. For security purposes, we may ask for a copy of your ID or a similar document to verify your identity unless it can be done through less intrusive means.

If you feel that your data protection rights have been violated, especially if you have not obtained a satisfactory response to the exercise of your rights, you may file a complaint with the competent Data Protection Authority (Agencia Española de Protección de Datos) at www.aepd.es.

In accordance with Article 21 of Law 34/2002 on Information Society Services and Electronic Commerce, if you do not wish to receive further information about our services, you may unsubscribe by sending an email to info@capillary.io with the subject line “UNSUBSCRIBE”.

DATA ACCURACY

The data subject guarantees that the data provided is truthful, accurate, complete, and up-to-date and undertakes to report any changes through the channels provided and indicated in section one of this policy. They shall be liable for any direct or indirect damage that may arise from failure to comply with this obligation.

If the user provides data of third parties, they declare that they have the consent of the data subjects and undertake to inform them of the content of this clause, releasing the organization from any liability arising from failure to comply with this obligation.

CHANGES AND UPDATES

This privacy policy may be modified/updated to comply with legal requirements or adapt to instructions from the Spanish Data Protection Agency, or as a result of changes to our website. Therefore, we advise users to review our Privacy Policy periodically.

If you have any questions about this policy, you can contact CAPILLARY IO SL through the forms provided by the organization or by writing to the postal or email address indicated above.