In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR), and with Spanish Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), MiJ Robots Group, S.L. informs the User about the processing of their personal data through the website www.mijrobots.com.
1. Data controller
The controller responsible for the personal data collected through the Website is:
- Company name
- MiJ Robots Group, S.L.
- Tax ID (CIF)
- B55274278
- Address
- C/ Ramon Llull 21, 17244 Cassà de la Selva, Girona, Spain
- info@mijrobots.com
2. Data we process
We process the personal data that the User voluntarily provides through the contact form on the Website, as well as the technical data strictly necessary to ensure the security of the submission. Specifically:
- Identifying data: full name, company.
- Contact data: work email and, optionally, phone number.
- Commercial information: type of inquiry, sector and free-text message.
- Technical data: the sender's IP address, used exclusively to prevent abusive form submissions (anti-spam) and discarded once the inquiry has been processed.
3. Purposes of processing
The User's personal data are processed for the following purposes:
- To handle inquiries, requests for commercial information or quotations submitted through the contact form.
- To maintain any commercial or professional relationship that may be established with the User.
- To ensure the security of the Website and prevent abuse of the form (validation, honeypot, rate limiting).
- To comply with the legal obligations applicable to the Owner.
4. Legal basis
The legal basis legitimising the processing described is:
- The User's express consent, given by ticking the box accepting this Privacy Policy before submitting the form (Article 6(1)(a) GDPR).
- The Owner's legitimate interest in managing the relationship with the User and responding to their inquiries (Article 6(1)(f) GDPR).
- Compliance with legal obligations applicable to the Owner (Article 6(1)(c) GDPR).
5. Retention periods
We will keep the User's personal data only for as long as strictly necessary to handle the inquiry submitted. If the inquiry does not result in a commercial relationship, the data will be deleted within a maximum of twelve (12) months from the last contact.
If the inquiry leads to a commercial or professional relationship, the data will be kept for the duration of the relationship and, thereafter, for the periods legally required to comply with applicable obligations (in particular, those arising from tax, commercial and anti-money-laundering legislation).
6. Data recipients
The User's personal data will not be shared with third parties except as required by law.
For the provision of certain ancillary services, the Owner uses providers that act as data processors under contract and with the safeguards required by data protection law:
- SiteGround Spain, S.L. — provider of web hosting and email. Servers located in the European Union.
- Plausible Insights OÜ — provider of cookieless, aggregated web analytics. Does not process personally identifiable data. Servers located in the European Union.
7. International transfers
The Owner does not carry out international data transfers outside the European Economic Area (EEA). Providers acting as data processors store data on servers located within the EEA.
8. User rights
The User may exercise the following rights with respect to their personal data at any time:
- Access: to know whether their data are being processed and, where applicable, to obtain a copy of them.
- Rectification: to request the correction of inaccurate data or the completion of incomplete data.
- Erasure: to request the deletion of their data when no longer necessary.
- Objection: to object to processing on grounds relating to their particular situation.
- Restriction: to request the limitation of processing in the cases provided for by law.
- Portability: to receive their data in a structured, commonly used and machine-readable format.
- Withdrawal of consent at any time, without affecting the lawfulness of prior processing.
The User may exercise these rights by written communication addressed to MiJ Robots Group, S.L., C/ Ramon Llull 21, 17244 Cassà de la Selva, Girona, Spain, or by email to info@mijrobots.com, indicating "GDPR" in the subject line and attaching a copy of an identity document.
The User also has the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if they consider that the processing of their data does not comply with applicable regulations.
9. Security measures
The Owner has adopted the technical and organisational measures necessary to ensure the security of personal data and to prevent their alteration, loss, unauthorised processing or access, taking into account the state of the art, the nature of the data stored and the risks to which they are exposed.
These measures include, among others, encrypted HTTPS connection, validation of data submitted through the form, mechanisms to prevent automated submissions (honeypot and rate limiting by IP address) and browser security headers.
10. Minors
The Website is not intended for children under 14 years of age. The Owner does not knowingly collect personal data from minors of this age. If such processing is detected, the data will be deleted immediately.
11. Changes to this policy
The Owner reserves the right to modify this Privacy Policy to adapt it to legal or case-law developments or to internal practices. The version in force at any given time will be published on this same page and the date of last update appears at the beginning of the document.