Privacy Policy

Last updated: May 12, 2026

1. Information We Collect

We collect information that you provide directly when you:

• Fill out our contact form (name, email, phone, message).
• Contact us via WhatsApp, email, or phone.
• Hire our automation or consulting services.
• Register on any of our platforms (such as Emalia, Centralwap, or other tools we develop).

The data we may collect includes:

• Identifying data: name, surname, email, phone number.
• Professional data: company, position, industry.
• Technical data: IP address, browser type, pages visited, time spent.
• Usage data: interactions with our platforms and services.

2. Purpose of Processing

We use your personal data for the following purposes:

• Service delivery: managing the contractual relationship, executing automation projects, and providing technical support.
• Communication: responding to your inquiries, sending relevant information about our services, and maintaining the business relationship.
• Service improvement: analyzing the use of our website and platforms to improve user experience.
• Legal compliance: fulfilling applicable legal and tax obligations.

3. Legal Basis for Processing

The processing of your data is based on:

• Consent: when you contact us voluntarily or accept our terms.
• Contractual performance: when necessary to provide the contracted services.
• Legitimate interest: to improve our services and maintain the security of our systems.
• Legal obligation: to comply with tax and commercial regulations.

4. Data Retention

We retain your personal data for as long as necessary to fulfill the purpose for which it was collected:

• Client data: for the duration of the contractual relationship and up to 5 years afterward to comply with legal obligations.
• Commercial contact data: until you request its deletion or for 2 years from the last interaction.
• Technical and analytical data: up to 26 months.

5. Data Recipients

We do not sell, rent, or share your personal data with third parties for commercial purposes. We may share data with:

• Service providers: companies that help us deliver our services (hosting, email, analytics), always under confidentiality and data protection agreements.
• Competent authorities: when required by law.

Our main service providers include:

• Hostinger (web hosting) — Lithuania, EU
• Supabase (database) — EU (Ireland)
• Amazon Web Services (transactional email) — EU (Ireland)
• Google Workspace (corporate email) — EU

6. International Transfers

Some of our providers may be located outside the European Economic Area (EEA). In such cases, we ensure that adequate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or adequacy decisions.

7. Your Rights

In accordance with the General Data Protection Regulation (GDPR), you have the right to:

• Access: know what personal data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request the deletion of your data when no longer necessary.
• Objection: object to the processing of your data for certain purposes.
• Restriction: request the restriction of processing in certain circumstances.
• Portability: receive your data in a structured, commonly used format.

To exercise any of these rights, write to info@emeautomations.com indicating your full name and the right you wish to exercise. We will respond within a maximum of 30 days.

If you believe your rights have not been properly addressed, you may file a complaint with the Spanish Data Protection Agency (AEPD).

8. Cookies

Our website may use technical and analytical cookies to improve the browsing experience. Technical cookies are necessary for the website to function and do not require consent. Analytical cookies help us understand how visitors interact with the site.

You can configure your browser to reject cookies or delete them at any time. This may affect the functionality of some parts of the site.

9. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (HTTPS/TLS), role-based access control, and periodic security audits.

10. Minors

Our services are not intended for individuals under 16 years of age. We do not knowingly collect data from minors. If we discover that we have collected data from a minor without the consent of their legal guardian, we will proceed to delete it.

11. Changes

We reserve the right to update this privacy policy at any time. Any changes will be posted on this page with the updated date. We recommend reviewing it periodically.

12. Contact

For any questions related to this privacy policy or the processing of your personal data: