Privacy Policy

“AllRead” is deeply committed to compliance with Spanish and European regulations on the protection of personal data, and guarantees full compliance with the obligations set out, as well as the implementation of the security measures set out in the General Data Protection Regulation (GDPR) (EU) 2016/679 of 27 April, and in the Organic Law 3/2018 of 5 December, on the Protection of Personal Data and guarantee of digital rights (LOPD and GDD, hereinafter LOPD).

In accordance with these regulations, we inform you that the use of our website may require you to provide certain personal data through contact forms, or by sending emails, and that these will be processed by “AllRead”, Data Controller, whose data are:

Company Name: AllRead Machine Learning Technologies, S.L.

Trade Name: AllRead

Tax ID Number: B67411918

Registered Office: Norrsken House Barcelona, Passeig del Mare Nostrum, 15, 08039, Ciutat Vella, Barcelona, España

Email: info@allread.ai

Collection and processing of personal data

Personal data is any information relating to a person: name, email address, address, telephone number, NIF/NIE… In addition, when a User visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by your Internet access provider.

“AllRead, as Data Controller, has the duty to inform the Users of its website about the collection of personal data that may be carried out, either by sending an e-mail or by filling in the forms included on the website.

Only the data necessary to carry out the service contracted, or to be able to respond appropriately to the request for information made by the User, will be obtained. The data collected are identifying and correspond to a reasonable minimum in order to be able to carry out the activity carried out. In particular, no specially protected data is collected at any time. Under no circumstances will the data be used for any purpose other than that for which it was collected.

Contact forms/email

Purpose: To reply to your request for information made through our contact form/s.

Legitimation: The legal basis that legitimises this processing is the consent of the User, which may be revoked at any time.

Transfer of data: Personal data will be processed through servers managed by Gandi.net, which will be considered the Data Processor.

Mailing list registration forms (newsletter)

Purpose: Sending communications, some of them commercial, of interest to users according to the subject of the web. As established by the LSSICE, “AllRead” undertakes not to send commercial communications without identifying them as such. For these purposes, information sent to customers for the maintenance of the existing contractual relationship, if any, will not be considered as commercial communication.

Legitimisation: The legal basis legitimising this processing is the consent of the User, which may be revoked at any time.

Transfer of data: Personal data will be processed through servers managed by Hubspot, which will be considered the Data Processor.

Employment forms

Purpose: To reply to your job application request made through our job application form.

Legitimation: The legal basis legitimising this processing is the consent of the User, which may be revoked at any time.

Transfer of data: Personal data will be processed through servers managed by Gandi.net, which will be considered the Data Processor.

Minimum age restriction

Only persons over 14 years of age may provide personal data on this website. As required by the LOPD and GDD, in the case of minors under 14 years of age, the consent of their parents or guardians is a mandatory condition for us to process their personal data.

On the other hand, only persons over the age of 18 may use our services. In the case of minors under 18 years of age, the consent of their parents or legal guardians will be a mandatory condition for us to provide the services offered, unless the minor is emancipated.

Security measures

Users of the “AllRead” website are informed that the technical and organisational security measures available to us have been adopted to prevent the loss, misuse, alteration, unauthorised access and theft of data, and to guarantee the confidentiality, integrity and quality of the information contained therein, in accordance with the provisions of current legislation on data protection. The personal data collected on the forms are processed solely by “AllRead” staff or by the designated data processors.

The “AllRead” website is also SSL-encrypted, which allows users to send their personal data securely through the contact or registration forms on the website.

Veracity of data

The User declares that all the data provided by him/her are true and correct and undertakes to keep them up to date. The user is responsible for the veracity of his data and shall be solely responsible for any disputes or litigation that may arise as a result of the falsity of such data. It is important that, in order for us to keep the personal data up to date, the user informs “AllRead” whenever there has been any change in them.

Transfer Data

“AllRead” will not transfer or communicate your data to any third party, except in the cases provided for by law or when it is strictly necessary for the provision of a service. Specifically, the data may be disclosed to:

• Providers of technological or computer services
• Providers of payment services
• Courier and parcel service companies
• Third parties or intermediaries, as service providers, operating in our own name (agency, consultancy, etc.).

The transfer of data will take place in the strictest confidence, using the necessary measures, such as the signing of confidentiality contracts, or adherence to their privacy policies set out on their respective websites. The User may refuse the transfer of his/her data to the Data Processors, by means of a written request, by any of the aforementioned means.

Furthermore, in those cases in which it is necessary, Client data may be transferred to certain bodies, in compliance with a legal obligation: Spanish Tax Agency, Labour Inspectorate, etc.

How a User can exercise their rights

The LOPD and the RGPD grant interested parties the possibility of exercising a series of rights related to the processing of their personal data. To do so, the User must contact us by e-mail at info@allread.ai, or by written communication to the address that appears in our Legal Notice, identifying themselves appropriately. Said communication must include the following information: name and surname of the User, the purpose of the request, address and supporting data.

The exercise of rights must be carried out by the User himself/herself. However, they may be exercised by a person authorised as the User’s legal representative, providing the documentation that accredits such representation.

The User may request the exercise of the following rights:

• Right to request access to personal data, which is the right to obtain information on whether their own personal data is being processed, the purpose of the processing that, where applicable, is being carried out, as well as the information available on the origin of said data and the communications made or planned for said data.
• The right to request rectification, in the event that the personal data is incorrect or inaccurate, or deletion of data that proves to be inadequate or excessive. The right to request limitation of processing, in which case “AllRead” will only keep the data strictly necessary for the exercise or defence of claims.
• Right to object to processing: this refers to the right of the data subject not to have their personal data processed or to cease processing in cases where their consent to the processing is not required, or in the case of commercial prospecting files or for the purpose of making decisions relating to the data subject and based solely on the automated processing of their data, unless for legitimate reasons or for the exercise or defence of possible claims, the data must continue to be processed.
• Right to data portability: in the event that you wish your data to be processed by another company, “AllRead” will provide you with the portability of your data in an exportable format.

In the event that consent has been given for a specific purpose, the User has the right to withdraw consent at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

We undertake to execute all these rights within the maximum legal deadline (1 month).

If a User considers that there is a problem with the way in which “AllRead” is handling their data, they may address their complaints to the Security Officer or to the corresponding data protection authority, the Spanish Data Protection Agency being the one indicated in the case of Spain.

Data retention

The personal data of Users who use the contact form or send us an email requesting information will be processed for the time strictly necessary to respond to the request for information, or until the consent given is revoked.

Customers’ personal data will be processed until the end of the contractual relationship. The period of conservation of personal data shall be the minimum necessary, and may be maintained for up to:

• 4 years: Law on Infractions and Penalties in the Social Order (obligations regarding affiliation, registrations, cancellations, contributions, payment of salaries…); Art. 66 et seq. General Tax Law (accounting books…)
• 5 years: Art. 1964 Civil Code (personal actions without special term) 6 years: Art. 30 Commercial Code (accounting books, invoices…)
• 10 years: Art. 25 Law on the Prevention of Money Laundering and Financing of Terrorism. No term: disaggregated and anonymised data.

For their part, the data of Users who register for the newsletter will be kept indefinitely, until the consent given is revoked.

In the case of the processing of candidate data (CV), “AllRead” may keep the candidate’s CV for a maximum of two years in order to incorporate it into future calls for applications, unless the candidate states otherwise.

Social networks

“AllRead” has a profile on some of the main social networks on the Internet (Youtube, X, LinkedIn). The purpose of data processing by “AllRead” will be to inform its followers about its activities, using the tools that the social network in question allows, and to provide a personalized service to the user. The User must take into account that the use of these social networks is subject to their respective terms of use and privacy policies of the platforms. “AllRead” recommends Users to consult these conditions and privacy policies before using the links or applications provided.

In no case “AllRead” will extract data from social networks, unless it was obtained timely and expressly the consent of the user to do so. In addition, “AllRead” is not responsible for the privacy practices of these social networks or their applications, especially with regard to confidentiality, processing of personal data and content.

Staff recruitment

Applicants who send electronic communications to “AllRead” for the purpose of accessing the personnel selection processes of the responsible party authorise us to analyse the documents submitted (e.g. CV), all content that is directly accessible through Internet search engines (e.g. Google), the profiles maintained on professional social networks (e.g. LinkedIn), the data obtained in the entrance tests and the information disclosed in the job interview, with the aim of assessing your candidacy and being able, if necessary, to offer you a job. In the event that the candidate is not selected, “AllRead” may keep his/her CV for a maximum of two years, in order to incorporate it in future vacancies, unless the candidate states otherwise. The legal basis for this processing is the consent of the person concerned, which may be revoked at any time.

Confidentiality

The information provided by the user shall in any case be treated as confidential and may not be used for purposes other than those described herein. “AllRead undertakes not to divulge or disclose information about the user’s claims, the reasons for the advice requested or the duration of its relationship with the user.

Term of validity

This privacy and data protection policy has been drawn up as of 10 September 2024. It may vary depending on changes in regulations and jurisprudence that may occur, and it is the responsibility of the owner of the data to read the updated document in order to know their rights and obligations in this regard at all times.