1. Data Controller
| Identity | Plataforma de Ecosistemas Digitales S.L. |
| Tax ID | B93750271 |
| Address | Calle Heroe de Sostoa 12, 29002 Malaga |
| Privacy Email | privacidad@plataformadeecosistemas.es |
| Data Protection Contact | privacidad@plataformadeecosistemas.es |
2. Processing Purposes and Legal Basis
We process your personal data for the following purposes, each with its legal basis under the GDPR:
| Purpose | Legal Basis (Art. 6 GDPR) | Retention Period |
|---|
| Management of inquiries via contact form | Consent (art. 6.1.a) | 1 year from last communication |
| Provision of contracted SaaS services | Contract performance (art. 6.1.b) | Contract duration + 5 years (commercial obligation) |
| Billing and tax compliance | Legal obligation (art. 6.1.c) | 5 years (General Tax Law) |
| Commercial communications / newsletter | Express consent (art. 6.1.a) | Until consent is withdrawn |
| Management of employment and training programs (B2G) | Public interest (art. 6.1.e) / Legal obligation | According to program regulations (ESF: 10 years) |
| Anonymized web analytics | Legitimate interest (art. 6.1.f) | 26 months (aggregated data) |
| Fraud prevention and security | Legitimate interest (art. 6.1.f) | 6 months (access logs) |
3. Automated Decision-Making and Artificial Intelligence
The platform uses artificial intelligence (AI) systems that may process personal data for the following functions:
- AI Copilot:Conversational assistant that can access user context to provide personalized responses. It does not make binding decisions.
- Employment matching:Algorithm that compares candidate competencies with available job offers. The result is indicative; the final decision is made by the user or the technician.
- Legal document analysis (Jaraba AI):Semantic search in legal databases. It does not constitute legal advice.
In accordance with Article 22 of the GDPR,no decision with legal or significant effects is based solely on automated processing. Human supervision always exists. You may request human intervention, express your point of view, and challenge the decision by contacting privacidad@plataformadeecosistemas.es.
All AI agents have a complete audit trail (decision traceability) in compliance with the European AI Regulation (EU AI Act).
4. Recipients and International Transfers
Your data may be communicated to the following recipients:
| Recipient | Purpose | Location | Safeguards |
|---|
| IONOS SE (hosting) | Storage and processing | Germany (EU) | Within the EEA |
| Stripe Inc. (payments) | Payment processing | USA | EU-US Data Privacy Framework (DPF) |
| Anthropic PBC (AI) | Conversational AI models (Claude) that process the content of your copilot queries | USA | Standard Contractual Clauses (SCCs) |
| Google LLC (AI + analytics) | Conversational AI models (Gemini) that process your copilot queries; and anonymized web measurement (Google Analytics 4) | USA | EU-US Data Privacy Framework (DPF) |
| OpenAI, L.L.C. (AI) | Conversational AI models (backup provider) that process the content of your copilot queries | USA | Standard Contractual Clauses (SCCs) |
| Qdrant (vector database) | Storage of vector representations (embeddings) of content for semantic search in the copilot | EU / USA (depending on cluster region) | Standard Contractual Clauses (SCCs) |
| Meta Platforms Ireland Ltd. (advertising) | Measurement and attribution of advertising campaigns (Meta Pixel), with your prior consent | Ireland (EU) / USA | Standard Contractual Clauses (SCCs) |
| Meta Platforms Ireland Ltd. (messaging) | Sending and receiving WhatsApp Business messages (phone number and conversation content), only if you use this channel | Ireland (EU) / USA | Standard Contractual Clauses (SCCs) |
No transfers to countries without adequate protection level are carried out without the safeguards of Chapter V of the GDPR. You may request a copy of the standard contractual clauses at privacidad@plataformadeecosistemas.es.
5. Data Subject Rights
In accordance with Articles 15 to 22 of the GDPR and the LOPDGDD, you have the right to:
| Right | Description |
|---|
| Access(Art. 15) | Obtain confirmation of whether we process your data and access it. |
| Rectification(Art. 16) | Correct inaccurate data or complete incomplete data. |
| Erasure(Art. 17) | Request the deletion of your data ("right to be forgotten"). |
| Restriction(Art. 18) | Request restriction of processing in certain circumstances. |
| Portability(Art. 20) | Receive your data in a structured format and transmit it to another controller. |
| Objection(Art. 21) | Object to processing based on legitimate interest or marketing purposes. |
| Withdraw consent(Art. 7.3) | Withdraw consent at any time, without affecting the lawfulness of prior processing. |
| Not be subject to automated decisions(Art. 22) | Request human intervention in decisions based on automated processing. |
To exercise any right, send an email toprivacidad@plataformadeecosistemas.esindicating the right you wish to exercise and attaching a copy of your ID/NIE. Response time: 30 days.
If you believe your rights have not been properly addressed, you may file a complaint with the Spanish Data Protection Authority (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid.
6. Security Measures
We apply technical and organizational measures in accordance with Article 32 of the GDPR:
- TLS 1.3 encryption in communications (data in transit).
- Role-based access control with isolation between tenants.
- Audit logs and continuous monitoring of activity.
- Periodic backups with 30-day retention; external backups are stored encrypted.
- Periodic audits of dependencies and security.
- Automatic detection of personal data (PII) in AI workflows.
- Breach response plan with notification to the AEPD within a maximum of 72 hours.
7. Cookies
Information about cookies used on this website is detailed in ourCookie Policy. You can configure your preferences at any time from the "Cookie settings" button in the footer.
8. Modifications
PED reserves the right to modify this policy to adapt to legislative or case law developments. Any changes will be published on this page with the update date.
