Owner and Data Controller

The controller of personal data under the GDPR is:

Aiden Technologies Ltd, with registered address at Kemp House 128 City Road, London, EC1V 2NX, UNITED KINGDOM.
Tel.: +34 941 687 661
N.º de compañía: 14561220
E-mail: support@aiden.es

1. Categories of Data collected

The categories of Personal Data that AIDEN collects, whether directly or through third parties, include: first name; surname(s); gender; date of birth; phone number; VAT Tax Identification Number; company name; profession; address; fax number; country; state; province; email address; postcode; Data; city; Tax ID; field of activity; User ID; number of employees; website; Tracker; Usage Data; Calendar permission; contacts permission; camera permission; location permission; microphone permission; phone permission; sensors permission; SMS permission; storage permission; Reminders permission; HomeKit permission; motion sensors permission; Bluetooth sharing permission; social media accounts permission; NFC readers permission; biometric Data access permission; Media Library permission; Photo Gallery permission; health Data reading permission; Siri permission; Google Assistant permission; calls permission; general physical activity data; Data communicated during use of the service; username; application information; device logs; device information; payment data; password; profile picture; social media accounts; image; prefix; budget; academic background; billing address; house number; language; geographic location.

Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when AIDEN is used. All Data requested by AIDEN is mandatory and refusal to provide it may make it impossible for AIDEN to provide the Service.

The User assumes responsibility for the Personal Data of third parties obtained, published or shared through AIDEN and hereby declares that they have the consent of those third parties to provide that Data to the Owner.

2. Methods and place of processing the Data collected

Processing methods

The Owner will process Users' Data appropriately and will adopt the appropriate security measures to prevent unauthorised access, disclosure, alteration or destruction of the Data. Data processing will be carried out using computers and/or IT tools, following procedures and organisational methods strictly related to the stated purposes.

Legal basis of Processing

The Owner may process the User's Personal Data if one of the following conditions is met: when Users have given their consent for one or more specific purposes; when obtaining the Data is necessary to perform a contract; when processing is necessary to comply with a legal obligation; when processing relates to a task carried out in the public interest; or when processing is necessary for the purposes of a legitimate interest pursued by the Owner or a third party.

Location

The Data is processed at the Owner's offices, as well as in any other place where the parties involved in the processing are located. Depending on the Users' location, Data transfers may involve transferring Users' Data to a country other than their own.

Retention period

Personal Data will be processed and kept for as long as necessary and for the purpose for which it was collected. Personal Data collected to formalise a contract between the Owner and the User must be kept as such until that contract has been fully formalised.

3. Purpose of Processing the Data collected

Data relating to the User is collected to allow the Owner to provide its Service, comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of its Users or third parties), detect any malicious or fraudulent activity, as well as for the following purposes: contacting the User, access to third-party service accounts, interaction with social networks and external platforms, statistics, displaying content from external platforms, backup storage and management, device permissions, payment management, hosting and backend infrastructure, platform and hosting services, registration and authentication, social features, SPAM protection and management of the User database.

4. Third-party services used

AIDEN uses various third-party services to provide its Services:

• HubSpot CRM and Lead Management (HubSpot, Inc.) — User database management. Processing in the USA.
• OVH Storage and backup — Backup storage and management. Processing in the USA, United Kingdom, Italy, Spain, France, Germany, the Netherlands, Canada, Singapore and Australia.
• Google reCAPTCHA (Google LLC / Google Ireland Limited) — SPAM protection.
• Firebase Authentication and Cloud Firestore (Google LLC) — Registration, authentication and hosting.
• Firebase Hosting (Google LLC) — Platform hosting.
• WordPress.com (Automattic Inc.) — Platform that lets the Owner design, run and host AIDEN.
• Stripe OAuth (Stripe Inc.) — Registration, authentication and payment management.
• Google Fonts — Display of typefaces.

5. Device permissions to access Personal Data

Depending on the User's specific device, AIDEN requires certain permissions to access the device's Data. By default, the User must grant these permissions before the information in question can be accessed. After granting permission, the User may revoke it at any time through the device settings.

Please note that revoking these permissions may affect AIDEN's correct operation. The permissions AIDEN may request include: access to the calendar, contacts, camera, location (exact or approximate, continuous or non-continuous), microphone, phone, sensors, SMS, storage, Reminders, HomeKit, motion sensors, Bluetooth, social media accounts, NFC, biometric Data, Media Library (Music), Photo Gallery, health Data, Siri, Google Assistant and Google Home.

6. Users' rights

Users may exercise the following rights regarding the processing of Data by the Owner:

• Withdraw their consent at any time where they had previously given it.
• Object to the processing of their Data if that processing is carried out on a legal basis other than consent.
• Access their Data and information about certain aspects of the processing.
• Verify and request the modification of their Data.
• Restrict the processing of their Data in certain cases.
• Erase or delete their Personal Data.
• Receive their Data and transfer it to another controller (portability).
• Lodge a complaint with the competent data protection authority.

Any request to exercise the User's rights can be addressed to the Owner at support@aiden.es. These requests will be handled by the Owner free of charge, as soon as possible and always within one month.

7. Additional information about Data collection and processing

Legal defence

The User's Personal Data may be used for the Owner's legal defence in court or in the judicial stages prior to a possible lawsuit arising from the improper use of AIDEN or related Services.

System log and maintenance

For reasons relating to operation and maintenance, AIDEN and any other third-party service used may collect a system log; that is, files that record interaction with AIDEN and may contain Personal Data, such as the User's IP address.

Changes to this privacy policy

The Owner reserves the right to modify this Privacy Policy at any time, notifying Users through this page. We strongly recommend that you review this page frequently, using the last-updated date shown at the bottom of the page as a reference.

8. Contact

If you have any questions about your personal information or this policy, or if you wish to make a complaint about how Aiden processes your personal data, please contact us by email at support@aiden.es, or using the contact details at the beginning of this document.