privacy policy

PRIVACY POLICY

When establishing electronic or physical communications with AMALA AI, users’ personal data may be collected and processed. By means of this Privacy Policy, the owner of this website informs users about how the personal data collected will be used, so that they can decide, freely and voluntarily, if they wish to provide the information requested.

Data controller and contact details of the data protection officer

The party responsible for processing the user’s personal data to which AMALA AI may have access is the commercial company Amala AI Legal Consultants Srl, with its registered office at Calle Francisco Vitoria, 19, Madrid 28007, Spain. The user may contact the aforementioned address for these purposes. Similarly, the user may contact AMALA AI’s data protection delegate at the following email address: info@amalaai.com.

Purposes of the processing

The type of personal data collected and processed through the AMALA AI website are those corresponding to subscribers to the newsletter, invitations to events or general communications that may be sent by the law firm. The purpose for which the personal data of users is collected and processed is exclusively to manage their relationship with the firm, to establish the relevant contacts and to send communications relating to publications or notifications regarding information or events that may be generated by AMALA AI.

The personal data of users who send queries or questions to AMALA AI are collected and processed in order to respond to such queries.  If a service provision contract is entered into, the data will be processed manually and/or automatically in order to manage said services, as well as the corresponding invoicing and delivery. Data will also be used to comply with legally established obligations, such as verifying compliance with contractual obligations, including fraud prevention. The personal data requested is mandatory, so if it is not provided it will be impossible to offer the contracted services.

In the event that you send us your CV or register for the different job offers that we may publish, we will process your data in order to evaluate and manage your job application and, where appropriate, carry out the necessary actions for the selection and recruitment of personnel, in order to offer you positions that match your profile. Unless otherwise indicated, provision of the required data is compulsory, so refusing to provide them will prevent the selection process from continuing.

Storage period

The personal data provided will be kept for the corresponding period of time in order to comply with legal obligations or for the period of time that a judge or court may require them.

Consent-based data will be retained as long as you do not revoke consent or object to the processing.

The processing of CV data received for selection processes will be kept for a period of two years. 

Data blocking

In accordance with Article 32 of the Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (hereinafter LOPDGDD), data controllers will block data whenever it is rectified or deleted.

The blocking of data involves identifying and reserving the data, and adopting technical and organisational measures to prevent processing. An exception to this is that the data will be made available to judges and courts, the Public Prosecutor’s Office or the competent Public Administrations, in particular the data protection authorities, for the enforcement of any potential liabilities arising from the processing. This will only be for the limited time period established.

Legitimation

The controller is entitled to process personal data according to the following bases:

• In cases where it has been requested, based on the consent given by the data subject for one or more specific purposes, as stated in Article 6.1. a) of the General Personal Data Protection Regulation, when filling in the forms and ticking the box provided for this purpose.
• On the basis of executing a contract for the provision of services, as stated in Article 6.1. b) of the General Data Protection Regulation.
• On the basis of complying with a legal obligation imposed on the controller in accordance with Article 6.1.c) of the General Data Protection Regulation.
• Based on a legitimate interest for security and access control purposes in accordance with Article 6.1 f) of the General Data Protection Regulation, assessing the proportionality and relevance of such interest against the rights of data subjects.

Data source

The personal data comes from the forms filled in by the user and made available by the data controller and from the service contracts signed with the law firm.

If the user provides data from third parties, they shall guarantee that their use is lawful and will be liable for any damages that may arise, with AMALA AI being exempt from any related liability.

Data accuracy

Furthermore, we will try to keep all the data contained in our files (computer and/or paper) up to date to ensure they always correspond to the current situation. Therefore, for this purpose, the user must make any changes directly, when this is possible, or by contacting the controller’s department or the corresponding area, using a reliable means of communication.

Addressees

The personal data you provide to the data controller may be communicated to the following categories of recipients:

• Third parties to whom the firm is obliged to transmit information, such as public authorities, in order to comply with the requirements of such authorities and the applicable regulations, as the case may be.
• Collaborating companies, whenever necessary, in order to provide the required services. The legitimate interest in this case is the execution of a contract or pre-contractual measures (art. 6.1.b. GDPR).
• Companies that provide computer support or manage the firm’s electronic communications, for the specific purpose for which the user’s consent was obtained. 

Amala AI Legal Consultants Srl does not market, sell or perform any similar activity with your personal data, it only processes your personal data for the purposes indicated and for the data controller’s use. 

User Rights

However, the interested party of the personal data may in any case exercise the rights to which they are entitled, in accordance with the General Data Protection Regulation, which are as follows:

• The right to request access to personal data relating to the data subject;
• The right to request its rectification or deletion;
• The right to request restriction of their processing;
• The right to object to processing;
• The right to data portability.

The interested party may exercise these rights by sending a request accompanied by a copy of their ID card, specifying which of these rights they want to exercise, to the data controller at this address: Calle Francisco Vitoria 19, Madrid, 28007 or by e-mail to info@amalaai.com.

Privacy Policy Updates

Our Privacy Policy may be updated from time to time, and we reserve the right to modify or adapt this Privacy Policy at any time. When we do so, we will post the updated policy on our website. We recommend that you review this Policy and all Legal Policies or Notices regularly or when you access this website, to ensure you are fully informed about how and for what purpose we use your personal data, and to be aware of any changes to the type of data that are collected and the purpose for which they are collected. 

Subject to applicable law, all changes will be effective as soon as we post the new Privacy Policy, but where we have already collected information from you and/or where legally required, we will take additional steps to inform you of any material changes to our Privacy Policy and may ask you to agree to these changes.

At AMALA AI we are aware of your privacy rights and of regulatory compliance, so if you have any questions or comments, please do not hesitate to contact us at info@amalaai.com.

 If you consider that your right to the protection of personal data has been violated, you may file a complaint with the Spanish Data Protection Agency. http://www.aepd.es/.