Privacy Policy

1. General

This Privacy Policy describes how Landbot processes the Users' personal information to perform the Services offered in the Website, under the domain www.landbot.io ("Services").

Users must read and expressly consent to the data treatment referred by this Privacy Policy, before using the Services.

2. Data Controller

The Controller of the data collected through this Website is HELLO UMI, S.L., entity of Spanish nationality with professional address at Barcelona, Av. Josep Tarradellas, 20, Floor 6, CP 08029, provided with Tax Identification Number ESB98767551 (hereinafter "Landbot").

3. Purposes of the Processing and Legal Basis

Landbot will process the personal data of the User of this Website for the following purposes:

  • Enable the maintenance, development and management of the Services, business relationship formalized by contracting products and/or services through this Website, which includes carrying out operations that relate to the management of customers concerning the contracts, orders, deliveries and invoices, and manage the unpaid invoices and possible disputes about the use of our products and services. The data processed for this purpose will be kept as long as said business relationship is maintained and, once it ends, during the periods of conservation and prescription of responsibilities legally established. The legal basis of the treatment is the execution of a contract in which the User is a party.
  • Respond to requests for information and/or queries made by the User. The data processed for this purpose will be kept until the request for information and/or consultation has been answered and, after that, during the legally established periods of conservation and limitation of responsibilities. The legal basis of the processing is it is the legitimate interest of Landbot in responding to the User.
  • Keep the User informed, including by electronic means, about Landbot products, services and news. The data processed for this purpose will be kept until the moment the User withdraws his consent given to receive said communications and, after that, during the legally established periods of conservation and limitation of responsibilities. The legal basis of the processing is the consent of the User.

If the User does not consent to the processing of your data for this purpose, please inform Landbot in writing, or check the box enabled for this purpose. The advertising exclusion systems set forth on the website www.aepd.es are available to the User. Failure to accept this Privacy Policy will imply that all the Services rendered and Website content offered by Landbot shall not be made available, and that the system subscription process shall be interrupted or terminated.

4. Categories of data

The User must complete all required field forms with truthful, complete and up-to-date information, except for details where completion is indicated as optional, for being strictly required by Landbot in order to be capable of complying with the beforenamed purposes. Otherwise, Landbot reserves the right to not provide the Services.

Users guarantee that the personal details given to Landbot are true, and are responsible for notifying any modification in these details, by editing the information in the platform or informing Landbot.

The data relating to bank cards are stored no longer than the time necessary to allow the fulfillment of the transaction, except in the case of a recurrent subscription, to facilitate the payment of regular customers. In that case, bank card data will be stored for the whole duration of your subscription and at least until the date at which you carry out your last transaction. Such storage is implemented by Landbot's secured payment service providers, Stripe and Braintree. By subscribing to the services offered on the Website, you expressly agree to this storage. Data relating to the visual cryptogram or CVV2 on the back of your bank card are not stored. In the case of a payment by bank card, however, data relating to the bank card may be stored as intermediary archives for evidence purposes regarding the current legal obligations.

5. Automated Decision-Making

Landbot informs the Users that by using the Services they will be object to automated decision-making, including profiling. The aim of this treatment is the adequacy of the listed purposes named herein.

6. Recipients and Personal Data Transfers

The data may be communicated to the following third party recipients:

  • Public Administrations for the fulfilment of legal obligations and to banking institutions for the management of collections and payments. The data may also be communicated to the following categories of data processors: providers of electronic communications, office automation, hosting, housing, computer maintenance, management, accounting, auditing, consultancy and legal representation. These providers may be located outside the European Economic Area, in which case Landbot will have previously adopted the appropriate safeguards.

7. Rights of the Users

Users are, at any time, entitled to exercise their rights of access, rectification, erasure, restriction of processing, data portability, not to be object to a decision based solely on automated processing, including profiling, and object, by contacting Landbot and sending a written notification to legal@landbot.io, attaching a copy of their National Identity Document or another equivalent identity document identifying them as a User.

The Users have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. The Users also have the right to lodge a complaint with a supervisory authority.

8. Landbot as data processor

In the event that the User purchases a license to use the Services, Landbot will need to process certain personal data on behalf of the licensee (whether the licensee is the User itself or a legal entity represented by the User). For these purposes, the User shall be considered the Data Controller and Landbot shall be considered the Data Processor.

8.1. Processing of data to be carried out by the Data Processor

The Data Processor shall process the personal data necessary to carry out the Services on behalf of the Controller. The aforementioned processing shall have a duration equal to that of the provision of the Services, in such a way that once the provision of the Services has been completed, the processing shall be deemed to have been completed.

8.2. Identification of the information concerned

For the performance of the Services, the Controller shall make available to the Processor the information described below:

  • Data of an identifying nature
  • Personal characteristics data
  • Data on social circumstances
  • Academic and professional data
  • Employment details
  • Economic, financial and insurance details
  • Transactions in goods and services data
  • Health data
  • Data revealing racial or ethnic origin
  • Data revealing political opinions
  • Data revealing religious or philosophical convictions
  • Data concerning sex life or sexual orientation

8.3. Obligations of the Processor

The Data Processor undertakes to:

  • Use the personal data undergoing processing, or that it collects for the purpose of their inclusion, only for the strict provision of the Services. Under no circumstances may it use the data for its own purposes.
  • Process the data in accordance with the instructions of the Controller. If the Processor considers that any instructions are in breach of the GDPR or any other Union or Member State data protection provisions, the Processor shall immediately inform the Controller thereof.
  • Where applicable, keep a written record of all categories of processing activities carried out on behalf of the Controller, in accordance with Article 30(2) of the GDPR.
  • Not to communicate the data to third parties, except with the express authorisation of the Data Controller, in the legally admissible cases.
  • Not to subcontract any of the services that form part of the Services and involve the processing of personal data.
  • Maintain the duty of secrecy with respect to the personal data to which it has access by virtue of the provision of the Services, even after the provision of the Services has ended.
  • To ensure that persons authorised to process personal data undertake, expressly and in writing, to respect confidentiality and to comply with the corresponding security measures, of which they must be duly informed.
  • Keep at the disposal of the Data Controller the documentation accrediting compliance with the obligation established in the previous section.
  • Guarantee the necessary training in the protection of personal data for the persons authorised to process personal data.

8.4. Obligations of the Data Controller

The Data Controller has the following obligations:

  • To provide or allow access to the data specified above by the Data Controller.
  • Carry out an assessment of the impact on the protection of personal data of the processing operations to be carried out by the Data Controller, where applicable.
  • Conduct prior consultation as appropriate.
  • Ensure, prior to and throughout the processing, compliance with the GDPR, the LOPDGDD and its implementing regulations by the Data Processor.
  • Supervise the processing, including carrying out inspections and audits.
  • Facilitate the right to information at the time of data collection.
  • Comply with the rest of the obligations that the RGPD, the LOPDGDD and its implementing regulations establish for the Data Controller.

9. Security and Protection of Data

Landbot has adopted the Data protection security legally required, and strives to adapt additional technical measures and means within its scope to avoid the loss, misuse, alteration, unauthorised access to and theft of the personal details provided. Landbot agrees to use all of the details sent by registered Users with the utmost confidentiality and resilience.

Landbot use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements. Google Workspace APIs are not used to develop, improve, or train generalized AI and/or ML models.

10. Changes to this Privacy Policy

Landbot reserves the right to amend this policy in order to adapt it to new regulations, case laws and industrial and/or commercial practice.

If Landbot decides to change its Privacy Policy, it will post those changes on this page. This Privacy Policy was last modified on 10/09/2024.