Omniloy

Privacy Policy

At OMNILOY S.L., hereinafter THE CONTROLLER or OMNILOY, we aim to offer you the best possible experience through our services and products. To do this, and in some cases, it is necessary to collect information to achieve this. We care about your privacy and believe in transparency regarding the use of the data you provide to us.

Therefore, for the purposes of the REGULATION (EU) 2016/679, OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 (hereinafter GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and also for the purposes of LAW 3472002, of 11 July of Information Society Services and Electronic Commerce (hereinafter LSSI), THE CONTROLLER informs the user that, as the data controller, it will incorporate the personal data provided by users into an automated file owned by it.

OMNILOY's Privacy and Data Protection Policy contributes to and seeks to guarantee the security of personal data and prevent the alteration, loss, processing or unauthorized access to them.

Basic information on data protection

Below is information about OMNILOY's data protection policy:

‍

• Controller:

It is responsible for processing of all data collected from data subjects in the exercise of their business functions, which are carried out in accordance with the criteria and limitations established by Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ( General Data Protection Regulation, GDPR or GDPR).

OMNILOY is, for the purposes of the provisions of the Law, the Data Controller of Activities.

The data of the person responsible are:

Holder: OMNILOY SL (hereinafter OMNILOY)

Registered office: AVENIDA DE CATALUNYA, 11 – ENT, Postal Code 46020, VALENCIA

CIF: B75956227

Registration data: Commercial Register: S 8 , H V 224212, I/A 1 (12/03/2025) CVE: BORME-A-2025-54-46

E-mail (contacto DPD/DPO): legal@omniloy.com

‍

• Purposes of processing:

The personal data that you provide us with through the form on the contact page of this website, as well as those that you provide us in the future, will be incorporated into a data file owned by OMNILOY and maintained under its responsibility.

The purpose of this file is to manage OMNILOY's relationship with the users of the Website and other customers (management of web services) and to provide them with the information they request from us and the management of the services they contract from us. In addition, it will help us to keep you informed about our services (commercial communications related to our services), using the email address or other contact details provided by the user with their express consent.

The information you provide on the data collection forms is voluntary; however, if you do not provide it to us, we will not be able to provide the service to you.

It will be your obligation to keep the data updated in such a way that it corresponds to reality at all times. Any false or inaccurate statement that occurs as a result of the data provided, as well as the damages that such information may cause to OMNILOY, will be the responsibility of the user.

‍

• Data retention periods:

At OMNILOY, all data retention periods and the criteria established for it will be in accordance with current regulations.

In any case, the personal data provided will be kept for the time necessary to comply with the purpose for which they are collected and to determine the possible responsibilities that may arise from the purpose, in addition to the periods established in the regulations on archives and documentation. In addition, they will be kept for as long as there is a mutual interest in maintaining the purpose of the processing and when it is no longer necessary for this purpose, they will be deleted with appropriate security measures to ensure the pseudonymization of the data or the total destruction of the data.

‍

• Legal Basis

OMNILOY will only process your personal data in any of the following cases:

Through the free, explicit, unequivocal and informed consent of the data subject. Simple means will be enabled in this regard to be able to revoke it.

When there is a legitimate interest of OMNILOY that justifies the processing, as long as the interests, rights or freedoms of the interested parties do not prevail.

When the processing is necessary for the maintenance or compliance of a legal relationship between OMNILOY and the interested party.

When the processing or transfer responds to compliance with an obligation imposed by applicable national legislation or is carried out by an Authority or Public Administration that so requires, in the legitimate exercise of its powers, guaranteeing the right to privacy of the data subjects to the maximum.

When there are exceptional situations that endanger the life, health or safety of the interested party or other persons or groups.

‍

• Recipients

OMNILOY will only allow access to personal data to those of its administrators, collaborators or dependents who need access to personal data by reason of the activity they carry out within the framework of the contracted services.

Likewise, we inform you that, to the extent that it is strictly necessary to comply with the purposes informed, your data may be shared with other companies or

entities belonging to or linked to the Lãberit Group, the Group with which our company collaborates; for processing under their responsibility and always for the same purposes informed in this Policy. The companies or entities belonging to or linked to the Lãberit Group to which your data may be shared can be consulted on the website www.laberit.com

In addition, in the event that there is a legal obligation or requirement to do so, we may disclose your data to the competent public authorities in accordance with such legal obligation or requirement.

To ensure compliance with the provisions of the GDPR, when OMNILOY entrusts processing activities to a processor, it will only use processors who offer sufficient guarantees, in particular with regard to expertise, reliability and resources, in order to implement technical and organisational measures that meet the requirements of the GDPR, including the security of processing.

‍

• International Data Transfer

We inform you that OMNILOY does not transfer personal data to third countries or international organizations.

‍

• Use of artificial intelligence in OMNILOY

° Risk Category:

OMNILOY's AI systems are considered minimal or limited risk. No prohibited or high-risk systems are used.

° Ethical and Technical Principles:

Human supervision in relevant processes.
Non-discrimination, transparency and traceability.
Protection of fundamental rights.
Special attention to vulnerable groups.

‍

• Users' rights regarding AI

The user has the right to:

– Be informed when interacting with an AI system.

– Request explanations about automated decisions.

– Request human intervention in important decisions.

– Request correction or revision.

– Not to be subjected to automated decisions without guarantees.

‍

• Rights

Any person has the right to obtain confirmation as to whether or not OMNILOY is processing personal data concerning them.

Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which they were collected.

In certain circumstances, the interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.

In certain circumstances, and for reasons related to their particular situation, data subjects may object to the processing of their data. OMNILOY will stop processing the data, except for compelling legitimate reasons, or the exercise or defence of possible claims.

The user may exercise the aforementioned rights at any time and free of charge, by writing to the contact details established at the beginning of this privacy policy, both by post and by email.

In order to process the request to exercise rights, it will be necessary to verify the identity of the user, so said communication must include name and surname, request in which the request is specified, address for notification purposes, date, signature and photocopy of the ID card or other valid identification document.

The exercise of these rights will not affect access to the website in any way.

Depending on the right you wish to exercise, we will provide you, if you wish, with the appropriate form so that you can complete it, in accordance with the provisions of Regulation (EU) 2016/679 of 27 April 2016.

Data subjects may exercise their rights of access, rectification, deletion or blocking, limitation and opposition to the processing of their data by contacting the following email address: legal@omniloy.com

For more information on exercising rights, you can go to the website of the Spanish Data Protection Agency.

‍

• Complaint to the Supervisory Authority

If you consider that there is a problem with the way OMNILOY is processing your data, you can direct your complaints to the appropriate data protection authority, the Spanish Data Protection Agency being the one indicated in the case of Spain. The Agency's e-mail address is www.aepd.es.

‍

• Modification of the Privacy Policy

OMNILOY may modify this Privacy Policy at any time, and successive versions will be published on the Website. In any case, OMNILOY will notify users in advance of any modifications to this policy so that they can accept them.

‍

• Security Measures and Policies

OMNILOY has established a rigorous control for the correct processing of personal data, with the implementation of the necessary technological measures to guarantee its integrity and confidentiality, as well as with the establishment of a series of Policies aimed at providing the maximum guarantee of security, confidentiality and integrity of your personal data.

‍

OMNILOY:

– Minimizes and anonymizes personal data.

– It does not use biometric data or perform intrusive profiling.

– Apply advanced security measures.

– It does not transfer data outside the EU without adequate guarantees.

‍