Privacy Policy

Last updated: August 2026

This is a courtesy translation. In the event of any discrepancy, the Spanish version prevails.

At EmkenIA we take privacy seriously. This policy explains, clearly and without jargon, what personal data we collect, what we use it for and what rights you have over it, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD).

1. Who is the data controller?

2. What data do we collect and where does it come from?

We only process the data you voluntarily provide through the contact form on this website, plus some minimal technical data that is generated automatically when you submit it.

We do not collect special categories of data (health, ideology, religion, trade union membership, sexual orientation, biometric data or any other sensitive data). We ask you not to include such information in the message field.

3. What do we use your data for?

• To handle your enquiry and reply to you.
• To prepare and send you the free Digital Analysis you requested.
• To prepare a personalised quote if you ask for one.
• To maintain contact during the business process arising from your request.

We do not send newsletters or bulk marketing communications, and we do not use your data for any purpose other than the one that prompted your contact.

4. What is the legal basis for processing?

The legal basis is your explicit consent (Art. 6.1.a GDPR), which you give by ticking the acceptance checkbox before submitting the form. You can withdraw it at any time by writing to hola@emkenia.com, without affecting the lawfulness of processing prior to withdrawal.

If we enter into a contractual relationship, the legal basis for processing the necessary data becomes performance of the contract (Art. 6.1.b GDPR) and compliance with legal obligations in tax and accounting matters (Art. 6.1.c GDPR).

5. How long do we keep your data?

• If we don't end up working together: we keep your data for a maximum of 12 months from the last contact, and then delete it.
• If you become a client: we keep it for the duration of the relationship and, once it ends, for the legally required limitation periods (up to 6 years for commercial and tax documentation, as required by the Spanish Commercial Code and the General Tax Law).
• If you withdraw your consent: we delete it immediately, except for data we are legally required to retain.

6. Who else can access your data?

We do not sell, rent or transfer your data to third parties for commercial purposes. Never.

The only third parties who may access them are the service providers we need to operate, acting as data processors and bound by contract in accordance with Article 28 of the GDPR:

• Hostinger, web hosting and email provider. Hosts this website, the hola@emkenia.com mailbox and the file where received requests are logged. Servers located in the European Union.
• Google, provider of the artificial intelligence model that generates the assistant's responses on this website. It only receives the text of conversations held with the assistant. It does not receive your name, email or any data from the contact form.

In addition, your data may be communicated to Public Authorities and Courts when required by law.

7. The virtual assistant on this website

This website includes a conversational assistant that answers questions about our services. Here's how it works:

• It is an artificial intelligence, not a person. This is indicated in the chat window itself.
• What we process: only the text you type in the chat. We don't ask for your name or email to use it.
• Purpose: to generate the response you read on screen, and nothing else.
• Legal basis: our legitimate interest in answering enquiries from website visitors (Art. 6.1.f GDPR). Using the assistant is entirely voluntary: if you prefer not to, you have the contact form and email.
• Retention: the conversation exists only in your browser while the window is open and disappears when you close it. We do not store it on our servers or associate it with your identity.
• We ask you not to write personal data in the chat — neither yours nor anyone else's — and especially not sensitive data. If you need to give us information so we can help you, use the form, which is designed for that.

The assistant's responses are for guidance and may contain errors. Nothing it says constitutes a binding offer: quotes are always provided in writing and individually.

8. Are your data transferred outside the European Union?

Contact form data, no. They are hosted on servers within the European Economic Area, along with email.

The text you type in the assistant, yes. It is processed through a Google service that may involve processing on servers outside the European Economic Area. These transfers are covered by the safeguards provided in Chapter V of the GDPR that the provider has in place. This is another reason why we ask you not to write personal data in the chat.

Your browsing, however, does not generate any request to third-party servers: fonts, graphics and the assistant itself communicate exclusively with our domain, and it is our server that then talks to the artificial intelligence provider.

9. What rights do you have?

The GDPR grants you the following rights, which you can exercise free of charge:

• Access: know what data of yours we hold and what we do with it.
• Rectification: correct inaccurate or incomplete data.
• Erasure ("right to be forgotten"): request that we delete it.
• Objection: object to processing of your data on grounds relating to your particular situation.
• Restriction: request that we suspend processing while a complaint is being resolved.
• Portability: receive your data in a structured, commonly used format, or request that we send it to another controller.
• Withdrawal of consent: at any time and without needing to justify it.

To exercise them, write to hola@emkenia.com stating which right you wish to exercise and attaching a copy of your ID or equivalent document proving your identity. We will reply within a maximum of one month.

If you believe we have not properly handled your request, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid.

10. How do we protect your data?

We apply reasonable technical and organisational measures to protect your information: the website operates entirely under an encrypted HTTPS connection, the file where requests are logged is blocked so it cannot be downloaded from the browser, and access to the hosting panel and email is protected with credentials for the exclusive use of the controller.

That said, no system is infallible. If a security breach affecting your data occurs and poses a risk to your rights, we will notify you and report it to the Spanish Data Protection Agency within the legal 72-hour deadline.

11. Minors

EmkenIA's services are aimed at professionals and businesses. We do not knowingly collect data from minors under 14 years of age. If we detect that we have received data from a minor without the consent of their legal guardians, we will delete it.

12. Changes to this policy

We may update this Privacy Policy to adapt it to legislative developments or changes in our services. The current version will always be the one published on this page, with its last update date shown above.