Privacy Policy

1. Data controller

• Owner / Controller: CORPORA MOBILITY SL
• Tax ID (NIF/CIF): B87050159
• Registered address: C/María de Molina, 41 Madrid 28006
• Contact email: info@corporalabs.com

2. Data we process and its origin

We process personal data that the user voluntarily provides when contacting us through the contact email address published on the Website.

In general, the data processed are:

• Contact and identification data: Email address and any other identifying data that the user freely includes in their message (for example, name, surname, phone number, company or position).
• Information contained in the communication: Any enquiry, content or additional detail attached to the email sent.
• Browsing data: Data collected through analytical cookies (device and browser identifiers, pages visited and aggregated Website usage data), provided the user has given express consent.

Note: We do not collect or request special categories of personal data (Art. 9 GDPR). Please refrain from including such information in your email communications.

3. Purpose of processing

Personal data provided will be processed for the following purposes:

• Handling enquiries: Managing, processing and responding to requests for information, questions or enquiries sent to the Company by email.
• Pre-contractual and commercial management: Handling requests for proposals, information or trials regarding our B2B solutions and services requested in the message.
• Web analytics and service improvement: Analysing use of the Website to optimise the user experience and its operation, only when analytical cookies have been accepted.

4. Legal basis (legitimisation)

The legal basis that legitimises the processing of your data varies depending on the purpose:

• Legitimate interest of the Controller (Art. 6.1.f GDPR): To attend to and respond to emails and enquiries sent by users.
• Application of pre-contractual measures (Art. 6.1.b GDPR): When the email communication concerns a request for quotes, budgets or commercial information about our services.
• Consent of the data subject (Art. 6.1.a GDPR): For the use and installation of non-essential analytical and tracking cookies.

5. Data retention

Personal data will be kept for as long as strictly necessary to fulfil the purpose for which they were collected (to respond to your email) and to manage any commercial relationship that may arise.

Once the attention or relationship has ended, the data will remain duly blocked for the applicable statutory limitation periods for liabilities, after which they will be securely deleted or anonymised. Data collected by means of cookies will be kept for the periods specified in the Cookie Policy.

6. Recipients and international transfers

Personal data will not be disclosed to third parties unless required by law or in cases where it is strictly necessary for the provision of the service.

To ensure the technical and analytical operation of the Website and corporate email management, we use service providers acting as Data Processors (for example, web hosting, email or web analytics providers).

Some of these providers may be located outside the European Economic Area, which would imply an international data transfer. In such cases, these transfers are carried out with the appropriate safeguards, whether under an adequacy decision of the European Commission, the EU-US Data Privacy Framework, or through the signing of Standard Contractual Clauses approved by the European Commission.

In the particular case of Website analytics, Google Analytics is used, a service provided by Google LLC / Google Ireland Limited, whose international transfers are covered by the mechanisms mentioned. More information is available in Google's Privacy Policy (https://policies.google.com/privacy).

Note for review: please verify the location of the corporate email provider. If it is a US entity —e.g. Google Workspace or Microsoft 365—, the transfer is covered by this section; confirm with your advisor whether it should be expressly mentioned.

7. User rights

The user may exercise the following data protection rights at any time:

• Access: To know what personal data of yours we are processing.
• Rectification: To request the correction of inaccurate or incomplete data.
• Erasure ("right to be forgotten"): To request the deletion of your data when they are no longer necessary for the purposes for which they were collected.
• Objection: To object to the processing of your data based on legitimate interest.
• Restriction of processing: To request that the processing of your data be limited in certain circumstances.
• Portability: To receive your personal data in a structured and commonly used format.
• Withdrawal of consent: To revoke any consent previously given at any time.

To exercise any of these rights, the user may send a written request to info@corporalabs.com, indicating "Data Protection" in the subject line and specifying the right they wish to exercise. If there are reasonable doubts about the applicant's identity, additional information may be requested to verify it.

Likewise, if you consider that your rights have not been adequately addressed, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) through its electronic office at www.aepd.es.

8. Security measures

The Controller applies appropriate technical and organisational security measures to protect the confidentiality, integrity and availability of personal data, preventing their alteration, loss, processing or unauthorised access, in accordance with the risks assessed.