Privacy policy

1. Data controller

The controller of personal data collected through this website is:

Data controller: Denís Arribas Ramón
NIF: 47739640N
Trading name: Coreline
Address: Carrer de Palet i Barba 45, 08224 Terrassa, Barcelona, Spain
Contact email: thecoreline.ai@gmail.com

2. Personal data we process

Through the website's contact form, Coreline may process the following personal data:

• Name.
• Company.
• Email address.
• Telephone number.
• Country or dialling code, where applicable.
• Information voluntarily included in the message field.
• Minimal technical data associated with form submissions, where necessary for their operation, security or traceability.

Users should avoid including particularly sensitive information, confidential company information or third parties' personal data that is not necessary to handle the enquiry.

3. Purposes of processing

Personal data will be processed for the following purposes:

• Handling the user's enquiry.
• Contacting the user about their enquiry.
• Understanding the context of the business or project described by the user.
• Assessing potential opportunities for improvement, automation, training, software, processes or other Coreline-related services.
• Maintaining necessary communications relating to the enquiry.
• Ensuring the proper operation, security and basic traceability of the form and website.

Coreline does not use this data to send email marketing campaigns, newsletters or unsolicited bulk commercial communications.

4. Legal basis for processing

The main legal basis for processing this data is taking steps prior to entering into a contract at the user's request, made by submitting the form or contacting Coreline.

In certain cases, legitimate interests may also provide a basis for responding to communications relating to the enquiry, maintaining website security, retaining reasonable records of contact and protecting the controller's rights and legitimate interests.

Where an applicable legal obligation exists, data may be processed to comply with that obligation.

5. Required data

Fields marked as required in the form are necessary to handle the enquiry properly and contact the user.

If the user does not provide this data, Coreline will be unable to handle the enquiry adequately.

6. Recipients of data

Data will not be disclosed to third parties, except where legally required or where necessary to handle the enquiry through technology providers that supply services to Coreline.

In particular, providers required for website operation, form submissions, hosting, email and the technical management of communications may have access to the data.

The website may currently use third-party services such as FormSubmit for form submissions and Google/Gmail for receiving and managing messages.

These providers should only process data to the extent necessary to deliver their services.

7. International transfers

Some technology providers used to operate the website, form or email may be located outside the European Economic Area or process data from third countries.

Where international data transfers take place, Coreline will seek to ensure that they are carried out under the safeguards provided for in applicable legislation, such as adequacy decisions, standard contractual clauses or other valid mechanisms under the GDPR.

8. Retention period

Data will be retained for as long as necessary to handle the enquiry and maintain related communications.

If no business or professional relationship ultimately begins, data may be retained for an indicative maximum period of 12 months from the last contact, unless the user requests earlier deletion or a legal obligation requires longer retention.

Where a contractual or pre-contractual relationship exists, data may be retained for the periods necessary to manage that relationship and address potential legal liabilities.

9. Your rights

Users may exercise the following rights:

• Access to their personal data.
• Rectification of inaccurate data.
• Erasure of their data.
• Objection to processing.
• Restriction of processing.
• Data portability, where applicable.

To exercise these rights, users may write to:

thecoreline.ai@gmail.com

The request must clearly state which right the user wishes to exercise and allow the applicant to be reasonably identified.

Users also have the right to lodge a complaint with the Spanish Data Protection Agency if they believe that their data is not being processed in accordance with applicable legislation.

10. Data security

Coreline will apply reasonable measures to protect personal data against unauthorised access, loss, alteration, misuse or unauthorised disclosure.

However, no internet-connected system can guarantee absolute security. Users should therefore avoid sending sensitive, confidential or unnecessary information through the form.

11. Minors

This website is intended for businesses, professionals and adult users. Minors must not submit personal data through the form without the permission of their parents, guardians or legal representatives.

12. Automated decisions

Coreline does not make automated decisions that have legal or similarly significant effects on users based on data submitted through the form.

13. Changes to this privacy policy

Coreline may update this Privacy Policy to reflect legal, technical or organisational changes. The current version will be the one published on this website at any given time.

14. Website analytics with consent

If you accept analytics, we use Google Analytics 4 through the manually installed Google tag, with the identifier G-ND97TNEDBE, to understand and improve website usage. The legal basis for this processing is your consent, which you may withdraw through Cookie preferences without affecting the handling of your enquiry.

The service is provided by Google Ireland Limited. Online identifiers, device and browser information, pages visited, referral sources and browsing events may be processed. Data entered in the form is not sent to Analytics. We do not enable advertising features or use this information for newsletters.

Consent preferences are retained for up to 180 days. Analytics cookies have a default maximum lifetime of 2 years. Event data retention depends on the Analytics property's settings; Coreline must limit it to what is necessary for this purpose.

Google may process data and make international transfers under the applicable mechanisms described in its information on transfers. You can find more details and manage your choice in the Cookie policy. The rights set out in this policy also apply to this processing.