Privacy policy
1. Data controller
| Owner | AIRES – AI Research & Engineering Studio |
| Address | C/ Tesilla 6, 39012 Santander, Cantabria, Spain |
| [email protected] | |
| Website | https://airesstudio.ai |
2. Data we collect and purposes of processing
AIRES collects only the personal data that data subjects voluntarily provide through the forms available on this website. We currently collect the following data:
2.1 Requests for reports and publications
When you request access to a report or publication from the AIRES Observatory, we collect your first and last name, email address, telephone number and, optionally, your company. We process this data for the following purposes:
- To send you the requested report or publication.
- To contact you, provided that you have given your express consent by ticking the box provided for that purpose, for any of the following purposes:
- To follow up on your request and answer any questions about the report.
- To send you new publications, reports, and analyses from the AIRES Observatory.
- To inform you about artificial intelligence advisory, audit, and implementation services.
- To invite you to events, conferences, and activities organized or promoted by AIRES.
- To share valuable content related to artificial intelligence, data strategy, and regulation.
2.2 General inquiries and contact
We use the data provided through the contact form solely to respond to your inquiry and, where applicable, to maintain any resulting communication.
3. Legal basis for processing
- Consent of the data subject (Art. 6(1)(a) GDPR): to send the requested report and, where applicable, to contact you afterwards for informational or commercial purposes. Consent is given freely, specifically, in an informed manner, and unambiguously by ticking the corresponding box. You may withdraw it at any time.
- Legitimate interest (Art. 6(1)(f) GDPR): to manage and respond to professional inquiries addressed to AIRES.
4. Retention period
We retain personal data for as long as necessary to fulfill the purpose for which it was collected and, in any case, until the data subject requests its erasure. Once that purpose has been fulfilled, the data is blocked for the periods required by law and then securely deleted.
5. Recipients
We do not disclose personal data to third parties unless required by law. To receive and manage form submissions, AIRES uses the Brevo service (Sendinblue SAS, 55 rue d'Amsterdam, 75008 Paris, France) as a data processor. Brevo operates under appropriate safeguards in accordance with the GDPR. We do not carry out international transfers of data outside the European Economic Area except under the safeguards set out in Chapter V of the GDPR.
6. Rights of data subjects
Under the GDPR and the LOPDGDD, you may exercise the following rights at any time:
- Access: to know what personal data AIRES processes about you.
- Rectification: to correct inaccurate or incomplete data.
- Erasure: to request the deletion of your data where, among other reasons, it is no longer necessary for the purposes for which it was collected.
- Restriction of processing: to request that processing be suspended in certain circumstances.
- Data portability: to receive your data in a structured, commonly used format.
- Objection: to object to the processing of your data, including processing based on legitimate interest.
- Withdrawal of consent: to withdraw the consent you have given at any time, without affecting the lawfulness of processing carried out before its withdrawal.
To exercise any of these rights, write to [email protected], stating the right you wish to exercise and enclosing a copy of your identity document. AIRES will respond within one month at the latest.
If you believe that the processing of your data does not comply with applicable law, you may lodge a complaint with the Agencia Española de Protección de Datos (the Spanish Data Protection Agency, www.aepd.es).
7. Security
AIRES applies the technical and organizational measures necessary to ensure the security of personal data and to prevent its alteration, loss, or unauthorized processing or access, taking into account the state of the art, the nature of the data stored, and the risks to which it is exposed.
8. Changes to this policy
AIRES reserves the right to update this privacy policy to reflect legislative changes or changes in the processing it carries out. The current version will always be available on this page, together with the date of its last update.