Privacy policy

This is a translation provided for convenience. In the event of any discrepancy, the Spanish version of this document prevails.

Data controller

• Controller: Origin Intelligence & Technology, S.L.
• Tax ID (NIF/CIF): B93822245
• Registered office: Paseo de la Castellana 200, 28046 Madrid, España
• Contact email: support@originreputation.com
• Exercise of rights: adm@originreputation.com

Data we process

We process the data you provide through the diagnostic form: name, email, organization, type of organization, the issue selected, and the description of your case. We also record the date/time of submission and the originating page. We do not process special categories of data, nor do we make automated decisions that produce legal effects concerning you.

Purposes and legal basis

• Handling your request and maintaining contact in relation to it. Legal basis: steps taken at your request prior to entering into a contract, and your consent given when submitting the form (Art. 6(1)(b) and 6(1)(a) GDPR).
• Form security and abuse prevention (anti-spam, submission limits). Legal basis: our legitimate interest in protecting the service (Art. 6(1)(f) GDPR).

You may withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.

Recipients and data processors

We do not sell or transfer your data. To provide the service we rely on providers acting as data processors (Art. 28 GDPR):

• Resend — delivery of the email containing your request to Origin's inbox.
• Vercel — hosting and delivery of the website.
• Google Analytics (Google Ireland Limited and, as its parent company, Google LLC) — statistical measurement of site usage, only if you have accepted analytics cookies in the cookie notice. You may revoke that consent at any time via the "Cookie settings" link in the footer. Details of the cookies used are set out in the Cookie Policy (/legal/cookies).

International transfers

If you accept analytics cookies, Google may process data on servers located in the United States. This transfer is covered by the EU–U.S. Data Privacy Framework, in which Google LLC is a certified participant, and, in the alternative, by the European Commission's standard contractual clauses (Chapter V GDPR).

As for the remaining processors, the existence of a data processing agreement (DPA), the location of processing and, where applicable, any international transfers and their safeguards (standard contractual clauses or other Chapter V GDPR mechanisms) are pending contractual verification and will be updated in this policy. We do not assert any specific location or jurisdiction without such verification.

Retention

We retain form data for as long as necessary to handle your request and any relationship that may arise from it, and thereafter for the periods required by law. Once those periods have elapsed, the data is deleted. You may request its deletion at any time by writing to adm@originreputation.com.

Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing, and data portability, as well as withdraw your consent, by writing to adm@originreputation.com. If you believe the processing does not comply with applicable law, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) — www.aepd.es.