Privacy Policy (public website)

1. Data controller

The data controller for your personal data processed through this website (hereinafter the Website) is:

• Controller: Yuliia Kliusa Kliusa (Emplyx)
• Address: Calle Matilde Diez 10, 08195 Sant Cugat, Barcelona, Spain
• Contact: legal@emplyx.com

This Privacy Policy applies to the public Website. The processing of personal data within the Emplyx software (SaaS) is governed by specific documentation and agreements.

2. Data we may process

Depending on how you use the Website, we may process:

• Contact data: name, surname, company, job title, email, phone (e.g. when requesting information or a demo).
• Communication data: the content of your message or request.
• Technical data: IP, device/browser identifiers and security logs.
• Browsing/cookie data: according to the accepted cookie settings (see Cookie Policy).

3. Purposes and legal bases

We process your personal data for the following purposes:

• Handling requests and enquiries (e.g. contact, demo or commercial information). Legal basis: pre-contractual measures and/or legitimate interest.
• Marketing communications if you subscribe or request them. Legal basis: consent, which you may withdraw at any time.
• Security of the Website, fraud and abuse prevention. Legal basis: legitimate interest.
• Analytics and measurement via cookies/similar technologies, where applicable. Legal basis: consent for non-essential cookies.

4. Recipients and data processors

We may share or allow access to your data by providers that support our services (e.g. hosting, email, analytics, monitoring or security), acting as data processors under contract.

Additionally, we may disclose data when required by law or when necessary for the establishment, exercise or defence of legal claims.

5. International transfers

As a general rule, Emplyx endeavours to process personal data within the European Economic Area (EEA). However, some providers we use to operate the Website (e.g. analytics, messaging, security or monitoring services) may be located outside the EEA or involve access from third countries.

Where an international data transfer applies, Emplyx will ensure that a valid mechanism under the GDPR is used, such as an adequacy decision by the European Commission or appropriate safeguards (e.g. Standard Contractual Clauses) and, where applicable, supplementary measures.

You may request further information about international transfers and the safeguards applied by writing to legal@emplyx.com.

6. Retention periods

We will retain your data for as long as necessary to fulfil the purposes described (e.g. to handle your request) and, afterwards, for the periods required to address potential legal liabilities.

7. Your rights

You may exercise the rights of access, rectification, erasure, objection, restriction and portability (where applicable) by sending a request to legal@emplyx.com.

If you believe your rights have not been addressed, you may file a complaint with the Spanish Data Protection Agency (AEPD).

8. Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, loss or disclosure.

9. Changes to this policy

Emplyx may modify this Privacy Policy at any time. The current version will be the one published on the Website.