Privacy Policy

The controller of your personal data is [NOMBRE DE LA EMPRESA], with tax identification number [CIF] and registered office at [DOMICILIO SOCIAL]. Registry details: [DATOS REGISTRALES].

For any matter relating to this Privacy Policy or to the exercise of your rights, you may contact us at the email address privacidad@airealbussines.com.

[NOMBRE DE LA EMPRESA] is the entity that operates the website and platform available at airealbussines.com and determines the purposes and means of the processing described in this policy.

We process the following categories of personal data, obtained primarily from you when you register and use the platform:

Account and identification data: your first and last name or company name, and email address.

Access credentials: email and password, or the data associated with your Google account when you choose to sign in through Google's identity provider. Passwords are stored encrypted and never in plain text.

Billing and payment data: the data required to manage your subscription and recurring charges. The processing of payment data (card and transaction data) is carried out by our payment provider Stripe acting as a processor; we do not store or have access to your full card number.

Platform usage data: information about the automations you subscribe to, install or cancel, your interactions with your account, and the technical (log) and security records needed to provide and protect the service.

When you provide data on behalf of a company or a third party, you warrant that you are authorised to provide it and that the information is accurate and up to date.

We process your personal data only for the purposes set out below, each based on the legal basis indicated:

Managing your account and authentication. Creating and maintaining your account, verifying your identity and allowing you to access the platform. Legal basis: performance of the contract or pre-contractual measures taken at your request (Art. 6.1.b GDPR).

Providing the service. Allowing SMEs to subscribe to automations published by integrators and enabling those automations to be installed and run in the hosted runtime, as well as managing the fourteen-day trial period, sign-ups, terminations and cancellations. Legal basis: performance of the contract (Art. 6.1.b GDPR).

Billing and payment. Managing the recurring monthly subscription, issuing invoices, processing refunds where applicable and settling the split between the platform and the integrator through Stripe Connect. Legal basis: performance of the contract (Art. 6.1.b GDPR) and compliance with legal accounting and tax obligations (Art. 6.1.c GDPR).

Support and assistance. Handling your queries, incidents and complaints. Legal basis: performance of the contract (Art. 6.1.b GDPR) and our legitimate interest in properly managing the relationship with users (Art. 6.1.f GDPR).

Communications. Sending you service communications (notices about your account, subscription, billing or changes to the terms), which are necessary for the contractual relationship. Where applicable, sending you commercial communications about similar products or services; you may object to these at any time. Legal basis: performance of the contract for service communications (Art. 6.1.b GDPR), and your consent or our legitimate interest as applicable for commercial communications (Art. 6.1.a and 6.1.f GDPR).

Security and fraud prevention. Ensuring the security of the platform, preventing abusive use and detecting and preventing fraud. Legal basis: our legitimate interest (Art. 6.1.f GDPR) and, where applicable, compliance with legal obligations (Art. 6.1.c GDPR).

Compliance with legal obligations. Responding to requests from competent authorities and complying with the obligations imposed on us by applicable law. Legal basis: compliance with a legal obligation (Art. 6.1.c GDPR).

We do not sell your personal data or transfer it to third parties for purposes other than those described in this policy. To provide the service we rely on providers that act as processors on our behalf under contracts compliant with Article 28 GDPR:

Payment processor. Stripe Payments Europe handles the collection of subscriptions, payment information and the split between the platform and the integrator through Stripe Connect. Stripe processes payment data as a processor and, for certain regulatory aspects of the payments activity, as an independent controller under its own privacy policy.

Hosting provider. The infrastructure and the runtime in which the automations run are hosted on servers located in the European Union (Germany).

Integrators. When an SME subscribes to an automation, the integrator responsible for that automation may process the data strictly necessary to deliver and support it, within the framework and with the limitations established by our contractual relationship.

In addition, we may disclose your data to public authorities, courts and tribunals where there is a legal obligation to do so.

As a general rule, your data is processed and stored within the European Economic Area. The platform and the runtime are hosted on servers located in the European Union.

Some of our providers, such as Stripe, may process data outside the European Economic Area. In such cases, those transfers are carried out with the appropriate safeguards provided for in the GDPR, such as the Standard Contractual Clauses approved by the European Commission or adequacy decisions, so that your data continues to enjoy a level of protection equivalent to that of the European Union. You may request additional information about these safeguards at privacidad@airealbussines.com.

We keep your personal data for as long as you maintain an active account or there is a contractual relationship with us, and, once it has ended, for the periods necessary to comply with the legal obligations applicable to us and to address any liabilities arising from the processing.

In particular, billing data and documents of accounting and tax relevance are retained for the periods required by commercial and tax legislation. Data associated with your account is deleted or anonymised when it is no longer necessary for the stated purposes. Once the legal periods have elapsed, your data is irreversibly deleted or anonymised.

As a data subject, data protection law grants you the following rights:

Right of access: to know whether we process your data and to obtain a copy of it.

Right to rectification: to ask us to correct inaccurate or incomplete data.

Right to erasure: to ask us to delete your data when it is no longer necessary or when one of the circumstances provided for by law applies.

Right to object: to object to certain processing, including the sending of commercial communications and processing based on our legitimate interest.

Right to restriction of processing: to ask us to suspend the processing of your data in the cases provided for by law.

Right to data portability: to receive your data in a structured, commonly used and machine-readable format, and to transmit it to another controller where technically feasible.

Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before its withdrawal.

You may exercise these rights free of charge by writing to privacidad@airealbussines.com, indicating the right you wish to exercise. We may ask you to prove your identity to ensure that only you access your data. We will respond to your request within the legally established time limits.

If you consider that the processing of your personal data does not comply with current legislation, or that we have not adequately handled the exercise of your rights, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), located at C/ Jorge Juan, 6, 28001 Madrid, with its electronic office at sedeagpd.gob.es.

However, we would appreciate it if, before contacting the AEPD, you would get in touch with us at privacidad@airealbussines.com so that we can try to resolve any issue.

We have adopted appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 GDPR. These measures include the encryption of communications, the encrypted storage of passwords, access controls, the separation of environments and the performance of backups.

Despite our efforts, no system is completely infallible. Should a security breach occur that affects your personal data and entails a high risk to your rights and freedoms, we will notify you and report it to the supervisory authority under the terms and within the time limits required by law.

Our website uses cookies and similar technologies that may process personal data. To find out in detail which cookies we use, for what purpose and how to manage your preferences, please consult our Cookies Policy, available at airealbussines.com.

We may amend this Privacy Policy to adapt it to changes in legislation, case law or in the way we provide the service. We will publish the updated version at airealbussines.com and indicate the date of the last update. Where the changes are substantial, we will inform you through appropriate means.

This policy is governed by Spanish law. The Spanish version is the binding one; any translation is provided for information purposes only. Last updated: 15 June 2026.