Zertify Privacy Policy
1. Identification of the Data Controller
In compliance with Regulation (EU) 2016/679, General Data Protection Regulation (GDPR), and other applicable regulations, users are informed that the owner and data controller of personal data is:
Zertify and Comply S.L.
NIF: B75347146
Registered office: Carrer del Turia, 53, Bajo izquierda, 46008 Valencia, Spain.
Contact email: info@zertify.ai
2. Purpose of this policy
This Privacy Policy aims to inform users about how Zertify processes their personal data and technical data related to the products they introduce on the platform, within the framework of automated regulatory compliance services.
3. Types of data processed
Zertify may process the following categories of data:
- User identification data: name, surname, email address, phone number, company name, CIF/NIF.
- Technical product data: descriptions, materials, photographs, declarations, technical data sheets, applicable standards, and any other information included by the user for the generation of regulatory documentation.
- Navigation and usage data: IP address, session identifiers, activity logs on the platform, and metadata necessary to improve service quality.
Under no circumstances does Zertify access or process specially protected data within the meaning of Article 9 of the GDPR.
4. Purposes of processing and legal basis
The data will be processed for the following purposes, based on the execution of the contractual relationship between Zertify and the user, or on the consent granted by the user:
- To allow the use of the platform and the generation of technical documentation in accordance with European Union regulations.
- To manage inquiries and technical support requested by the user.
- To improve the services offered through aggregated analysis of tool usage.
- To comply with applicable legal, tax, or administrative obligations.
- Where appropriate, to send commercial communications about service functionalities or updates, only with express consent.
5. Legitimacy of processing
The processing of personal data is based on:
a) The execution of the service provision contract signed through registration on the platform.
b) Compliance with applicable legal obligations.
c) The consent of the data subject in relation to commercial communications or optional functionalities.
6. Storage and security measures
Zertify stores all data on cloud servers managed by Amazon Web Services (AWS), in data centers located within the European Economic Area (EEA). AWS acts as a data processor and complies with all GDPR requirements, including standard contractual clauses for international transfers if applicable.
Zertify applies appropriate technical and organizational measures to ensure an adequate level of security, including data encryption, access control, backups, and access logging.
7. Disclosures and international transfers
Zertify does not transfer data to third parties, except in cases of legal obligation or when necessary for the correct execution of the service. No international transfers outside the EEA are foreseen unless the user expressly authorizes it and compliance with the guarantees established in the GDPR is ensured.
8. Data retention
The data will be retained as long as the user maintains an active account on the platform. Once the account is deleted, the data will be blocked and retained only for the periods required by tax or commercial regulations or for defense against claims. Navigation data may be retained in an anonymized form for statistical purposes and service improvement.
9. User rights
The user may exercise their rights of access, rectification, erasure, restriction, portability, and opposition at any time by sending their request to info@zertify.ai, including a copy of their identification document.
Likewise, they have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es) if they consider that the processing does not comply with current regulations.
10. Changes to the privacy policy
Zertify reserves the right to modify this Privacy Policy to adapt it to legislative developments or changes in the services provided. Any modification will be duly notified to users through the usual channels.
11. Use of cookies and tracking technologies
Zertify uses analytics and advertising tools such as Meta Pixel to measure campaign effectiveness, optimize user experience, and offer personalized communications. These technologies may collect information about browsing on our website (such as pages visited, conversion events, abbreviated IP address, browser or device identifiers, and technical parameters) which is then transmitted to Meta Platforms Ireland Limited.
The processing of this data is based on the consent granted through the cookie banner or manager, which you can accept, reject, or configure at any time. Without such consent, the Pixel is not activated.
In relation to these processing activities, Zertify and Meta act as joint controllers for the collection and transmission of data, under the terms of the Meta Business Tools Terms, with Meta being independently responsible for subsequent uses it makes in its systems.
International data transfers associated with these services may occur. In such cases, the guarantees provided by the GDPR apply, including the EU-US Data Privacy Framework Adequacy Decision (10/07/2023) and, where applicable, Standard Contractual Clauses.
Data will be retained as long as your consent remains in force, after which it will be deleted or anonymized. You can withdraw or modify your choice at any time from the Cookie Preference Center available in the footer.