Privacy policy

This Privacy policy explains how the personal data of users (hereinafter, the “User”) is collected, used and protected when they use the website https://www.autonality.ai and, where applicable, the associated application (hereinafter, jointly, the “Service”).

1. Data controller

• Controller: Autonality AI
• Address: ETOPIA Centro de Arte y Tecnología, Av. de la Cdad. de Soria, 8, 50003 Zaragoza, Spain
• Contact email: x@autonality.ai

2. Personal data we process

The types of data we may process through the Service include:

• Identification data: name, surname, email address, preferred language, etc.
• Vehicle data: make, model, year, registration number —if requested—, vehicle identification number (VIN), maintenance history, technical inspection records, etc.
• Usage data: queries made to the assistant, diagnostic records —for example, OBD codes— and account settings.
• Technical data: IP address, device identifiers, browser, access logs, always to the extent necessary to provide the Service and ensure its security.

In general, data is obtained:

• Directly from the User, when registering, completing forms or using the assistant.
• From the User’s interaction with the Service itself —for example, technical logs or diagnostics—.

3. Purposes of processing

We process personal data for the following main purposes:

• Provision of the Service: enabling the User to register and manage vehicle information, maintenance history, technical inspection records, virtual glovebox and communications with the assistant.
• User support: responding to queries, incidents and requests related to the Service.
• Service improvement: analysing platform usage in an aggregated and anonymised way to improve features, performance and security.
• Communications: sending notices related to the Service, maintenance reminders or relevant changes to the terms —never indiscriminate spam—.

4. Legal basis for processing

The legal basis that allows us to process your personal data may vary depending on the purpose:

• Performance of a contract —Art. 6.1.b GDPR—: for providing the Service and managing your user account.
• Legitimate interest —Art. 6.1.f GDPR—: to improve the Service, ensure its security or prevent abuse, always balancing your rights and freedoms.
• Consent —Art. 6.1.a GDPR—: for certain optional commercial or functional communications, and for the use of certain non-technical cookies —if any—.

5. Retention period

We will keep your personal data for as long as necessary to fulfil the purposes indicated and, subsequently, for the periods required by applicable regulations.

When the data is no longer necessary, it will be deleted or anonymised, unless there is a legal obligation to retain it.

6. Recipients and transfers

As a general rule, personal data will not be disclosed to third parties except where required by law or where necessary for the provision of the Service.

• Technology service providers —hosting, databases, email delivery, etc.— who will act as data processors.

If international data transfers are carried out, the appropriate safeguards provided by the regulations will be adopted —standard contractual clauses or other mechanisms—.

7. User rights

You may exercise your data protection rights at any time:

• Access: to know what data we process about you.
• Rectification: to request the correction of inaccurate data.
• Erasure: to request the deletion of your data when it is no longer necessary.
• Restriction: to restrict processing in certain cases.
• Objection: to object to certain processing based on legitimate interest.
• Portability: to receive your data in a structured, machine-readable format.

To exercise these rights, you can contact us at: x@autonality.ai, attaching a copy of your identity document or equivalent where necessary.

You also have the right to lodge a complaint with the competent supervisory authority. In Spain, this is the Spanish Data Protection Agency (AEPD).

8. Cookies

The use of cookies and similar technologies on the Website is described in the Cookie policy.

9. Information security

Reasonable technical and organisational measures have been adopted to protect personal data. However, no system is completely infallible.

10. Changes to this policy

This Privacy policy may be updated to reflect changes to the Service or to applicable regulations. We recommend reviewing this page periodically.