Privacy policy - Databitat

1. Data controller

The controller for the personal data processed through Databitat is Emissions SL, tax ID B64740145, with registered address at Carrer Provença 339, 08037 Barcelona, Spain.

If you need to make a privacy-related inquiry or exercise your rights, you may contact Emissions SL by post at this address or through the contact channels enabled within the service.

2. Data we may process

Identification and contact data

First name, last name, and email address associated with the account.

Authentication and security data

Information needed to sign in and protect access, such as active sessions, technical sign-in data, passkey usage, and federated authentication identifiers if you choose Google or Apple.

Usage and log data

Basic information about how the service is used, such as IP address, device, browser, session context, last activity, or technical records linked to security and operations.

Content and files

Documents, messages, cards, comments, files, space information, and other content that you choose to upload, create, or share in Databitat.

Preferences

Language, visual theme, and other settings needed to personalize the user experience.

Data from assisted features

If you use AI or contextual assistance features, the content needed to generate responses, classifications, summaries, or structured information may be processed.

3. Purposes and legal bases

Create and maintain your account

We process the data needed to register you, authenticate you, allow access to the service, and maintain your profile. The legal basis is the performance of the contractual relationship or pre-contractual steps.

Operate the application and collaborative spaces

We use data to display content, manage permissions, share information among space members, and support Databitat's core functionality. The legal basis is the performance of the contract.

Security, abuse prevention, and traceability

Certain technical and log data are processed to prevent unauthorized access, detect incidents, and maintain the integrity of the service. The legal basis is Emissions SL's legitimate interest in protecting the platform and its users.

Operational communications

We may send emails strictly related to access, account verification, invitations, security notices, or other communications necessary to provide the service. The legal basis is the performance of the contract and, where applicable, compliance with legal obligations.

Optional features integrated with third parties

When you choose to sign in with Google or Apple, share content with other people, use maps or suggested addresses, or use AI features, the related processing is based on your request and the provision of the service.

Legal compliance and claims handling

We may also retain or process data when necessary to comply with legal obligations, respond to requests from competent authorities, or establish, exercise, or defend legal claims.

4. Recipients, processors, and transfers

Databitat does not sell personal data. However, some data may be accessible to providers acting on behalf of Emissions SL in order to make the service available.

Depending on the features you use, we may rely on third-party services for transactional email delivery, federated authentication, artificial intelligence assistance, technical infrastructure, storage, or map and address suggestion features.

Where a feature involves providers located outside the European Economic Area, Emissions SL will seek to ensure that appropriate safeguards are in place under applicable law, such as standard contractual clauses or other valid transfer mechanisms.

Transactional email providers needed to send magic links, verification messages, or service notifications.
Google or Apple, only if you choose those authentication methods.
AI providers used to generate assisted responses or structured analysis when you use those features.
Map or address providers, if you use autocomplete fields or geographic services.
Other users or recipients that you specifically choose when you share content, generate invitations, or publish in collaborative spaces.

5. Retention periods

Account and profile data are kept while your relationship with Databitat remains active and for the time needed to address potential legal liabilities.
Session and security log data are kept for as long as needed to protect the service, investigate incidents, and apply internal security policies.
Content, files, and messages are retained while they remain part of Databitat spaces or workflows, except where deletion, legal blocking, or another applicable restriction applies.
Where the law requires specific retention periods, data will be kept for those periods and then deleted or anonymized where possible.

6. User rights

You may request access to your personal data, rectification of inaccurate data, erasure, restriction of processing, portability, or objection, in accordance with applicable law.

You may also withdraw consent where processing is based on consent, without affecting the lawfulness of prior processing.

If you believe the processing is not compliant with the law, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).

Access the information we keep about you.
Correct inaccurate or incomplete data.
Request deletion when the data are no longer necessary.
Request restriction or object to certain processing operations.
Receive or transfer the data in a structured format where applicable.

7. Security and responsible use

Emissions SL applies reasonable technical and organizational measures to protect the confidentiality, integrity, and availability of the data processed in Databitat.

However, no system is completely invulnerable. We recommend protecting your sign-in methods, reviewing active sessions, and sharing information only with the appropriate people and spaces.

Databitat is not specifically directed to minors without the appropriate supervision or authorization where required.