Aitaca ← Back to Aitaca

Legal

Privacy Policy

Aitaca Remote Tech S.L., Madrid, Spain

Our Privacy Policy at a glance

Who are we? We are Aitaca Remote Tech S.L., domiciled in Madrid, with NIF B-67777011, registered in the Mercantile Registry of Madrid (Volume 42738, Folio 23, inscription 1, page M-755762), hereinafter "Aitaca". We treat your personal data as data controllers, which means we are in charge of how we use and protect your data.

What data do we work with? In order to provide a good service we need, for some functionalities, certain personal and anthropometric data.

What do we use your data for? Among other purposes, to provide you with our services.

With whom do we share your data? With service providers that help or support us.

Your rights. You have the right to access, rectify or delete your personal data. In some cases you also have other rights, such as objecting to our use or transfer of your data, as explained below.

In this Privacy Policy you will find all the relevant information that applies to the use we make of our users' personal data, regardless of the channel or medium (online or in person) you use to interact with us. This Privacy Policy may be updated from time to time, so we recommend you read it again if you use our services. It also explains what rights you have as a user and how to exercise them.

We are transparent about what we do with your personal data so that you understand the implications of the uses we make of it and the rights you have in relation to your data. We make this Privacy Policy permanently available to you so you can consult it whenever you wish, and you will also find information about each processing of your personal data as you interact with us.

Some names we will use in this Privacy Policy: when we talk about our Platform, we will refer generally to any of the digital or in-person channels or means you have used to interact with us.

1. Who is responsible for the processing of your data?

Aitaca is responsible for the personal data collected through the Platform. The Platform is owned by Aitaca. You can find all our contact information in the footer of the website.

We are committed to protecting your privacy online and we want to assure you that we will use your data in a transparent and secure manner. In accordance with the provisions of the applicable data protection legislation, in particular Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), Aitaca undertakes to comply with the legislation in force on the protection of personal data and to adopt the appropriate legal, technical and organisational measures to prevent damage or loss of our customers' personal data.

2. What data do we work with?

Depending on the products, services or functionalities that you want to enjoy, we will need to process some data or others, which in general will be the following:

  • Multimedia data: photographs or screenshots you provide to use our virtual sizing services, such as ring size prediction or other personalised fitting or recommendation services. These images are processed anonymously and securely.
  • Derived anthropometric data: information calculated from the images you provide us, such as anthropometric measurements or other data related to physical characteristics. This data is used exclusively to provide you with a recommendation or a personalised adjustment and is stored anonymously in our cloud.
  • Usage and analytics data: information about how you interact with our services, which we collect using analytics tools such as PostHog to improve user experience and optimise our services: events, in-app behaviour, interactions and performance data. The data collected may include information about your device, location and usage of our platform. In no case is data about the users recorded.

It is important to note that none of the data we work with contains information that would directly identify an individual.

3. For what purpose do we process your personal data?

We process your personal data for the sole purpose of providing you with personalised and accurate services, as well as to continuously improve the quality of our services. In particular, we use your data to:

  • Service Provision: when you use our size recommendation service, you provide us with an image. This image is processed by advanced algorithms to suggest a size for you. This process is done anonymously.
  • Improved User Experience: the data collected through our analytics tool is used to improve the functionality of our service, optimise user experience, detect and correct errors, and perform statistical and behavioural analysis.

4. How long will we keep your data?

The period of conservation of your data will be the minimum necessary to meet the request and future needs as explained below:

Type of dataData retention period
Anonymous images The photographs you provide are processed immediately and transformed into irreversibly anonymised images, which means they cannot be used to identify you. These images are retained only for as long as needed to carry out technical improvements, internal audits, or to validate the correct functioning of our AI models.
Derived data The data resulting from the processing is anonymised and is stored for service improvement, research and development purposes. Since this data does not allow us to identify an individual, it is not subject to a mandatory deletion period.
Usage and analytics data Information collected through analytics tools is stored in aggregated and anonymous form to analyse trends, detect issues, and optimise the service. This type of data may be retained for long-term analysis, provided that no user can be identified at any point.

Conservation Exceptions: in some cases, our customers (business partners) may request data retention for a different period, either longer or shorter, depending on their specific business or regulatory needs. When these special retention periods are agreed, we ensure that any extension or shortening of the time period complies with all applicable data protection regulations and that the user's rights are respected at all times.

In all cases, our aim is to ensure that data is retained only for as long as is strictly necessary and is securely deleted when no longer required. Regardless of the fact that we process your data for the time strictly necessary to fulfil the corresponding purpose, we will subsequently keep them duly stored and protected for as long as liabilities arising from the processing may arise, in compliance with the regulations in force at any given time. Once the possible actions in each case are prescribed, we will proceed to the deletion of personal data.

If you have agreed to be part of a group of "test users", we will process your data until you unsubscribe or cancel your "test users" status.

5. Will we share your data with third parties?

Aitaca will not transfer the personal data of the Users to any third party without a legal basis that legitimises such treatment. This means that we will not share your personal data with third parties except:

  • When we are legally obliged to do so, we may communicate your data to the authorities and entities that require us to do so.
  • For the correct provision of the services requested by the User. Aitaca's data processors — that is, service providers who have to access your personal data in order to perform the functions for which they were hired — may have access to your personal data.

In addition, we would like to inform you that with these service providers we sign agreements that cover all appropriate security measures to ensure the protection of your data in accordance with the applicable data protection regulations. Our data processor is Amazon Web Services (Amazon.com, Inc.), a U.S. company under the Privacy Shield adequacy decision, so that the processing of all the data it manages is adequate and in accordance with the guidelines of the GDPR. You can access their privacy policies at aws.amazon.com/privacy.

All the data we process is stored and handled on Amazon Web Services (AWS) servers located in Ireland. This means your data remains within the European Economic Area (EEA), ensuring that it is subject to the strict data protection regulations of the European Union, including the General Data Protection Regulation (GDPR). We do not transfer data internationally outside the EEA.

6. What are your rights when you provide us with your data?

We undertake to respect the confidentiality of your personal data and to guarantee you the exercise of your rights, which you can exercise by sending us an email to legal@aitaca.io, simply indicating the reason for your request and the right you wish to exercise. In case we consider it necessary to identify you, we may ask you for a copy of a document proving your identity.

We may also offer you the opportunity to exercise your rights and configure your privacy preferences when using some of our services, or by making available to you specific channels within our Platform.

In particular, regardless of the purpose or legal basis under which we process your data, you have the right to:

  • Ask us for access to the information we have about you. We remind you that we do not know who you are, since your data is anonymous to us.
  • Ask us to delete your data to the extent that it is no longer necessary for the purpose for which we need to treat it as we have informed you above, or that we no longer have the legitimacy to do so. Remember that we do not know who you are, and that we delete all data automatically as explained in section 4.
  • Withdraw your consent at any time, if you have provided it for the processing of your data for any purpose. Some of the ways in which you can withdraw your consent are explained in section 3, where we explain the purposes for which we process your data.

Where we are entitled to process your data on the basis of your consent or for the performance of the contract, you also have the right to request portability of your personal data. This means that you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, so that it can be transmitted to another entity directly, where technically possible.

Finally, you have the right to lodge a complaint with the relevant data protection supervisory authority, in particular with the Spanish Data Protection Agency: www.agpd.es.

Updating Privacy Policy

This privacy policy may be updated from time to time to reflect changes to our services or applicable legal regulations. In the event of significant changes, we will notify users through a conspicuous notice on our platform or by other appropriate means before such changes become effective. We encourage you to review this policy regularly to stay informed about how we are protecting your information.

Privacy Policy Cookie Policy Terms of Use

© 2026 Aitaca Remote Tech S.L. All rights reserved.