On this page
1. Who is the data controller and how can you contact them?
The data controller for this website is , with its address at .
You can contact them by email at .
2. What data is collected?
We collect data automatically through the cookies we place on your device, which are technical and security cookies. We also collect the IP address you connect from, the type of device you use and its features, the operating system version, the type of browser, the language, the date, the country, the time of the request, the address you come from, the address you go to or the mobile network you use, among others.
The user gives us some information voluntarily, such as their name, email, the texts and images they check, or their payment details, in order to contact us, sign up for the service or buy a subscription.
3. What is the data collected used for?
The Service uses the data collected, among other things, to manage and update the service, check your texts and images and show you the result, answer your requests, send you emails about the Service and your account, including reminders and promotional offers, manage your registration on the platform, manage and provide the services related to your subscription, process your payments and issue the corresponding invoices, keep the Service secure, investigate illegal activities, enforce our terms and conditions and help the security forces in their investigations.
4. How long is it kept?
Aggregated data is kept without a deletion period.
Your documents (texts, files and images) are kept until the trial ends, after paying for it, or, with the monthly plan, until you delete them or close your account.
Customer data is kept for the minimum time necessary and may be kept for up to:
- 5 years, under article 1964 of the Spanish Civil Code (personal actions without a special term).
- 6 years, under article 30 of the Spanish Commercial Code (accounting books or invoices, for example).
User data is kept for a maximum of 12 months in order to handle their requests.
5. What are your rights as a user?
Right of access: the data subject has the right to obtain confirmation from the data controller as to whether or not personal data concerning them is being processed.
Right to rectification: the data subject has the right to obtain from the data controller, without undue delay, the rectification of inaccurate personal data concerning them. The data subject also has the right to have incomplete personal data completed, including by means of a supplementary statement.
Right to erasure: the data subject has the right to obtain from the data controller, without undue delay, the erasure of personal data concerning them.
Right to restriction of processing: the data subject has the right to obtain from the controller the restriction of the processing of their data, in two cases:
- When they contest the accuracy of their personal data, for a period that allows the controller to verify it; and
- When they have objected to the processing of their personal data that the controller carries out on the basis of a legitimate interest or a task in the public interest, while the controller verifies whether those grounds override theirs.
Right to data portability: the data subject has the right to receive the personal data concerning them that they have provided to a data controller, in a structured, commonly used and machine-readable format, and to transmit it to another controller without hindrance from the controller to which it was provided.
In this sense, the data subject has the right to have their personal data transmitted directly from one controller to another, where technically possible.
6. How can you exercise your rights?
You can exercise your personal data rights at any time by emailing or by writing to . In both cases, you must identify yourself with your name and surname and, if necessary, a copy of your identity card or passport.
In addition, if you believe there is a problem with the way AIScanly is handling your data, you can send your complaint to the corresponding data protection authority, which in Spain is the Spanish Data Protection Agency.
7. Are security measures taken?
The Service takes all the technical and organizational measures necessary to protect the security and integrity of the personal and non-personal information collected, both against unauthorized access and against its accidental alteration, loss or destruction.
In any case, the Service cannot guarantee the absolute security of the information collected, so you must cooperate and use common sense about the information you share at all times.
You understand and accept that, even after it has been deleted, personal and non-personal information may remain visible in cache or if other users have copied or stored it.
8. Is personal data transferred, including outside the EU?
We do not sell or transfer your data. However, some third parties manage part of the Service, and we require them to comply with our Privacy Policy as far as it applies to them, in addition to having their own. These third parties are service providers that perform functions on our behalf, such as payments, hosting, sending emails or checking and rewriting texts and images.
Some of these providers are located outside the European Economic Area, for example in the United States. In those cases, the data is transferred with the safeguards required by the GDPR, such as an adequacy decision of the European Commission or its standard contractual clauses.
We will also share data if we believe it is reasonably necessary to comply with any law, legal process or legitimate interest. In any case, we will only provide the information strictly required.