Privacy Policy

Loiale, a brand of Celerity Software, S.L. ("Loiale", "we", "us") respects your privacy and is committed to protecting the personal data we hold about you. This policy (the "Privacy Policy") explains how we collect, use, share and process personal data in connection with your use of our website at loiale.com (the "Site"), our advisory and build services ("Services") and our interactions with you at meetings, calls, events and other offline sales and marketing activities. For information on cookies and similar technologies, see our Cookie Policy.

The terms "personal information" or "personal data" mean any information relating to an identified or identifiable individual, such as name, business email, role, IP address or information gathered through your interactions with us.

1. Scope of this Privacy Policy

This Privacy Policy applies when Loiale is the data controller for personal data of:

• visitors and users of the Site;
• customers, prospective customers and their representatives;
• attendees of Loiale events, workshops and calls;
• subscribers to Loiale newsletters, reports and updates; and
• suppliers, service providers, business partners and their representatives.

This Privacy Policy does not apply to data our clients upload into the tools we build or operate for them. For such data Loiale acts as a data processor on behalf of the client (the controller), governed by a separate Data Processing Agreement. Rights requests concerning that data will be forwarded to the relevant controller.

2. What information does Loiale collect

2.1. Information you provide to us. Contact and account information (name, business email, company, role), communication information (form submissions, emails, support requests, demo and audit requests), testimonials and marketing preferences.

2.2. Information we automatically collect. Log data (IP address, browser type, timestamps, pages viewed), device information (operating system, device identifiers), usage data (Site events, features used, session duration) and cookies as described in the Cookie Policy.

2.3. Information from third parties. We may receive information about you from our clients, event organisers, security providers and marketing vendors, and combine it with information we collect from you.

2.4. Aggregated information. We may aggregate personal data and use it to analyse the effectiveness of the Site and Services. Aggregated information does not identify you and may be shared with third parties.

3. How we use your personal data

Loiale uses personal data for the following purposes and on the following legal bases under the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR"):

• Provide and administer the Site and Services — performance of a contract (Art. 6(1)(b) GDPR) or legitimate interest (Art. 6(1)(f) GDPR).
• Respond to sales, audit and demo requests — pre-contractual measures at your request (Art. 6(1)(b) GDPR).
• Analytics and product improvement — your consent where required (Art. 6(1)(a) GDPR) or legitimate interest (Art. 6(1)(f) GDPR).
• Marketing communications — your consent (Art. 6(1)(a) GDPR) or the soft opt-in for existing customers permitted under applicable e-privacy rules.
• Network and information security, fraud prevention — legitimate interest (Art. 6(1)(f) GDPR).
• Compliance with legal obligations — Art. 6(1)(c) GDPR.

4. Sharing your personal data

We share personal data with the following categories of recipients:

• vetted service providers acting as processors (cloud hosting, email delivery, analytics, CRM);
• professional advisers (lawyers, auditors, accountants) bound by confidentiality;
• public authorities, when required by law or to protect our legal rights.

We do not sell personal data.

5. International transfers

Where personal data is transferred outside the European Economic Area, we rely on the European Commission's Standard Contractual Clauses (Decision (EU) 2021/914) together with supplementary technical and organisational measures where required. Where applicable, we also rely on the EU–US Data Privacy Framework. A copy of the relevant transfer mechanism is available on request at privacy@loiale.com.

6. Retention

We keep personal data only for as long as necessary for the purposes described above, plus any period required by law. Client and prospect contact data is retained for the duration of the commercial relationship and up to 24 months after the last interaction; marketing contact data is deleted or anonymised on opt-out; log and usage data is retained for up to 24 months.

7. Your rights

You have the right, subject to the conditions of the GDPR and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights ("LOPDGDD"), to (i) access your personal data, (ii) rectify inaccurate data, (iii) request erasure, (iv) restrict or object to processing, (v) data portability, and (vi) withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, contact privacy@loiale.com. You may also lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, aepd.es).

8. Security

Loiale applies technical and organisational measures aligned with industry standards, including encryption in transit and at rest, least-privilege access, network segmentation, continuous monitoring and secure software development practices.

9. Controller

The controller responsible for personal data processed under this Privacy Policy is Celerity Software, S.L., trading as Loiale, with registered office in Barcelona, Spain. Contact for privacy matters: privacy@loiale.com.

10. Changes to this Privacy Policy

We will update this Privacy Policy when our practices change. Material changes will be notified in advance through the Site or by email before they take effect.