1. Data controller
- Owner: STECH INNOVATIONS, S.L.
- Tax ID (NIF): B22871149
- Registered office: Calle Baldomero Sola, núm. 124, planta 4, puerta 2, 08912 Badalona (Barcelona), Spain
- Phone: +34 669 49 03 29
- Email: info@finaro.ai
- Registration details: Barcelona Commercial Registry, volume 1000456214150, folio 1, sheet B-640271, entry 1
2. What data we process
We process the data you provide through the contact form or by email:
- Identification and contact details: name, company, work email and, if provided, phone number.
- Information about your company: the ERP it uses and its approximate supplier invoice volume.
- The content of your message.
- Browsing data, as detailed in the Cookie policy.
Please do not include third-party data or particularly sensitive information in your message.
3. Why we process it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Handling your request for information or a demo and contacting you to arrange it. | Pre-contractual measures taken at your request (Art. 6(1)(b) GDPR) and your consent when submitting the form (Art. 6(1)(a) GDPR). |
| Sending you information about Finaro related to your request. | Legitimate interest in the context of a business-to-business relationship (Art. 6(1)(f) GDPR). You can object at any time. |
| Managing the contractual relationship if you become a customer. | Performance of a contract (Art. 6(1)(b) GDPR). |
| Complying with legal obligations (tax, accounting). | Legal obligation (Art. 6(1)(c) GDPR). |
4. How long we keep it
We keep contact data while there is mutual interest in the business relationship and, at most, two years from the last contact if you do not become a customer. If you do, for the duration of the contract and then for the applicable statutory limitation periods. When no longer needed, the data is deleted or blocked.
5. Who we share it with
We do not disclose your data to third parties unless legally required. To provide the service we use providers acting as data processors, with whom we have signed the agreements required by the GDPR:
- HubSpot, Inc.: form and CRM management. Data is hosted preferably in its European Union data centre.
- Netlify, Inc.: website hosting.
Some of these providers are based in the United States. International transfers are covered by the EU-US Data Privacy Framework or, failing that, by the standard contractual clauses approved by the European Commission.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to info@finaro.ai with the subject “Data protection”. If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Security
We apply appropriate technical and organisational measures to protect your data against loss, misuse or unauthorised access.
8. Data processed in the Finaro platform
This policy covers the website. Data our customers process within the Finaro platform (invoices, delivery notes, supplier data) is processed on the customer's behalf, as a data processor, under the data processing agreement signed with each customer.
9. Changes to this policy
We may update this policy to reflect legal or service changes. The current version will always be published on this page with its update date.