Legal

Privacy policy

Reviewed and published on 22 May 2026

Basic information

Data controller
ORBIO AI, S.L. (Orbio AI)
Tax ID
B75890533
Address
María de Molina 39, Floor 3 (28006) Madrid
Data Protection Officer
dpo@orbio.work

Purposes of personal data processing

  • Managing and maintaining the commercial relationship.
  • Addressing information requests.
  • Sending commercial communications, always through Orbio AI.
  • Managing user data in case they have accessed through social networks.

Data retention periods

Data will be kept as long as the contractual relationship is maintained, as long as the data subject does not request deletion, or as long as they should not be deleted due to the need to comply with a legal obligation or for the formulation, exercise, and defense of claims.

Origin

Provided by the user.

Legal basis

  • The execution of the contract and the adoption of pre-contractual measures.
  • Orbio AI’s legal obligations.
  • User consent.
  • Our legitimate interest.

Recipients of data transfers

All data transfers are necessary for the fulfillment of the purposes indicated above, or they are carried out in compliance with a legal obligation. Public administrations, service providers for the provision of requested services, collaborating companies and entities.

Exercisable rights

Rights can be exercised by email: dpo@orbio.work; or at Orbio AI’s registered office: María de Molina 39, Floor 3 (28006) Madrid.

We inform you that you can exercise, where appropriate, the rights of access, rectification or deletion, limitation of processing, opposition, data portability or not to be subject to a decision based solely on automated processing, as well as to withdraw the consent given.

You can file complaints with the Spanish Data Protection Agency: www.aepd.es, Spain’s Control Authority on data protection matters.

More information in the complete Privacy Policy below.

Who is responsible for processing the data?

ORBIO AI, S.L. (Orbio AI) is responsible for processing your personal data for the purpose of providing you with the services identified in this privacy policy.

Orbio AI is a company domiciled at María de Molina 39, Floor 3 (28006) Madrid, and its Tax ID number is B75890533.

At Orbio AI, we are committed to the fundamental right to the protection of your personal data, and this privacy policy aims to inform you about your rights under the General Data Protection Regulation (“GDPR”).

We inform you that Orbio AI has a Data Protection Officer in accordance with the GDPR, available to you for any questions or queries regarding the processing of your data, whom you can contact through the address dpo@orbio.work.

What information do we process?

We collect information about you when you contact us through the channels enabled for this purpose, such as contact forms to work with us and to join the team.

When you contact us through these channels, we will request your name and surname, email address, phone number, professional data, and the query you send us.

Where users provide a mobile phone number through these channels, we may process it to send SMS communications related to the recruitment process (e.g., interview scheduling, application status). Mobile phone numbers and SMS opt-in consent will not be shared with third parties. Text messaging originator opt-in data and consent will not be shared with any third parties, except as necessary to deliver messaging services or as required by law.

When providing any data that may be requested in the channels, you may not choose expressions that are injurious, coincident with trademarks, commercial names, names or pseudonyms of public figures or celebrities for which you are not authorized to use.

To ensure that the information provided is always up-to-date and error-free, you must communicate to Orbio AI, as soon as possible, any modifications to your personal data.

Likewise, by clicking on the “I Accept” button (or equivalent) incorporated in the aforementioned forms, you declare that the information and data you have provided is accurate and truthful.

What is the origin of the data?

We consider that all data processed by Orbio AI has been freely provided by you.

In the event that the personal data provided belongs to a third party, you guarantee that you have informed them of this Privacy Policy and have obtained their authorization to provide the data to Orbio AI for the purposes indicated above. Similarly, you guarantee that the data provided is accurate and up-to-date, and you are responsible for any damage, direct or indirect, that might result from the breach of this obligation.

For what purpose and on what legal basis do we process the data?

Orbio AI acts as the data controller for the following purposes and in accordance with the following legal bases:

Based on the management of the contractual or pre-contractual relationship:

  • To provide you with the services you have requested and address your information requests, as well as facilitate the exercise of your rights.

Based on compliance with Orbio AI’s legal obligations:

  • To allow website users to exercise their rights.
  • To comply with regulations applicable to Orbio AI.

Based on the explicit, free, and unequivocal consent that you may grant us when collecting your data:

  • Where applicable, to keep you informed about our own or third-party products and services, always sent through Orbio AI by electronic means.

Based on the existence of a legitimate interest on the part of Orbio AI:

  • To keep you informed about Orbio AI’s products and services related to those previously contracted and that may be of interest to you.
  • To conduct periodic reviews of our services and carry out satisfaction surveys to evaluate and improve the quality of the service we provide.
  • To carry out internal reviews and, if necessary, contact the customer in the event that fraud or identity theft is detected or there are well-founded suspicions in relation to it.

However, if you do not want your data to be processed for these purposes, you can object at any time by contacting us through dpo@orbio.work as indicated in the Exercise of Rights section of this Privacy Policy.

Who is your data shared with?

All personal data transfers we make are necessary for the fulfillment of the purposes indicated, or they are carried out to comply with a legal obligation:

  • To the competent Public Administrations and the Justice Administration, and to law enforcement agencies in compliance with the legal obligations that apply to us.
  • Companies providing IT services, tools, or IT infrastructure on which the services that Orbio AI provides are based, such as hosting providers, CRMs, LLMs, email service companies, etc.

In this regard, we inform you that any transfer that takes place will be carried out taking into account all necessary legal safeguards. Likewise, we guarantee that we sign specific contracts with all our service providers as established by the regulations.

Similarly, Orbio AI guarantees that in case there are providers located in countries outside the European Union or others not considered adequate in accordance with data protection regulations, the necessary precautions are taken to ensure that the data can be transferred securely, either because the provider offers adequate guarantees, through, among others, the signing of Standard Contractual Clauses of the European Commission, or because one of the exceptions included in the regulations is met.

SMS/Text communications

Where you provide a mobile phone number, Orbio AI may send you SMS/RCS text messages related to your recruitment process, such as screening questions, interview scheduling, and application status updates. Message and data rates may apply. Message frequency varies. You may opt out at any time: reply STOP to cancel. Reply HELP for help, or contact us at tech@orbio.work.

We do not sell, rent, or share your mobile phone number or SMS consent data with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except as necessary to deliver messaging services or as required by law.

Exercise of your rights

We inform you that you can exercise the following rights:

  • Right of access to your personal data to know which data is being processed and the processing operations carried out with it.
  • Right to rectification of any inaccurate personal data.
  • Right to erasure of your personal data, when this is possible.
  • Right to request the limitation of processing of your personal data when the accuracy, legality, or necessity of data processing is doubtful, in which case, we may retain the data for the exercise or defense of claims.
  • Right to object to automated decision-making, including profiling.
  • Right to object to the processing of your personal data when the legal basis that enables us to process it, as per section 4 above, is legitimate interest.
  • Right to data portability, when the legal basis that enables us to process it from those indicated in section 4 above is the existence of a contractual relationship or your consent.
  • Right to withdraw consent given to Orbio AI.

You can exercise your rights at any time and free of charge in the following ways:

  • By sending an email to dpo@orbio.work from the email address with which you registered for our services and indicating the right you wish to exercise.
  • By sending a written request to the address María de Molina 39, Floor 3 (28006) Madrid, indicating the right you wish to exercise.

Additionally, when you receive any communication from us, by clicking on the unsubscribe section that will be contained in that communication, you can unsubscribe from all previously accepted commercial communications.

When you exercise your rights, and only if we have doubts about your identity, we may request additional information to verify your identity.

Likewise, we inform you that you have the right to file a complaint with the Spanish Data Protection Agency if you consider that we have committed an infringement of data protection legislation regarding the processing of your personal data.

In addition, we inform you that you can register in the Robinson List at www.listarobinson.es: the advertising exclusion system managed by the Spanish Digital Economy Association (ADIGITAL), and the Stop Advertising List of the Spanish Association for Digital Privacy, where you can register to show your opposition to the use of your data for the purpose of sending you commercial communications.

Data retention period

We will only keep your data for as long as necessary to provide you with these services. Any data you provide to us through the channels will be blocked as soon as it is no longer necessary to manage the service and will only be available in case there is a legal obligation (derived from a request from the State Security Forces or from Courts and Tribunals) as well as when you exercise your rights.

Security and confidentiality

In order to prevent unauthorized access or unauthorized disclosure of personal data, we have taken appropriate technical and physical measures, as well as management processes to safeguard and secure the information we collect from you.

Minors

Minors under 14 years of age may not use the services available through our website without the prior authorization of their parents, guardians, or legal representatives, who will be solely responsible for all acts performed through the site by minors in their charge, including the completion of forms with personal data of these minors and the marking, where appropriate, of the boxes that accompany them. In this sense, and insofar as Orbio AI does not have the capacity to control whether users are minors or not, it must be parents and guardians who enable the necessary mechanisms to prevent them from accessing the website and/or providing personal data without their supervision, with Orbio AI accepting no responsibility in this regard.

Privacy policy updates

We make our best efforts to keep our privacy policy fully updated. If we make changes, these will be clearly identifiable in a clear and specific manner, as possible in the relationship we have established with you (for example: we can communicate the changes to you by email).

This privacy policy has been reviewed and published on May 22, 2026.