Privacy policy
Visiting this website does not require the user to provide any information about themselves. However, during the visit, personal data may be requested through forms.
The data we request on this website is adequate, relevant and strictly necessary to provide you with the services offered and you are under no obligation to provide it to us, although you should know that your failure to communicate it may affect or prevent the provision of the service.
By expressly consenting to this Privacy Policy before providing us with your personal data, you give us the legal basis for its processing.
In accordance with Organic Law 03/2018, of December 5, on Data Protection (LOPD) and the General Data Protection Regulation (GDPR) and based on the principles of transparency, fairness and lawfulness, we detail below the processing that we will carry out on your personal data:
1. DATA CONTROLLER
Your personal data will be included in the Web Users file, whose recipient and controller of the file and its processing is:
- ATLS Global SL
- CIF: B62026430
- Registered office: C/ Balmes 155-157, 3rd floor of Barcelona, 08008 Barcelona
- Email:support@miagenius.com
- Phone: 933043138
2. PURPOSE, LEGAL BASIS AND RETENTION OF DATA
2.1. PROCESSING OF DATA FROM USERS OF THE CONTACT FORM
Purpose of Processing the data of users of the contact form:
- Manage and respond to requests for information and/or inquiries sent to us by users of the website's contact form.
- To manage the sending of the information you request from us and, where appropriate, to provide you with offers of ATLS Global SL products and/or services in which you have expressed interest.
ATLS Global SL will not make automated decisions based on your profile.
Legal basis for processing the data of users of the contact form: consent of the interested party.
The legal basis for processing the data of users of the contact form is obtaining their consent, which will be given to us in the event and at the time of completing and sending us the completed contact form.
Data retention period for users of the website contact form:
We will retain the data of users of the website contact form for a period of 5 years from the last confirmation of interest on their part regarding our products or services, as long as they do not request the deletion of their data.
2.2. PROCESSING OF CUSTOMER AND SUPPLIER DATA:
Purpose of Processing Customer and Supplier Data:
Manage the existing business relationship, carry out and/or subcontract the services contracted by our clients, and carry out the accounting, tax, and administrative management of the company.
Legal basis for processing:
The legal basis for processing customer and supplier data is the existence and execution of service provision and/or goods purchase contracts.
Data retention period:
We retain supplier data while business actions and relationships are carried out and for the years necessary to comply with our legal and/or tax obligations arising from these contractual relationships.
23. PROCESSING OF DATA OF RECIPIENTS OF THE NEWSLETTER AND COMMERCIAL COMMUNICATIONS OF ATLS Global SL
Purpose of Processing the data of subscribers to the Newsletter and commercial communications:
Manage the subscription and sending of the Newsletter and commercial communications of ATLS Global SL.
Legal basis for processing the data of the recipients of the Newsletter: Consent of the interested party.
The legal basis for processing the data of the recipients of the Newsletter and commercial communications is obtaining the unequivocal consent of the recipient of the newsletter – commercial communications, through their subscription.
On the other hand, the legal basis for the processing and sending of Newsletters that ATLS Global SL may send to its CLIENTS is the legitimate interest of ATLS Global SL, except in the case that they have expressed their interest in being unsubscribed, by sending an email to support@miagenius.com.
Data retention period for recipients of the Newsletter and commercial communications:
ATLS Global SL will retain the personal data of recipients of the newsletter and commercial communications from ATLS Global SL necessary for sending the newsletter and other commercial communications indefinitely, unless they request to unsubscribe from the newsletter and other commercial communications service in writing to support@miagenius.com with a copy of your ID.
2.4. PROCESSING OF DATA OF MINORS
According to Article 6(f) and Article 8(1) of the GDPR-EU-2016/679, and by the LOPD-3/2018, on Guarantee of Digital Rights in its Article 84 (protection of minors on the Internet), when the interested party is a minor under 16 years of age, he or she may not give his or her consent for an online business to collect his or her personal data. Such treatment will only be considered lawful if the consent was given or authorized by the holder or holders of parental authority or guardianship over the minor, and the means to obtain the explicit consent of his parents or guardians must be available, unless the minor is at least 16 years old, in which case his consent will be lawful.
2.5. LEGAL BASIS FOR DATA PROCESSING
In compliance with Regulation (EU) 2016/679 and the Organic Law on the Protection of Personal Data, we inform you that your personal data may be subject to some of the following processing activities:
- TR04 – Advertising campaigns (Legal basis: Law 34/1988, of November 11, General Advertising Law.)
- TR08 – Gathering the opinions of interested parties (Legal basis: Regulation (EU) 2016/679 on data protection and the LOPD.)
- TR03 – Selection of own staff (Legal basis: Royal Legislative Decree 3/2015, of October 23, approving the consolidated text of the Employment Law.)
- TG01 – Own accounting and book management, as the person in charge. (Legal basis: Royal Decree 1514/2007, of November 16, which regulates the General Accounting Plan.)
- TG25 – Collection of data for own tax management (Legal basis: Law 58/2003, of December 17, General Tax Law.)
- TG12 – Self-management of employment: data collection (Legal basis: Royal Legislative Decree 1/1994, of June 20, approving the Consolidated Text of the General Social Security Law.)
- TR09 – Security measures regarding technical and organizational measures in the applied software (Legal basis: Regulation (EU) 2016/679 on data protection and the LOPD.)
- TE08 – Personal Data Protection (Legal basis: Regulation (EU) 2016/679 and Organic Law 3/2018.)
- TE02 – Prevention of occupational risks (Legal basis: Law 31/1995, of November 8, on the prevention of occupational risks.)
- TE07 – Destruction of documents (Legal basis: Regulation (EU) 2016/679)
- TV01 – Sales / Provision of Services (Legal basis: Commercial and Tax Legislation)
- TE03 – Transport and/or parcel delivery service (Legal basis: Royal Decree of August 22, 1885, publishing the Commercial Code.)
- TR05 – Emails (Legal basis: Commercial Code and other applicable legislation.)
- TR01 – Information requests received (Legal basis: Commercial Code and other commercial provisions.)
- TR07 – Management of security incidents and/or breaches (Legal basis: Regulation (EU) 2016/679 on data protection and the LOPD.)
- TE04 – Management of own legal affairs (Legal basis: Applicable commercial and labor legislation.)
- TE01 – Maintenance of computer systems (Legal basis: Commercial Code.)
You may withdraw your consent for any specific purpose that you have previously accepted without affecting the lawfulness of the processing based on that consent.
3. TRANSFER OF DATA
Your data will not be communicated to third parties except to collaborating companies, provided that this transfer leads to an improvement of the service for which they were transferred, there is a legal obligation or you have been expressly informed.
4. USER RIGHTS OVER THEIR PERSONAL DATA
We inform you of the rights you have when you provide us with your data:
- Right of Access: It is the user's right to obtain information about their specific personal data and the processing that has been or will be carried out, as well as the information available about the origin of said data and the communications made or planned regarding them.
- Right of Rectification: It is the right of the affected party to have the data that turns out to be inaccurate or incomplete modified. This can only be satisfied in relation to information that is under the control of ATLS Global SL, for example, removing comments published on the page itself, images or web content where personal data of the user is contained.
- Right to Restriction of Processing: It is the right to have the purposes of the processing, originally intended by the data controller, limited.
- Right to Erasure: It is the right to delete the user's personal data, except as provided for in the GDPR itself or in other applicable regulations that determine the obligation to keep them, in time and form.
- Right to portability: The right to receive the personal data that the user has provided, in a structured, commonly used and machine-readable format, and to transmit it to another controller.
- Right of Opposition: It is the user's right to prevent the processing of their personal data.
- Right not to be subject to automated decisions, including profiling: Where processing is not necessary for entering into or performing a contract, is not authorized by European Union or Member State law and is not based on consent, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
- Right to withdraw consent: For any treatment based on your consent, you have the right to withdraw it, at any time and free of charge.
You can exercise any of these rights by notifying us in writing at our registered office address shown above or by email support@miagenius.com.
The written request submitted by the data subject (interested party) requesting the exercise of rights must take into account the following:
- The applicant must provide verifiable identification and, if there are any doubts about the applicant's identity, they will be asked to rectify the request (e.g. eg. requesting more information, such as the ID number, the ID document, the email address provided, etc.)
- The request can be made by the legal or voluntary representative, when the latter is duly identified and authorized by the data subject (through an express authorization of the data subject to exercise the personal rights regulated in the regulations on the protection of personal data).
- Petition specifying the request (Right(s) that are intended to be exercised). If you do not refer to a specific treatment, you will be provided with a response regarding all treatments that affect your personal data. If you request information about a specific treatment, only the information about that treatment will be provided. If you request it by phone, you will be told to do it in writing and you will be informed how you can do so and the address to which you have to send it. Information will never be given over the phone.
- Postal or electronic address for notification purposes.
- Documents supporting the request you make, if necessary.
- The applicant must use any means that allows proof of sending and receiving the application.
You can find more information about your rights and the forms to exercise them on the website of the Spanish Data Protection Agency. www.agpd.es
5. SOCIAL NETWORKS
Visiting ATLS' public profiles on social media does not involve the collection of personal data, unless expressly authorized.
The user has a profile on the same Social Network and has decided to join the page created by ATLS Global SL, thus showing interest in the information that is advertised on the Network. By joining our page, you are giving us your consent to process the personal data published in your profile.
The user can access the privacy policies of the Social Network itself at any time, as well as configure their profile to guarantee their privacy.
ATLS Global SL has access to and processes public user information, especially their contact name. This data is only used within the Social Network itself. They are not incorporated into any file.
ATLS Global SL will carry out the following actions:
- Access to public profile information.
- Publication on the user's profile of all information already published on the ATLS Global SL page.
- Send personal and individual messages through the Social Network channels.
- Page status updates that will be posted to the user's profile.
The user can always control their connections, delete content that is no longer of interest to them, and restrict who they share their connections with; to do this, they must access their privacy settings.
6. PROTECTION AND CONFIDENTIALITY OF YOUR DATA
We use organizational and technical measures to ensure the security and confidentiality of your personal data, preventing its loss, alteration and unauthorized processing. Our staff have been trained and have made a commitment to confidentiality in handling your data.
7. SENDING COMMUNICATIONS
The data used, or provided, in informational and/or promotional communications are processed by ATLS for purposes consisting of the electronic sending of information and communications about services, activities, publications, and social and professional events of ATLS or third parties in the ATLS network; the monitoring and optimization of marketing campaigns carried out using appropriate technologies; and the creation of profiles for commercial purposes.
The legal basis for the aforementioned processing is the express consent given by the User. Consent for the sending of such communications may be revoked at any time in each of the communications received through the mechanism enabled for this purpose.
The data retention criteria will be based on your objection to the processing. In any case, the rights of access, rectification, erasure, objection, limitation of processing and portability, where applicable, may be exercised by sending an email to support@miagenius.com
If you are not satisfied with the exercise of your rights, you may file a complaint with the Spanish Data Protection Agency through its electronic headquarters, by submitting a claim for the protection of rights.
8. WORK WITH US
In compliance with the provisions of Organic Law 03/2018, of December 5, on the Protection of Personal Data, we inform you that by accepting this privacy policy, you give your explicit consent for the data you provide, as well as your CV, to be incorporated and processed in Human Resources files under the responsibility of ATLS Global SL with CIF B62026430 and address at C/ Balmes 155-157, 3rd floor of Barcelona, 08008, Barcelona in order to participate in personnel selection processes, being cancelled after the fulfillment of the legally established period.
ATLS Global SL undertakes to treat your data in a fair, transparent, adequate, relevant, limited, accurate and up-to-date manner and will not communicate or transfer such information to third parties, except when such communication is necessary or may represent an improvement for the purpose thereof.
Refusal to authorize such processing would make it impossible to fulfill the services to which this form refers.
We also inform you of your right to exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability by writing to C/ Balmes 155-157, 3rd floor, Barcelona, 08008, Barcelona or by email support@miagenius.com.
9. TEXT PROCESSING WITH ARTIFICIAL INTELLIGENCE.
ATLS Global SL offers you an exclusive translation service with artificial intelligence.
Use of this tool requires acceptance of the following policy.
1. Data Controller:
ATLS Global SL with CIF B62026430 and address at C/ Balmes 155-157, 3rd floor, 08008, Barcelona
2. Legal Basis for the Processing
The processing of textual data is based on the following legal grounds (Art. 6 GDPR):
- Contractual performance (Art. 6.1.b GDPR): Necessary for the provision of the online translation service requested by the user.
- Legitimate interest (Art. 6.1.f GDPR): Technical optimization of the service, perimeter security and mitigation of cyber attack vectors.
- Explicit consent (Art. 6.1.ay Art. 9.2.a GDPR): Required only if the user voluntarily enters special categories of data (medical data, political affiliation, sexual orientation) for translation.
3. Purpose of the treatment with Artificial Intelligence:
- Provide the service: Process your content, manage your account, and offer features
- Improve the platform: Analyse usage to optimise features and the user experience
- Communication: Send you updates, answer inquiries, and provide support
- Safety: Identify fraud, prevent abuse, and protect your account
- Legal compliance: Comply with legal and regulatory obligations
4. Information we collect
Information you provide to us directly:
- Account details: name, email, password
- Invoicing information: payment info and billing address
- Generated content: text, settings and preferences
- Communications: support and feedback messages
Information collected automatically:
- Usage data: pages visited, features used, usage time
- Connection metadata: IP address, User-Agent, timestamps, and session encryption protocols of the transfer
- Cookies and similar technologies
- Payload: Source texts entered for translation and the resulting target texts generated by the AI model.
5. Technical and Organizational Security Measures (Art. 32 GDPR)
The measures required by the National Security Scheme (ENS) and ISO 27001 / ISO 42001 (AI Management) standards are applied to protect your data:
- SSL/TLS encryption for all data transmissions
- Secure storage with encryption of data at rest
- Two-factor authentication available
- Access to personal data is limited to authorised personnel only
- Regular security audits
6. Automated decisions:
We inform you that the processing may include profiling or automated decision-making that may produce legal effects.
7. Conservation and Safety:
Your data will be processed following security measures that guarantee confidentiality. Anonymization or pseudonymization techniques will be used whenever possible before being processed by AI. Your personal data will not be used for the training of third-party models without your explicit permission.
Information storage is strictly segmented according to its technical purpose:
- Account details: User profile, credentials, and interface settings. Retained while the account remains active.
- Translation history: Source texts and meta indexed to the user ID. They are persistently stored in the Controller's encrypted databases.
- Technical and API logs: Telemetry logs (IP, endpoints, error codes). Retained for 30 days for security audit and denial-of-service (DoS) analysis.
- Tax and billing information: Retained for 5 years in compliance with current tax obligations.
8. Data transfers and planned international transfers:
8.1. Server where MIA is located:
- The parent company OVH Groupe SA is a French company, registered in the RCS (Commercial Register) of Lille with number 537 407 926 and with its registered office located at 2, rue Kellermann, 59100 Roubaix, France.
- For operations in Spain, the corresponding subsidiary is OVH Hispano SL, with CIF B83834747 and registered office at Calle Alcalá 21, 5th floor, 28014 Madrid (Spain)
8.2. MIA development company:
- Do The Thing LLC, with EIN 61-2277318 and located in the United States, at the address 1209 Mountain Road PI.NE, Suite R, Albuquerque, NM 87110
9. Exercise of Rights (Arts. 15-22 GDPR):
By writing addressed to ATLS GLOBAL SL at C/ Balmes 155-157, 3rd floor, Barcelona, 08008, Barcelona or by email support@miagenius.comYou have the possibility to exercise your rights to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Deletion: Request the deletion of your data
- Portability: Receive your data in a structured format
- Objection: Object to the processing of your data
10. Contact
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
- Email:privacidad@miagenius.com
- Address: Barcelona, Spain
11. Data Protection Officer
You can also contact our Data Protection Officer with any questions related to the processing of your data via email. dpd@octalia.es.