Privacy Policy

Effective June, 2025

Pilnook Group — For legal inquiries: legal@pilnook.com.

The data controller

The data controller responsible for the processing of your personal data is Pilnook Group (hereinafter, "Pilnook"). For any questions or requests regarding your personal data or this privacy policy, you can contact us at: legal@pilnook.com.

The purpose of this Policy is to describe the processing activities performed on your personal data, as well as the conditions under which we process your personal data when you use any Pilnook associated website.

Legal Basis for Data Processing

In accordance with the General Data Protection Regulation (GDPR) and applicable EU law, Pilnook processes your personal data based on one or more of the following legal bases:

Consent: When you have given clear consent for us to process your personal data for a specific purpose.
Contract: When processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
Legal Obligation: When processing is necessary for compliance with a legal obligation to which Pilnook is subject.
Legitimate Interest: When processing is necessary for the purposes of the legitimate interests pursued by Pilnook or a third party, except where such interests are overridden by your interests or fundamental rights and freedoms.

Information We Collect

We may collect or receive the following types of information when you interact with us through our site:

Information you provide directly to us: If you contact us through the site, we may collect, with your consent, your contact information to permit us to respond to your request. This policy does not govern or apply to job applications and curriculum vitae processing.
Information we collect automatically: The IP address of the device you used to access the websites, the type of browser, the times you accessed the websites, the pages viewed, the pages you visited before navigating to the websites, and information about the computer or mobile device you use to access the websites, including hardware model, operating system and version, and mobile network information.

Cookies and Similar Technologies

We may use cookies, pixel tags, Local Shared Objects (LSO), and similar technologies to automatically collect information. Cookies are small bits of information that are stored by your computer’s web browser. Pixel tags are very small images or small pieces of data embedded in images, also known as "web beacons" or "clear GIFs," that can recognize cookies, the time and date a page is viewed, a description of the page where the pixel tag is placed, and similar information from your computer or device. By using the Site, you consent to our use of cookies and similar technologies.

You may be able to refuse or disable cookies by adjusting your web browser settings. Because each web browser is different, please consult the instructions provided by your web browser. Please note that if you choose to refuse, disable, or delete these technologies, some site functionalities may no longer be available to you.

Purposes of Processing

We use the information we collect on the websites for various purposes, including:

Ensuring our websites remain relevant to end user needs and are easy to use by providing analytics and other data regarding use of our websites.
Enhancing, improving, or modifying our websites and services, enhancing security, monitoring and verifying identity or service access, or combating spam or other malware or security risks.
Identifying usage trends, determining the effectiveness of our marketing and promotional campaigns and expanding our business offerings.
Providing confirmations, invoices, technical notices, updates, security alerts, as well as all other support and administrative messages involved in your request or purchase of products and services.
Processing your payment for enrolled products and services.

Automated Decision-Making and Profiling

Pilnook does not perform automated decision-making or profiling as defined by the GDPR. If this changes, we will update this policy accordingly.

Data Retention

We will retain your information for as long as your account is active or as needed to provide you our services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements, unless a longer retention period is required or permitted by law. If you wish to access, amend, correct, remove, or limit use of your information, contact us at: legal@pilnook.com.

Your Rights under GDPR

As a user, you have the following rights regarding your personal data, as established by the GDPR and EU law, always within the limits and exceptions provided by law and provided that the applicable requirements are met:

Right of Access: You have the right to obtain confirmation as to whether or not your personal data is being processed, and, where that is the case, access to the data and information about its processing.
Right to Rectification: You have the right to request the correction of inaccurate or incomplete personal data.
Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your personal data in certain circumstances.
Right to Object: You have the right to object to the processing of your personal data in certain situations, such as direct marketing.
Right to Restriction of Processing: You have the right to request the restriction of processing of your personal data in certain cases.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.

Please note that the exercise of these rights may be subject to certain legal requirements and limitations. Pilnook may retain certain information as required or permitted by law, and may deny or limit the exercise of rights when there is a legitimate reason, such as compliance with legal obligations or the defense of legal claims.

To exercise any of these rights, please contact us at: legal@pilnook.com.

Do Third Parties See and/or Have Access to Data?

Except as described in this Privacy Policy, Pilnook will not share personally identifiable information collected on the websites with other people or non-affiliated companies unless we have your consent, or under the following circumstances:

With third party vendors, consultants and other service providers who work for us and need access to your information to do their work such as providing customer support, processing payments, and storing data (e.g. Amazon Web Services). Any third-party vendor so used has agreed to protect the confidentiality of information provided by Pilnook Tech.
To protect the rights and property of Pilnook Tech, our agents, customers, users, and others including to enforce our agreements, policies and terms of use;
Legal purposes. We may disclose information to respond to subpoenas, court orders, legal process, law-enforcement requests, legal claims or government inquiries, detect fraud, and to protect and defend the rights, interests, safety, and security of Pilnook Tech, our affiliates, users, or the public.
As part of any merger, acquisition, debt financing, or sale of company assets, as well as in the event of an insolvency, bankruptcy or receivership in which information could be transferred to third parties as one of the business assets of the company.

International Data Transfers

Pilnook stores and processes personal data within Spain and the European Economic Area (EEA). However, some third-party applications or service providers used by Pilnook may process or store data outside the EEA. In such cases, Pilnook will ensure that appropriate safeguards are in place, such as adequacy decisions by the European Commission or Standard Contractual Clauses, to protect your data in accordance with applicable law. You may request further information about these safeguards by contacting us at: legal@pilnook.com.

Supervisory Authority / Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD) or another competent supervisory authority within the European Union.

Security of Your Personal Information

Pilnook implements appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, alteration, or destruction, in accordance with applicable law and industry standards. However, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, while we strive to use reasonable means to protect your personal data, we cannot guarantee its absolute security. Pilnook is not responsible for security breaches that are beyond its reasonable control. If you have any questions about the security of your personal information, you can contact us at: support@pilnook.com.

Children

Pilnook does not knowingly collect or solicit personal data from children under the age of 14. If you are under 14, please do not use our services or provide any personal data. If we become aware that we have collected personal data from a child under 14 without verified parental consent, we will take steps to delete that information as soon as possible. If a parent or guardian becomes aware that their child has provided us with personal data without their consent, they should contact us at: legal@pilnook.com. Pilnook is not responsible for false declarations regarding age provided by users.

Links to Third Party Sites

Our Website includes links to other websites whose privacy practices may differ from those of Pilnook. If you submit personal information to any of those sites, your information is governed by their privacy policies. We encourage you to carefully read the privacy policy of any website you visit. Pilnook is not responsible for the privacy practices, content, or security of third-party sites, nor for any damages or losses arising from your use of such sites.

How Pilnook Adheres to GDPR Principles

Pilnook acts as a data controller under the GDPR and is committed to compliance with all applicable data protection laws. Pilnook applies privacy by design and by default, maintains strict data retention protocols, and has procedures for incident response. We only contract with sub-processors and third parties who provide adequate written commitments to data protection. International data transfers are only carried out with a lawful basis and appropriate safeguards. Pilnook reserves the right to update its compliance measures as required by law or business needs.

Governing Law

This website and its privacy policy are governed by and interpreted in accordance with the laws of Spain and the European Union. Any disputes arising in connection with this policy shall be subject to the exclusive jurisdiction of the courts of Spain, unless otherwise required by applicable law. Pilnook makes no representation that the site is operated in accordance with the laws or regulations of any other nation.

Your Consent

By using our services, you consent to the processing of your information as described in this Privacy Policy, as amended from time to time. "Processing" includes collecting, storing, deleting, using, combining, and disclosing information, all of which activities will take place in Spain or another EU country. If you reside outside these jurisdictions, your information will be transferred, processed, and stored there under Spain or EU privacy standards. If you do not agree with this policy, please do not use our services.

Language/Translation Disclaimer

This Privacy Policy may be provided in multiple languages for your convenience. In the event of any discrepancies or conflicts between versions, the English version shall prevail.

Changes to this Policy

Pilnook may update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or for other operational, legal, or regulatory reasons. Any changes will be posted on this site, and the date of the last material revision will be indicated at the top of the policy. We encourage you to review this Privacy Policy periodically. Continued use of our websites after any changes constitutes acceptance of those changes.

Questions

If you have any questions regarding this Privacy Policy or our data protection practices, you may contact us at any time by email at: legal@pilnook.com. We will address your inquiry in accordance with applicable data protection laws.