Privacy Policy

This Data Protection and Privacy Policy (hereinafter referred to as the “Privacy Policy”) applies to all information about Users received by GChat Technologies GmbH, located at: Boriñaur enparantza 86 07500, Balearic Islands Spain while using the Website: https://gchatflow.com/ (hereinafter – the “Website”).

By using the Website, the User agrees to this Privacy Policy and to the terms of processing of his/her personal data. If the User does not agree with the terms, he/she must refrain from using the Website.

1. GLOSSARY

1.1. For the purposes of this Privacy Policy, the following terms apply:

• 1.1.1. Administration – authorized employees and representatives of GChat Technologies GmbH who manage the Website, organize and/or carry out personal data processing, determine purposes of processing, scope of processed data and actions performed with personal data.
• 1.1.2. Personal Data – any information relating directly or indirectly to an identified or identifiable natural person (data subject).
• 1.1.3. Personal Data Processing – any operation or set of operations performed on personal data, whether or not by automated means, including collection, recording, systematization, storage, updating, retrieval, use, transfer, anonymization, blocking, deletion and destruction.
• 1.1.4. Confidentiality of Personal Data – an obligation not to disclose personal data without the consent of the data subject or other lawful basis.
• 1.1.5. Website – a set of web pages available at https://gchatflow.com/ and its subdomains.
• 1.1.6. Subdomains – pages located on third-level domains of the Website and other temporary pages displaying Administration contact details.
• 1.1.7. User – an individual accessing the Website via the Internet and using its information, materials or services.
• 1.1.8. Cookies – small data files stored on the User’s device and transmitted to the web server upon each request.
• 1.1.9. IP Address – a unique network address assigned to a device connected to the Internet.
• 1.1.10. Platform – a hardware and software system operated by GChat Technologies GmbH, intended for interaction between Users and third parties via electronic messaging. It includes the Website, mobile and desktop applications, APIs, widgets and other software or databases implementing the Platform’s functionality.
• 1.1.11. Communication Services – external third-party messaging services and software such as WhatsApp Business API, Telegram, Viber, Facebook Messenger, Instagram, VKontakte, Skype, WeChat, online chat tools and similar systems that may interact with the Platform.
• 1.1.12. Company Services – software products, platforms and applications developed and operated by GChat Technologies GmbH.

2. GENERAL PROVISIONS

• 2.1. By using the Website, the User accepts this Privacy Policy and the terms of personal data processing.
• 2.2. If the User disagrees, he/she must stop using the Website.
• 2.3. This Privacy Policy applies only to https://gchatflow.com/. The Company is not responsible for third-party websites accessed via links.
• 2.4. The Administration does not verify the accuracy of personal data provided by the User.
• 2.5. Personal data processing is carried out in accordance with applicable European Union legislation, including the General Data Protection Regulation (EU) 2016/679 (GDPR), and Spanish data protection laws.

3. SUBJECT OF THE PRIVACY POLICY

• 3.1. The Administration undertakes to protect personal data provided by the User when: registering on the Website; submitting contact forms; subscribing to newsletters; using the Platform.
• 3.2. Personal data provided by the User may include:
  • 3.2.1. First name, last name;
  • 3.2.2. Contact phone number;
  • 3.2.3. E-mail address;
  • 3.2.4. Company name (if applicable);
  • 3.2.5. Any other data voluntarily provided via forms.
• 3.3. The Website may automatically collect: IP address; cookies; browser and device data; time and date of access; referrer URL.
• 3.4. The User must comply with information security requirements when using the Platform, including:
  • Mandatory measures: use of strong and unique passwords; enabling two-factor authentication; ensuring secure access for employees and representatives.
  • Recommended measures: IP filtering and access restrictions; internal access control policies.
• 3.5. Additional technical data (browser type, operating system, visit history) is stored securely and not disclosed except as required by law.

4. PURPOSES OF PERSONAL DATA PROCESSING

4.1. Personal data may be used to:

• 4.1.1. Identify and authenticate the User.
• 4.1.2. Provide access to personalized content and services.
• 4.1.3. Communicate with the User regarding services, requests and support.
• 4.1.4. Ensure security and prevent fraud.
• 4.1.5. Create and manage User accounts.
• 4.1.6. Send service-related notifications.
• 4.1.7. Provide technical support.
• 4.1.8. Send marketing communications (only with explicit consent).
• 4.1.9. Improve Website functionality and user experience.
• 4.1.10. Comply with legal obligations.

5. METHODS AND DURATION OF PROCESSING

• 5.1. Personal data is processed lawfully, fairly and transparently. Data is retained only for as long as necessary to fulfill the stated purposes or as required by law.
• 5.2. Personal data may be transferred: to authorized service providers under data processing agreements; to competent authorities if required by law; to third-party Communication Services integrated by the User.
• 5.3. The Administration implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration or disclosure.
• 5.4. In case of a personal data breach, the Company will act in accordance with GDPR requirements, including notification where legally required.

6. RIGHTS AND OBLIGATIONS OF THE PARTIES

6.1. User Rights

Under applicable data protection laws, the User has the right to:

• 6.1.1. Access personal data.
• 6.1.2. Rectify inaccurate or incomplete data.
• 6.1.3. Request erasure (“right to be forgotten”).
• 6.1.4. Restrict processing.
• 6.1.5. Object to processing.
• 6.1.6. Data portability.
• 6.1.7. Withdraw consent at any time.
• 6.1.8. Lodge a complaint with a supervisory authority in Spain.

6.2. Administration Obligations

The Administration undertakes to:

• 6.2.1. Process data only for specified purposes.
• 6.2.2. Maintain confidentiality of personal data.
• 6.2.3. Implement appropriate security measures.
• 6.2.4. Limit access to personal data to authorized personnel.
• 6.2.5. Ensure internal compliance procedures and data protection controls.

7. RESPONSIBILITY

• 7.1. The Company is liable for damages caused by unlawful processing of personal data in accordance with applicable EU and Spanish law.
• 7.2. The Company is not responsible for: public information disclosed by the User voluntarily; data obtained from third parties lawfully; disclosure made with the User’s consent.
• 7.3. The User is responsible for: compliance with applicable laws when using the Platform; lawful use of third-party intellectual property; content uploaded or transmitted via the Platform.
• 7.4. The Company may restrict access to Services if the User fails to comply with information security requirements.

8. DISPUTE RESOLUTION

• 8.1. Before initiating legal proceedings, the parties should attempt to resolve disputes amicably through written communication.
• 8.2. If unresolved, disputes shall be submitted to the competent courts of Spain.
• 8.3. Spanish law and applicable EU regulations govern this Privacy Policy.

9. ADDITIONAL PROVISIONS

• 9.1. The Company may update this Privacy Policy at any time. Changes become effective upon publication on the Website.
• 9.2. Users are encouraged to review this Privacy Policy periodically.
• 9.3. For questions or requests regarding personal data, please contact: