Embat

At Embat Technologies, S.L., we understand the importance of protecting your personal information and are committed to handling it responsibly and in accordance with applicable data protection regulations.

By merely using or browsing this website https://www.embat.io/ (hereinafter, the “Website”), you will be assigned the status of “User”. Therefore, we ask that you read this Privacy Policy carefully, without prejudice to the fact that your consent may be required when requested at the time of collecting personal data and/or, if applicable, at the time of installing cookies, in accordance with our Cookie Policy.

Anyone providing data through the forms on this Website declares that they are over 14 years old, and access and use of the Website by minors under that age is prohibited. If, at any time, Embat Technologies, S.L., as the data controller, detects that a minor under 14 years of age has provided personal data, it will proceed to delete it.

This Privacy Policy aims to regulate all aspects related to the processing of data from different Users who browse and/or provide their personal data through the various forms available on the Website.

  1. Who is responsible for the processing?

The company responsible for processing your data is:

Embat Technologies, S.L. (hereinafter, “Embat”)
NIF: B-16808693
Address: Calle Basílica 17, 1º izquierda, Madrid, 28020, Madrid
Email address: [email protected]

  1. What type of personal information do we collect?

Embat may collect the following personal information from Users through the contact form enabled on the Website or through other communication channels enabled by Embat (email, social networks, etc.). We will always request only the necessary, appropriate, and limited data in relation to the mentioned processing purposes (principle of data minimization):

· Personal identification data (name).

· Contact information (email and phone number).

· Professional data (company you belong to and, optionally, your role in it).

‍Optionally, Users may also indicate the number of employees in the company they belong to, the ERP used in their organization, and the volume of billing.

If the User applies for job offers published on the Website, social networks, or websites redirected by our Website, we may also process the information included in the candidates' CVs.

Likewise, when browsing our Website, the User should pay attention to the cookies installed on their terminal or device, as this implies the processing of personal data, according to the type of cookies informed and their specific purposes. This information can be found in our Cookie Policy.

All the information provided by the User must be truthful and accurate. To this effect, the User guarantees the authenticity of all data provided as a result of completing the forms and/or corresponding requests. In any case, the User will be solely responsible for false or inaccurate statements made and for any damages caused to Embat and/or third parties.

  1. For what purposes do we process the data? Information on legal bases for processing and retention periods associated with each processing activity.

The data provided by the User will be processed for the following purposes:

If the User contracts Embat's services, we will process the strictly necessary data for the proper management of the contracted services, including user management, technical issue resolution, platform inquiries, and administrative, economic, and accounting management.

  1. Who do we share the data with? Are international data transfers conducted?

As a general rule, we do not share your data with third parties, except in the following cases:

a. If applicable, with other companies within the framework of preliminary actions and reviews prior to commercial transactions of any kind, such as mergers, spin-offs, global transfers of assets and liabilities, contribution or transfer of business or business branches, or any similar corporate restructuring transactions as provided in commercial regulations, based on our legitimate interest in continuing the provision of our services.


b. Public authorities, if required by any legal obligation applicable to Embat or for the defense of our rights or interests in response to potential claims.


c. Similarly, for the optimal provision of the service that Embat provides, it may require that trusted third-party service providers of Embat access the User’s personal data as data processors, under Embat’s control and to the extent strictly necessary to provide the services contracted with them. Such processors operate under a service contract under the terms, conditions, and guarantees contained in the General Data Protection Regulation (GDPR). Embat carries out the corresponding controls, inspections, and audits in this area to verify that such processors strictly comply with the contracts entered into for this purpose and the applicable regulations.
Additionally, as part of this service provision, data communications may occur to other data controllers as necessary for the proper provision of services, whose access has been regulated in accordance with the terms, conditions, and guarantees contained in the GDPR.
Users understand that some of the aforementioned service providers are located, or access data from, countries outside the European Economic Area (EEA) and, therefore, do not offer the same level of personal data protection as in the EEA, such as the United States, United Kingdom, Switzerland, Canada, Colombia, Brazil, New Zealand, Singapore, Japan, and Australia. In any case, Embat guarantees that it has adopted the appropriate measures and guarantees established in this area in accordance with the European Data Protection Regulation, including data transfer agreements based on the Standard Contractual Clauses approved by the European Commission on June 4, 2021 https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32021D0914&qid=1623249029503&from=EN, as well as, in the cases of the United Kingdom, Switzerland, Canada, New Zealand, Japan, and the U.S. (for entities that have adhered), under the Adequacy Decisions of the Commission that have declared that these third countries offer an adequate level of protection. You can find more information about international data transfers at the following link (https://www.aepd.es/derechos-y-deberes/cumple-tus-deberes/medidas-de-cumplimiento/garantias-para-las-transferencias-de) or by writing to [email protected].


d. In the case of information obtained through certain cookies, international data transfers may occur (for more information, please consult our Cookie Policy).‍

  1. What rights does the user have and how can they exercise them?

The User has the right to:

a. Access their personal data, including confirmation of whether their personal data is being processed and basic information related to such processing, as well as obtain a copy of the personal data being processed.

b. Withdraw the consent given at any time.

c. Request the rectification of inaccurate data.

d. Request the deletion of data when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

e. Object to the processing of their personal data, in which case Embat will cease processing them unless there are legitimate reasons (such as exercising or defending against potential claims).

f. Restrict the processing.

g. Data portability.

h. Not be subject to a decision based solely on automated processing (including profiling).


To exercise these rights, the User can send an email to the postal or email address [email protected].

If the User is not satisfied with their rights or considers that the data processing does not comply with the applicable regulations, they can file a complaint with the supervisory authority, in this case, the Spanish Data Protection Agency (www.aepd.es).

  1. Social Networks

Embat has profiles on major social networks (Facebook, Instagram, and LinkedIn, among others). If Users have a profile on any of these social networks and contact Embat through this medium or otherwise, the personal data provided by the User, and those visible as a user of the corresponding social network, will be processed by Embat within the social network itself to respond to such requests through the social network's own channels, applying this Privacy Policy for these purposes.

In particular, the personal data provided by the User through these social networks will be processed solely to address their inquiry or request. The information collected will generally be limited to identification and contact data, as well as data related to the nature of the request addressed to us.

The User has the right to exercise their rights, as explained in this Privacy Policy. However, the exercise of these rights will be defined by the functionalities of the corresponding social network and can only be exercised in relation to the information under Embat's control.

In no case will Embat extract data from social networks unless the user's express consent is obtained for this purpose.

  1. Changes to the Privacy Policy

‍Embat reserves the right to make changes to the terms of its Privacy Policy, which will be notified through our website. Therefore, we recommend visiting our policies periodically to stay informed of new updates.

Date of last update: June 2025.