Privacy Policy

Last updated: May 2026

1. User Information

Seguridad Jiménez is the controller of the user's personal data and informs you that these data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR) and the Organic Law 3/2018 of 5 December (LOPDGDD).

2. Purpose of Processing

To maintain a commercial relationship with the user. The operations planned to carry out the processing are:

• Responding to requests or any type of request made by the user through any of the contact forms available on this website.
• Sending commercial advertising communications by email, SMS, WhatsApp, social networks, or any other electronic or physical medium, present or future, that enables commercial communications.

3. Data Retention Criteria

Data will be kept for no longer than is necessary to maintain the purpose of the processing or for as long as there are legal prescriptions dictating their custody. When they are no longer necessary for this purpose, they will be deleted with appropriate security measures.

4. Data Subject Rights

The user has the right to access, rectify, delete, object, and restrict the processing of their data at any time by contacting the email address: info@cerrajerosmalaga.com.

5. Data Processing in Phone Calls (AI Voice Assistant)

To efficiently manage and respond to incoming telephone inquiries, we use an automated AI Receptionist service. Under our instructions, this system processes the content of the conversation to register, forward, or answer your queries. This process utilizes automatic speech recognition (Speech-to-Text), natural language processing (NLP), and, where applicable, speech synthesis (Text-to-Speech).

Recording and Documentation: The content of the conversations may be recorded, transcribed, or documented. This will only occur if you are properly informed at the beginning of the call and choose to continue with it. You can terminate the call at any time to prevent your data from being processed.

Processed Data: During the call, we process your spoken statements, technical connection details (date, time, duration of the call), and, where applicable, basic contact details provided voluntarily (such as your name or phone number). In addition, interaction data is processed to guide the conversation or manage interruptions.

Legal Basis: The processing is based on Art. 6(1)(b) GDPR (for the preparation or execution of a contract) and Art. 6(1)(f) GDPR (legitimate interest in efficient, scalable, and professional communication).

Subprocessors and International Transfers: For technical implementation, we use specialized subcontractors (e.g., for hosting, speech recognition, and semantic analysis). These subprocessors may transfer personal data to the USA. Generally, this transfer is based on an adequacy decision under Art. 45 GDPR (EU-US Data Privacy Framework). In the absence of such a decision, transfers are secured using Standard Contractual Clauses in accordance with Art. 46(2)(c) GDPR, alongside supplementary security measures, in compliance with Art. 44 GDPR.

Training and Automated Decisions: To improve language processing, pseudonymized data may be used for model training, ensuring that individual traceability is prevented or significantly restricted. No automated decision-making under Art. 22 GDPR is carried out.

Retention: Data is stored only for as long as necessary to achieve the mentioned purposes, after which it will be automatically deleted or anonymized.