Privacy policy
Updated: September 2026
1. Data controller
COFFEE BREAK AUTOMATIONS, S.L.U. guarantees an adequate and consistent level of protection for individuals with regard to their personal data, in accordance with the General Data Protection Regulation (GDPR) 2016/679 and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).
Controller: COFFEE BREAK AUTOMATIONS, S.L.U. NIF: B22603153. Address: Calle Numancia 73, 5º D, 08029 Barcelona, Spain. Email: jesus@coffee-break.ai.
2. What data we process and for what purpose
This website has no contact or registration forms, and does not automatically collect personal data.
We process the data you voluntarily provide when you write to the email address indicated on the website, for the following purposes:
- Responding to the queries or requests for information you send us.
- Managing the commercial and pre-contractual relationship with clients and collaborators.
- Managing recruitment processes when you contact us regarding job opportunities.
The data processed is whatever you yourself include in your message: usually name, email address, company and the content of your query.
3. Legal basis
The legal basis that allows us to process your data is your consent, given at the moment you contact us (Article 6.1.a GDPR), as well as our legitimate interest in handling the queries received and, where applicable, the performance of a contractual or pre-contractual relationship (Articles 6.1.f and 6.1.b GDPR).
4. Data retention
We will keep your data for the time necessary to handle your query and, where applicable, for the duration of the commercial relationship. Once it ends, the data will be kept blocked for the legally required periods to address any potential liabilities, and will then be deleted.
5. Recipients
Your data is not shared with third parties, except where necessary to develop, monitor and fulfil the purposes stated, or in cases required by law.
This website is hosted on the infrastructure of Cloudflare, Inc., which acts as data processor and provides the service with the guarantees required by the GDPR.
6. International transfers
If you accept analytics, Google (Google Analytics 4 and Google Tag Manager) and Microsoft (Microsoft Clarity) may process that data outside the European Economic Area. Hosting on Cloudflare, Inc. may also involve an international transfer. Both are covered by the safeguards in Chapter V of the GDPR.
7. Your rights
As a data subject, you have the right to:
- Access your personal data.
- Rectify inaccurate or incomplete data.
- Request the erasure of your data when, among other reasons, it is no longer necessary for the purposes for which it was collected.
- Object to the processing of your data or request that it be restricted.
- Request the portability of your data.
- Withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
To exercise any of these rights, send a request to jesus@coffee-break.ai stating the right you wish to exercise. We may ask you to verify your identity if there is reasonable doubt about who is making the request.
If you believe your rights have been violated, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security
CBA has adopted appropriate technical and organisational security measures to guarantee the confidentiality, integrity and availability of the personal data processed, and to prevent its alteration, loss, unauthorised processing or access.
