Privacy Policy

1. Data Controller
   
   Name: Álvaro del Río Vega

   Tax ID (NIF): 46639418H

   Email: contact@eternalia.io

   Location: Barcelona, Spain (Full address available upon request for the controller’s privacy).

   Website: https://eternalia.io
2. Data Collected
   

   Eternalia collects the following types of personal data:

   • Identifying data: name, surname, email address, and password.
   • Usage data: information about how the platform is used.
   • Data from messages created by the user.
   • Data of the designated digital heir (name and email address).
3. Purpose of Processing
   

   Personal data is processed for the following purposes:

   • Manage user registration and access to the platform.
   • Allow the creation and storage of messages to be sent after the user’s death, in accordance with the service terms.
   • Notify the person designated as digital heir and carry out actions derived from the service.
   • Send communications related to the service or technical notifications.
4. Legal Basis
   

   The legal basis for data processing is the user’s consent and the execution of a service contract.

5. Data Retention
   

   Data will be retained as long as the user maintains an active account or does not request deletion. In the event of death and service activation, data will be retained for the time necessary to complete message delivery and comply with legal obligations.

6. Data Sharing with Third Parties
   

   Data will not be shared with third parties except where legally required or necessary for the provision of the service (e.g., hosting or email providers). All providers comply with GDPR.

7. User Rights
   

   Users may exercise their rights of access, rectification, deletion, objection, restriction of processing, and portability by sending a request to contact@eternalia.io. They may also file a complaint with the Spanish Data Protection Agency (AEPD) if they believe their rights have not been properly addressed.

8. Security
   

   Eternalia applies appropriate technical and organizational measures to ensure the security and confidentiality of personal data and to prevent its alteration, loss, or unauthorized access.