Privacy Policy

Entelion, S.L. — Effective date: [20 August 2026]

This Privacy Policy describes how Entelion, S.L. (“Entelion,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal data when you visit our website https://www.entelion.ai or otherwise interact with us.

1. Who we are (Data Controller)

The data controller responsible for the personal data processed through this website is Entelion, S.L., with NIF/CIF B26572263 and registered address at Veïnat de Matamala, 16, 17244 Cassà de la Selva, Girona, Spain.

For any question regarding this Privacy Policy or the processing of your personal data, you can contact us at info@entelion.ai.

2. Scope of this Policy

This Privacy Policy applies to visitors of our website and to individuals who contact us, request a demo, or otherwise interact with us online. It covers visitors located in the European Economic Area (EEA), the United Kingdom, and Spain (subject to the GDPR and the Spanish Organic Law 3/2018 on Data Protection and Digital Rights Guarantee, “LOPDGDD”), and includes specific provisions for residents of the State of California, United States, under the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”).

3. What personal data we collect

  • Data you provide directly: when you submit our “Request a Demo” form or otherwise contact us, we may collect your name, work email address, company name, job title, phone number, and any other information you choose to share with us.
  • Data collected automatically: when you browse our website, we and our service providers automatically collect technical information through cookies and similar technologies, such as IP address, browser type and version, device information, pages visited, referring/exit pages, and the dates and times of your visits.
  • Data from third-party tools: our website uses HubSpot (marketing, CRM, and website hosting platform), Google Analytics (website analytics), and the LinkedIn Ads / LinkedIn Insight Tag (advertising and conversion tracking), which may collect information about your interactions with our website and our advertising.

We do not intentionally collect special categories of personal data (such as data concerning health, religion, or biometric data) through this website.

4. How we use your personal data and our legal basis

Under Article 6 of the GDPR, we rely on the following legal bases to process your personal data:

  • To respond to demo requests and inquiries, and to manage our relationship with you — legal basis: performance of steps taken at your request prior to entering into a contract, and/or our legitimate interest in responding to your inquiry (Art. 6(1)(b) and (f) GDPR).
  • To send you marketing communications about Entelion's products and services — legal basis: your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.
  • To analyze and improve our website through Google Analytics and HubSpot analytics — legal basis: your consent, collected via our cookie consent tool (Art. 6(1)(a) GDPR).
  • To deliver and measure advertising through LinkedIn Ads and the LinkedIn Insight Tag — legal basis: your consent (Art. 6(1)(a) GDPR).
  • To comply with legal obligations to which we are subject — legal basis: Art. 6(1)(c) GDPR.
  • To establish, exercise, or defend legal claims — legal basis: our legitimate interest (Art. 6(1)(f) GDPR).

5. Cookies and similar technologies

Our website uses cookies and similar technologies, including:

  • Necessary cookies: required for the website to function correctly (e.g., HubSpot session cookies).
  • Analytics cookies: Google Analytics and HubSpot analytics, used to understand how visitors use our website.
  • Advertising cookies: LinkedIn Ads and the LinkedIn Insight Tag, used to measure our advertising campaigns and show you relevant content on LinkedIn.

You can manage your cookie preferences at any time through the “Cookie Settings” link in the footer of our website, and through your browser settings. Blocking certain cookies may affect the functionality of our website.

6. Who we share your data with

We share personal data with the following categories of recipients, acting as our data processors or, where applicable, as independent controllers:

  • HubSpot, Inc. — our CRM, marketing automation, and website hosting provider.
  • Google LLC — provider of Google Analytics.
  • LinkedIn Corporation / Microsoft — provider of LinkedIn Ads and the LinkedIn Insight Tag.
  • Public authorities, regulators, or courts, where required by law.
  • Professional advisors (e.g., legal, accounting, or audit firms) as reasonably needed in connection with our business.

We do not sell your personal data in exchange for money. As explained in Section 9.2 below, certain advertising cookies may constitute a “sale” or “sharing” of personal information under the CCPA/CPRA, and we provide California residents with a way to opt out.

7. International data transfers

Our website is hosted on HubSpot's EU data infrastructure. However, some of our service providers (including Google and LinkedIn/Microsoft) are based in, or transfer data to, the United States or other countries outside the EEA. Where this occurs, we rely on appropriate safeguards recognized under Chapter V of the GDPR, such as the European Commission's Standard Contractual Clauses, applicable adequacy decisions (including the EU-U.S. Data Privacy Framework, where the recipient is certified), or other legally recognized transfer mechanisms. You may request further information about these safeguards by contacting us at info@entelion.ai.

8. Data retention

We retain personal data collected through demo requests and inquiries for as long as necessary to manage our relationship with you and for a reasonable period afterward to address follow-up questions, and in any case no longer than required under applicable statutes of limitation for legal, tax, or accounting purposes. Analytics and advertising data collected through cookies is retained according to the periods set by the relevant provider (Google, HubSpot, LinkedIn), as described in their respective cookie policies, or until you withdraw your consent.

9. Your rights

9.1 Rights under the GDPR and the Spanish LOPDGDD

If you are located in the EEA, the UK, or Spain, you have the right to:

  • Access the personal data we hold about you.
  • Request rectification of inaccurate or incomplete data.
  • Request erasure of your data (the “right to be forgotten”).
  • Request restriction of processing.
  • Object to processing based on our legitimate interest or carried out for direct marketing purposes.
  • Request data portability.
  • Withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, contact us at info@entelion.ai. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD, www.aepd.es), or with the supervisory authority of your habitual residence, place of work, or place of the alleged infringement.

9.2 Rights for California residents (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we have collected, used, disclosed, or sold/shared about you, and the categories of sources, purposes, and third parties involved.
  • Request deletion of your personal information, subject to certain exceptions.
  • Correct inaccurate personal information.
  • Opt out of the “sale” or “sharing” of your personal information (terms that are broadly defined under the CPRA to include certain advertising cookies, such as those used by the LinkedIn Ads/Insight Tag). You can exercise this right through our “Cookie Settings” link.
  • Limit the use of sensitive personal information (we do not believe we collect sensitive personal information as defined by the CPRA).
  • Not be discriminated against for exercising any of these rights.

To exercise your CCPA/CPRA rights, contact us at info@entelion.ai. We may need to verify your request using the information available to us before responding.

10. Children's privacy

Our website and services are directed at business professionals and are not intended for individuals under the age of 16. We do not knowingly collect personal data from children.

11. Security

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, or disclosure, taking into account the nature of the data processed and the risks involved. However, no method of transmission over the internet or electronic storage is completely secure.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or regulatory reasons. We will indicate the date of the latest update at the top of this page and, where changes are material, we will provide additional notice.

13. Contact us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Entelion, S.L.

Veïnat de Matamala, 16

17244 Cassà de la Selva, Girona, Spain

Email: info@entelion.ai