Privacy policy

1. Controller and scope

The data controller is Marz Automation SL, tax identification number B26836817, with its registered address at Avenida Gregorio Peces Barba, 1, 28919 Leganés, Madrid, Spain.

For data protection enquiries or to exercise your rights, you can email admin@marz.biz.

This policy applies to the personal data Marz processes to manage its website, respond to enquiries, maintain professional relationships and carry out its own commercial activities.

Marz provides sales strategy, B2B prospecting, data management, automation, systems integration and artificial intelligence services. When it processes data on behalf of a client, each party’s obligations and responsibilities are determined by its actual role and the relevant agreements. This policy does not replace the information a client must provide when acting as a data controller.

2. Data processed and its sources

Depending on your relationship with Marz, we may process identification and professional contact details, such as your first name, surname, email address and telephone number; professional information, such as your company, job title, responsibilities, industry, location and professional profile; and information needed to assess the relevance of our services to an organisation.

We may also process enquiries, conversations, proposals and interaction history, marketing preferences, consents and unsubscribe or objection requests, as well as technical data needed to operate and protect the website and our systems.

Data may come from direct communications, previous professional relationships, company websites, public professional profiles and business information sources. We may enrich or update professional information to correct data, identify appropriate contacts and improve the relevance of our communications. Public availability does not mean that data may be used for any purpose.

Information about the sources used in each case is provided in the notice and supplementary information accompanying the contact. You can also request information about the data we process and its source by emailing admin@marz.biz.

Fields marked as required on our forms are needed to handle your request. Opting to receive marketing communications is voluntary and does not affect how we handle your enquiry. Avoid providing sensitive data or third-party information that is unnecessary or that you are not authorised to disclose.

3. Purposes and legal bases

We respond to enquiries and prepare proposals on the basis of our legitimate interest in responding to professional contacts or, where applicable, to take pre-contractual steps requested by the person who will be a party to the contract.

We manage relationships with clients, business partners and service providers using the data needed to perform contracts or, when dealing with representatives of organisations, on the basis of our legitimate interest in maintaining that professional relationship.

We identify business opportunities and carry out our own prospecting on the basis of legitimate interests where applicable, after assessing the purpose, the necessity of the processing and individuals’ rights. The legal presumption concerning certain professional contact data does not automatically cover every form of enrichment, profiling or use of information.

Where communications require consent, we will request it separately and you may withdraw it. We also process data needed to comply with legal obligations, establish, exercise or defend legal claims and protect our systems against fraud, abuse and incidents, on the basis of the applicable obligation or legitimate interest.

4. Prospecting and marketing communications

Our commercial activities are directed at organisations and professionals in connection with their business or professional activities. The legal basis for processing data and the conditions for using a communication channel are assessed under the applicable legislation.

Promotional emails will be sent where they have been requested or authorised, or where a statutory exception applies, such as the exception for certain similar services offered within an existing contractual relationship.

When we obtain data from other sources, we will provide the required information through a brief notice and easy access to supplementary information within the applicable deadlines: no later than one month after obtaining the data and, if earlier, at the first communication or when first disclosing the data to another recipient, unless a statutory exception applies. Information may be provided in layers to make it easier to read.

You may object to Marz’s direct marketing at any time and free of charge by replying to the communication, using the available unsubscribe mechanism or emailing admin@marz.biz.

After receiving your objection, we will stop using your data for that purpose, including any related profiling. We may retain the minimum information needed to honour your opt-out and prevent further contact.

5. Automation and artificial intelligence

We may use automation and artificial intelligence tools to support the organisation, updating and analysis of professional information, the preparation of communications and the prioritisation of opportunities.

Where these processes assess characteristics of identified individuals, they may constitute profiling. The relevant information will describe the purposes and the data used.

These tools are not used to make solely automated decisions that produce legal effects concerning individuals or similarly significantly affect them. Their use is subject to the same requirements regarding purpose, access, confidentiality and data protection as the rest of our systems.

6. Retention

Data relating to enquiries and contacts without a contractual relationship is retained for up to twenty-four months after the last relevant interaction, unless it is no longer needed sooner. Original form submissions are retained for up to twenty-four months after receipt; information needed for a subsequent relationship may be added to the relevant records.

Data relating to contractual relationships is retained for their duration and subsequently for the periods needed to comply with obligations and address liabilities. Data used for prospecting and marketing communications is retained until consent is withdrawn, an objection is made or twenty-four months have passed since the last relevant interaction, whichever occurs first.

Technical logs and auxiliary copies are retained for the periods necessary for their purpose, with deletion cycles and restricted access. New communications sent unilaterally by Marz do not, by themselves, restart retention periods.

We may retain data subject to statutory blocking or restricted access where necessary to comply with obligations, handle legal claims or demonstrate consent and opt-outs. Once the applicable periods expire, the data will be deleted or anonymised.

7. Access to and disclosure of data

Data may be accessed by authorised Marz personnel and service providers needed for hosting, email, sales management, business information, automation, artificial intelligence, storage and security. Their involvement is subject to their role and the relevant contractual and legal safeguards.

Data collected to manage your relationship with Marz will not be disclosed to other companies for their own advertising unless there is a legal basis permitting this and the required information is provided. Data may also be disclosed where legally required or necessary to handle legal claims.

8. International transfers

The use of certain technology services may involve processing data outside the European Economic Area. Where an international transfer takes place, Marz will apply a mechanism permitted by law, such as an applicable adequacy decision or standard contractual clauses, together with any necessary supplementary measures.

You can request information about transfers affecting your data and a copy of the applicable safeguards by emailing admin@marz.biz.

9. Your rights and contact details

You may request access, rectification, erasure, restriction of processing and data portability, and exercise your right to object, where applicable. You may also withdraw consent without affecting the lawfulness of prior processing.

Send your request to admin@marz.biz. We will only request additional identification information where necessary and proportionate. We will generally respond within one month. If an extension is warranted by the complexity or number of requests, we will inform you within that period; the extension may be for up to two further months.

You may lodge a complaint with the Spanish Data Protection Agency. Exercising your rights is free of charge, subject to the statutory exceptions for manifestly unfounded or excessive requests.

10. Security and updates

Marz applies technical and organisational measures proportionate to the risk to protect data and restrict access. The website and its forms are intended for a professional audience and are not designed to collect data from minors.

This policy may be updated when processing activities or applicable requirements change. If a change requires additional information or consent, that information will be provided or consent obtained before the relevant processing takes place.