Privacy Policy

1. Who we are

This Privacy Policy describes how SEISMO TECHNOLOGIES, S.L., operating under the brand 8Layers (“8Layers”, “we”, “us”, or “our”), collects, uses, and protects your personal data when you visit our website or interact with us through our public channels.

This Privacy Policy applies to data we collect through our website at 8layers.io, our forms, our events and webinars, and any other public-facing interaction with our company.

Important: This Privacy Policy does not cover personal data processed within the 8Layers platform once a customer registers and uses the service. That processing is governed by our Data Processing Agreement and Terms of Service, which customers accept during the registration process.

2. What information we collect

We only collect the personal data you choose to share with us or that is automatically generated when you visit our website.

Information you provide to us directly: When you fill out a form on our website, contact us, register for a demo, apply for a partnership, send us a press inquiry, or apply for a career opportunity, we may collect:

• Name and surname
• Business email address
• Company name
• Job title or role
• Country or region
• Phone number (if you choose to provide it)
• The content of your message or inquiry
• Any other information you voluntarily include in your communication

For career inquiries, we may also collect your CV, links to your professional profiles (e.g., LinkedIn), and any other information you choose to share as part of your application.

Information collected automatically: When you visit our website, we automatically collect:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent on each page
• Referring website
• General location data derived from your IP address (country, city)

This information is collected through cookies and similar technologies as described in Section 7.

Sensitive data: We do not knowingly collect sensitive personal data as defined under Article 9 of the GDPR (such as health, religion, political opinions, sexual orientation, biometric, or genetic data). Please do not include such information in your communications with us.

3. How we use your information

We process your personal data for the following purposes:

• To respond to your inquiries. When you contact us through a form, we use your data to reply, schedule demos, answer questions, and follow up as needed.
• To manage partnership applications. When you apply to become an 8Layers partner, we process your data to evaluate the application and continue the conversation.
• To manage career applications. When you apply for a position with us, we process your data to evaluate your candidacy.
• To manage event and webinar registrations. When you register for an 8Layers event or webinar, we process your data to confirm your registration, send relevant information about the event, and follow up afterwards.
• To improve our website and services. We analyze how visitors interact with our website to improve user experience and content.
• To comply with legal obligations. When required by law, regulation, or competent authorities.
• To protect our legitimate interests. This includes preventing fraud, securing our website, and protecting our rights and those of our users.

4. Legal bases for processing

Under the GDPR, we rely on the following legal bases to process your personal data:

5. Who we share your information with

We do not sell your personal data. We share it only with:

• Service providers acting on our behalf: Companies that help us operate the website, host our infrastructure, manage email communications, analyze traffic, and provide customer relationship management tools. These providers act as data processors under our instructions and are bound by appropriate contractual safeguards.
• Legal and regulatory authorities: When required by applicable law, court order, or to defend our legal rights.
• In the context of business transactions: If 8Layers is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify users in such cases as required by law.

We do not share your information with third parties for their independent marketing or advertising purposes.

6. International data transfers

Some of our service providers may process data outside the European Economic Area (EEA), including in the United States. When this happens, we ensure that appropriate safeguards are in place under Articles 44 to 49 of the GDPR, including:

• European Commission adequacy decisions when applicable,
• Standard Contractual Clauses (SCCs) approved by the European Commission, or
• Other legally recognized transfer mechanisms.

You can request additional information about specific international transfers by contacting us at privacy@8layers.io.

7. Cookies and similar technologies

Our website uses cookies and similar technologies to function properly, analyze usage, and improve your experience. We use the following categories of cookies:

• Strictly necessary cookies: Required for the basic functioning of the website. These cannot be disabled.
• Analytics cookies: We use Google Analytics to understand how visitors interact with our website. This data is aggregated and used to improve our content and user experience.
• Preference cookies: Remember your settings, such as language or display preferences.

We do not currently use marketing or advertising cookies.

When you first visit our website, you will see a cookie banner allowing you to accept or reject non-essential cookies. You can change your preferences at any time through the cookie settings link in our footer.

For detailed information about the cookies we use, see our Cookie Policy.

8. How long we keep your information

We retain your personal data only as long as necessary for the purposes described in this Privacy Policy:

• Inquiry and demo requests: Up to 24 months from the last meaningful interaction, unless the relationship progresses to a contractual stage.
• Partnership applications: Up to 24 months from the last interaction or until you request deletion.
• Career applications: Up to 12 months from the application date, unless you authorize us to keep your CV for future opportunities.
• Event and webinar registrations: Up to 24 months from the event date.
• Website analytics data: As configured in our analytics tool (typically 14 months for Google Analytics).
• Communications and records required for legal compliance: For the period required by applicable law (e.g., tax obligations, statutory limitation periods).

After these periods, your data is deleted or anonymized.

9. How we protect your information

We implement technical and organizational measures to protect your personal data from unauthorized access, loss, alteration, or disclosure. These include access controls, encryption in transit, network security measures, and internal policies on data handling.

While we take reasonable steps to safeguard your information, no system is completely secure. We cannot guarantee absolute security but commit to acting promptly if a security incident affects your personal data.

10. Your rights

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights under applicable data protection laws:

To exercise any of these rights, contact us at privacy@8layers.io. We will respond within one month of receiving your request, as required by the GDPR. We may extend this period by two months in complex cases, in which case we will inform you of the reasons. We may need to verify your identity before processing certain requests to protect your information from unauthorized access.

11. Use of AI in website interactions

Some of our website features and customer support tools may use third-party AI models to help respond to inquiries or process content you submit through our forms. When this is the case:

• The data you submit is processed by the AI provider solely to generate a response or assist us in handling your request.
• We do not authorize AI providers to use your data to train their models.
• Contractual safeguards are in place with AI sub-processors to protect your data.

This section applies only to AI used in the public website context. AI features within the 8Layers platform are governed by our Data Processing Agreement.

12. Children's privacy

Our website and services are not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at privacy@8layers.io and we will delete it.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the “Last Updated” date at the top of this policy and, where appropriate, notify you through our website or other reasonable means.

We encourage you to review this Privacy Policy periodically.