Privacy Policy

Our contact details are:

hello@workairs.co

Last updated: February 18, 2026

This privacy policy establishes the way in which personal data collected through the website www.workairs.co (hereinafter the “Website”) is processed. Our goal is to comply with the duty of information and transparency in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter “GDPR”) and the Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (hereinafter “LOPDGDD”).

1. Data Controller Identification

The data collected through this Website is controlled by:

  • Company Name: Agencia Rosa Creativa SL (operating commercially as "Workairs")

  • CIF: B56359755

  • Registered Address: Av. del Mediterraneo 2, Madrid (28007), Madrid, Spain

  • Contact Email: hello@workairs.co

  1. Scope of this Policy (Controller vs. Processor)

This Privacy Policy applies strictly to personal data collected by Workairs acting as a Data Controller (e.g., when you visit our Website, fill out a contact form to "Hire Aidan," or communicate with us directly).

Please note: When providing our core digital teammate services (Aidan), Workairs acts as a Data Processor on behalf of our B2B clients, who remain the Data Controllers of their respective leads, prospects, and business contacts. The processing of that data is governed by specific Master Services Agreements (MSAs) and Data Processing Agreements (DPAs) signed directly with our clients, not by this Website Privacy Policy.

  1. Need to Provide Personal Data

The use of certain services or functionalities of the Website (such as inquiring about our services via the contact form) requires you to provide certain personal data. Refusal to provide the data required in these cases may make it impossible to process your requests, assess your business needs, or contact you to arrange a consultation.

4. Purposes and Legal Basis of the Processing

We process your personal data for the following purposes:

Purpose A: To manage contact requests and assess your business needs.

  • Description: Processing the information submitted through our "Hire Aidan" form (Name, Work Email, Company, Role, and your optional message) to evaluate if our digital teammate is the right fit for your operations.

  • Legal basis: Your explicit consent and the application of pre-contractual measures at your request (Art. 6.1.a and 6.1.b GDPR). You may withdraw your consent at any time by emailing hello@workairs.co.

  • Data categories: Identification data, professional contact details, and any context provided regarding your business challenges.

Purpose B: For the execution of B2B contracts and service provision.

  • Description: Managing the administrative, billing, and communication needs once you become a Workairs client and we begin the onboarding and "Probation" phases for your digital teammate.

  • Legal basis: Execution of the contractual relationship (Art. 6.1.b GDPR).

  • Data categories: Identification data, economic/financial data, and professional contact details.

Purpose C: Security and fraud prevention.

  • Description: Monitoring Website usage to prevent fraudulent activities, malicious requests, or security breaches.

  • Legal basis: Legitimate interest (Art. 6.1.f GDPR).

  • Data categories: Identification data, IP addresses, and basic navigation data.

5. Retention of Personal Data

The personal data processed will be kept only for the time necessary to fulfill the purposes stated above. Once the purpose has expired (for example, if a contact request does not result in a commercial relationship), we will retain your data properly blocked for the mandatory statutory limitation periods to fulfill our legal obligations and for the formulation, exercise, or defense of legal claims (generally up to 6 years under Spanish commercial and tax regulations).

6. Data Recipients

Your personal data will not be sold or rented to third parties. It may be communicated to:

Public Bodies: Administrations, Courts, Tribunals, or Law Enforcement when necessary to comply with a legal obligation.

Service Providers: Workairs relies on highly secure third-party infrastructure and technology providers (such as secure cloud hosting and communication tools) to operate our business. These providers act as Data Processors under strict confidentiality agreements and only access data necessary to provide their services, in full compliance with the GDPR.

7. International Transfers

Workairs operates primarily within the European Economic Area (EEA). In the event that utilizing our secure technology providers entails an international transfer of data outside the EEA, we guarantee that such transfers will be strictly regulated and protected by adopting appropriate legal safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or by ensuring the destination country holds an adequacy decision.

8. Rights of the Data Subject

As a data subject, you may exercise the following rights at any time by sending an e-mail to hello@workairs.co, providing sufficient information to verify your identity:

  • Right of Access: To know if we are processing your data and to access that information.

  • Right of Rectification: To request the correction of inaccurate or incomplete data.

  • Right of Erasure (Right to be Forgotten): To request the deletion of your data when it is no longer necessary for the purposes it was collected.

  • Right to Restriction of Processing: To request we suspend processing your data under certain circumstances (e.g., while verifying accuracy).

  • Right to Data Portability: To receive your data in a structured, commonly used, and machine-readable format.

  • Right to Object: To object to the processing of your data based on legitimate interest.

  • Right to Withdraw Consent: To revoke any previously granted consent without affecting the lawfulness of processing based on consent before its withdrawal.

If you believe your data protection rights have been violated, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD) via their website: www.aepd.es.

9. Security

The personal data collected through this Website is stored in databases under the responsibility of Agencia Rosa Creativa SL. We have implemented robust technical and organizational security measures designed to guarantee the confidentiality, integrity, and resilience of your information, protecting it against unauthorized access, loss, or alteration in accordance with GDPR requirements.

10. Links to Third Parties

This Website may contain links to third-party sites. Workairs does not operate or control these external sites and is not responsible for their privacy practices, content, or security. We encourage you to review the privacy policies of any third-party websites before providing them with your personal information.