Privacy Policy

PRIVACY AND PERSONAL DATA PROTECTION POLICY

1. LEGAL FRAMEWORK, AUDIT AND ACCEPTANCE OF TERMS

This Privacy and Personal Data Processing Policy has been drawn up and implemented in strict compliance with Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE), and Regulation (EU) 2024/1689 laying down harmonised rules on Artificial Intelligence (EU AI Act).

To ensure proactive compliance, RAPIPLAGA S.L. receives ongoing advice and an annual review from the specialist firm SIGMA Consultoría Legal. Through this firm, the company keeps its Record of Processing Activities (RoPA) up to date, as well as the relevant Needs Reports regarding the Data Protection Officer (DPO) and Data Protection Impact Assessments (DPIA).

Users, customers and data subjects are informed that contacting us through any channel (web forms, instant messaging such as WhatsApp, electronic communications, phone calls) or hiring any of our services implies reading, understanding and unconditionally accepting the conditions set out in this document. Providing personal data is essential in order to deal with your requests, assess technical feasibility and manage the corresponding contractual or pre-contractual relationships.

2. IDENTIFICATION OF THE DATA CONTROLLER

  • Company name: RAPIPLAGA S.L.

  • Tax ID (C.I.F.): B44689362

  • Registered and postal address: C/ Miguel Ángel Catalán Sañudo 10, 29603 Marbella (Málaga), Spain.

  • Contact email: info@rapiplaga.com

  • Customer service phones: +34 604 88 31 80 / +34 951 25 00 52

3. PURPOSES OF PROCESSING AND LEGAL BASES

The personal data provided will be processed by RAPIPLAGA S.L. for the following purposes and on the following legal bases:

A) Contract and service management

  • Purpose: providing, carrying out, following up and invoicing environmental health, insect control, rodent control, disinfection, pest control and fumigation services.

  • Legal basis: performance of a contract or pre-contractual measures (Art. 6.1.b GDPR).

B) Preventive health monitoring, reminders and commercial communications

  • Purpose: given the seasonal and recurring nature of biological risks and pests, contacting the company or hiring our services authorises RAPIPLAGA S.L. to proactively follow up on the premises. This includes sending reminders of periodic inspections, notices of technical and health maintenance, and commercial proposals for products or services related to environmental health.

  • Legal basis: the Controller’s legitimate interest (Art. 6.1.f GDPR), based on the need to ensure the continued health and hygiene of the premises, the effectiveness of previous treatments and commercial continuity under Art. 21.2 LSSI-CE (soft opt-in). Users may object to or withdraw this authorisation at any time, free of charge.

C) Customer service assisted by Artificial Intelligence (AI)

  • Purpose: fast, uninterrupted and optimised handling of enquiries, follow-up of commercial leads, appointments and incidents through online and telephone channels using AI systems.

  • Legal basis: pre-contractual measures, implied consent when interacting through those channels and the company’s legitimate interest in ensuring immediate and continuous technical assistance (Art. 6.1.b and 6.1.f GDPR).

D) Secure processing in private technology environments

  • Purpose: advanced processing of information and technical documentation through closed, private infrastructures. RAPIPLAGA S.L. processes data ensuring strict confidentiality of the original data, without using anonymisation processes to sell data to third parties, and ensuring that no personal information is used to create, train or improve external or in-house Artificial Intelligence models.

  • Legal basis: legitimate interest and performance of contractual obligations (Art. 6.1.b and 6.1.f GDPR).

4. INTEGRATION AND USE OF ARTIFICIAL INTELLIGENCE (AI) TECHNOLOGIES

In compliance with Article 50 of the EU Artificial Intelligence Act (EU 2024/1689) and the GDPR transparency principles, we explain how AI systems are used, with safeguards, in our daily operations:

4.1. Automated voice switchboard and message handling

Phone calls may be answered by an AI-based voice assistant (for example, outside business hours or at peak times). The system will expressly state that it is virtual. The tool securely transcribes the message for the sole purpose of recording the request, and the transcript is reviewed by our staff so that appropriate action can be taken.

4.2. Conversational assistant and proactive management on WhatsApp

Interactions through our corporate WhatsApp channel are fully or partly assisted by Artificial Intelligence technology. When users start a conversation, the system will inform them of this. Users also accept and understand that, in communications started by RAPIPLAGA S.L. (such as commercial follow-ups, notices or contact management), the virtual assistant may operate from the outset. Likewise, in conversations handled by a human agent, the AI assistant may step in, take over from the agent or resume the conversation automatically during periods of inactivity or when the human operator is temporarily unavailable. The sole purpose of this mechanism is to provide continuous service without unjustified waiting, operating within predefined parameters and under the supervision of our team.
AI technology for WhatsApp developed by Tubot

4.3. Private enterprise cloud AI tools

In administrative, technical and advisory work, we use cloud-based Artificial Intelligence solutions with enterprise-grade licences and private environments under data processing agreements (Art. 28 GDPR). We guarantee that personal data, customer histories, enquiries or documents entered into these systems are NOT stored permanently, are NOT shared with third parties and are NOT used under any circumstances to train, provide feedback to or improve AI models.

4.4. Local AI server and infrastructure (on-premise hardware)

To process the most sensitive data and critical internal reports, RAPIPLAGA S.L. has a local processing server with its own hardware. The AI models run in isolation within our private corporate network (on-premise). This processing ensures that sensitive information never leaves our physical premises and is not exposed to international transfers, meeting the highest standards of security and data minimisation.

4.5. No purely automated decisions

No technological or Artificial Intelligence system used by the company makes decisions with binding legal effects or that significantly affect users on a purely automated basis under Article 22 GDPR. Every interaction, quote or diagnosis produced by AI is instrumental and always subject to final human validation.

5. DATA RETENTION

Personal data will be kept for as long as the commercial or contractual relationship continues or the mutual legitimate interest in preventive health follow-up and reminders remains.

Once that relationship ends, or when customers exercise their right to erasure, the information will be technically blocked (Art. 32 LOPDGDD). During that period, the data will be available exclusively to the competent Courts, Tribunals and Public Administrations for the strict limitation periods for legal liabilities (generally between 3 and 5 years for employment and tax matters, and up to 6 years under the Commercial Code). After those periods, the information will be permanently and securely destroyed. We do not keep personal information indefinitely in databases or AI systems.

6. DISCLOSURE TO THIRD PARTIES, SYSTEM SECURITY AND DATA BREACHES

RAPIPLAGA S.L. does not sell, transfer or trade personal data to third parties. We only share the information that is strictly necessary with providers of operational services (banks, accountants or enterprise technology infrastructure providers) who act under a Data Processing Agreement.

Our systems, both on local servers and in private cloud infrastructures, have advanced technical and organisational measures: encryption protocols, next-generation firewalls and restricted access. Users release the Company from liability arising from security breaches attributable to their own negligence in looking after their mobile device or to vulnerabilities inherent in public telecommunications networks.

Data breach protocol: in the event of any security breach affecting personal data, RAPIPLAGA S.L. has early detection protocols in place and undertakes to notify the incident within a maximum of 48 hours to the Spanish Data Protection Agency (AEPD) and to the data subjects themselves when required by law.

7. DATA SUBJECTS’ RIGHTS

Under current regulations, users may exercise the following rights at any time:

  • Access, rectification and erasure (“right to be forgotten”).

  • Objection: particularly useful if you no longer wish to receive treatment reminders or environmental health proposals based on the company’s legitimate interest.

  • Restriction of processing and portability.

To exercise these rights, users must send a written request, enclosing proof of identity (ID card/passport/NIE), by:

  • Email: info@rapiplaga.com

  • Post: RAPIPLAGA S.L. – C/ Miguel Ángel Catalán Sañudo 10, 29603 Marbella (Málaga), Spain.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es) if you consider that your rights have been infringed.

8. UPDATES TO THIS POLICY

RAPIPLAGA S.L. reserves the right to modify or update this Privacy Policy unilaterally to adapt it to new legislation, AEPD guidelines or new technological implementations. Continued use of the services after any modification implies full acceptance of the terms in force.

This English version is a translation provided for information purposes. In the event of any discrepancy, the Spanish version shall prevail.

Last updated 10-08-2026 
*Additional information on the use of AI and broader general details included.
TALK TO AN EXPERT
TALK TO AN EXPERT