Data Controller
[Company legal name], with Tax ID [NIF/CIF], registered address at [Registered address]. Email: contacta@genjoprojects.com
Data We Collect
Through the contact form we may collect: first and last name (if provided), email address, clinic name (if provided) and the content of the message.
We do not collect special categories of data or sensitive personal data.
Purposes
To respond to your information request or free diagnosis inquiry.
To manage communication with potential clients of Genjo Projects.
To send information about the agency's services, only with your explicit consent.
Legal Basis
Your consent (Art. 6.1.a GDPR) for the contact form and commercial communications.
Genjo Projects' legitimate interest (Art. 6.1.f GDPR) for follow-up on diagnosis requests, always respecting your rights.
Data Retention
Your data will be retained while there is an active relationship or legitimate interest and you have not requested deletion. The maximum retention period is 3 years from the last contact.
Recipients
We do not share personal data with third parties except as required by law. Technology providers may access data as processors, subject to GDPR-compliant agreements.
Hilo: Email Processing
Hilo is our email management tool. It only accesses Gmail accounts whose owner has expressly authorised it through Google's consent screen, and solely in order to classify messages by priority, label them in Gmail, detect conversations still awaiting a reply, and prepare drafts.
Hilo does not send email on its own: drafts are reviewed and sent by a person. It does not delete messages or modify existing ones either.
The full body of messages is not stored: it is used for classification and then discarded. The database retains only the message and thread identifiers, the subject, the name and address of the sender or recipient, the date, an excerpt of at most 300 characters, and the assigned category and priority.
This data is shared with OpenAI, which performs the classification and does not use it to train its models; with Supabase, where the database resides; and with Telegram, through which alerts are delivered. It is not disclosed to anyone else, nor used for advertising or profiling.
Resolved messages older than 90 days lose their subject, sender and excerpt, retaining only the date, category and priority. After 365 days they are deleted entirely. Anyone who has connected their account may revoke access at any time from their Google account permissions page (myaccount.google.com/permissions); from that moment Hilo can no longer read anything.
Limited Use of Google Data
Hilo's use of information received from Google APIs adheres to the Google API Services User Data Policy (developers.google.com/terms/api-services-user-data-policy), including its Limited Use requirements.
Specifically: data obtained from Gmail is not used for advertising, is not sold to third parties, is not used to train generalised artificial intelligence models, and is not read by any human except where the account owner expressly requests it, where necessary for security purposes, or where required by law.
Your Rights
You may exercise your rights of access, rectification, erasure, objection, restriction, and portability by emailing contacta@genjoprojects.com with the subject 'Data Protection'.
You also have the right to lodge a complaint with the Spanish Data Protection Authority (www.aepd.es).
Security
We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or alteration.
Contact
For any questions about the processing of your data, write to contacta@genjoprojects.com
Last updated: 26 September 2026
Go back