Your right to erasure
Article 17 of Regulation (EU) 2016/679 (GDPR) and Article 15 of Spanish Organic Law 3/2018 (LOPDGDD) give you the right to have your personal data erased without undue delay where:
- It is no longer needed for the purpose it was collected for.
- You withdraw the consent the processing was based on and there is no other legal basis.
- You object to the processing and there are no overriding legitimate grounds, or you object to direct marketing.
- It has been processed unlawfully.
- It must be erased to comply with a legal obligation.
- It was collected in connection with information society services offered to children.
Exercising this right is free. We could only charge a reasonable fee, or refuse to act, if a request were manifestly unfounded or excessive, in particular because it is repetitive (Art. 12.5 GDPR), and we would explain why.
How to request deletion
You can ask us through any of these channels:
- Form: fill in the form below. Your email app will open with the request ready to send.
- Email: write to legal@automationlab.agency with the subject "Data deletion request".
- Post: write to RENEWEARTH SL, Paseo de Reding 43, 1º Izq, 29016 Málaga, Spain, marked "Data protection".
Include your name, a way to contact you, the data or services concerned (for example, your subscription email or social media username) and whether you want all your data deleted or only part of it. You don't need to use any particular template. Any clear request is valid.
Connected apps and social media
If you connected to an AutomationLab app or service using your Facebook, Instagram, Google, YouTube or TikTok account, you can:
- Remove access from your account settings on the platform: on Facebook and Instagram, under "Settings" › "Apps and websites"; on Google and YouTube, at myaccount.google.com/permissions; on TikTok, under "Settings and privacy" › "Security" › "Apps and services". Once access is removed, we stop receiving new data from that platform.
- Ask us to delete the data we already received from the platform (name, user ID, email, profile picture, interactions), using the form above and stating the platform and your username.
When we receive your request we will give you a reference number you can use to check its status by writing to legal@automationlab.agency. Comments or messages you posted on our profiles are hosted by the platform itself. You can delete them yourself, and we will remove any you point out to us where the platform allows.
Identity verification
We need to make sure the request comes from the data subject, so we don't delete someone else's data. Usually it is enough for you to write from the email address you use with us or to confirm access to your account. Only if we have reasonable doubts about your identity will we ask for proportionate additional information (Art. 12.6 GDPR), and never more than necessary.
If you act on behalf of someone else, you must prove your authority to represent them (Art. 12.1 LOPDGDD).
What data we delete
Unless you tell us otherwise, we will delete from our systems and our processors' systems all personal data we process about you, including:
- Contact and identification data.
- Messages, forms and correspondence.
- Your newsletter subscription and marketing lists. We keep your email only on a suppression list so we never contact you again, which the law allows and which protects your choice (Art. 23 LOPDGDD).
- Data received from connected platforms and apps.
- CVs and application data.
- Analytics data linked to your identifiers, where it is technically possible to identify it.
- Our own recordings and content in which you appear (see section 11).
When we can't delete all data
Article 17.3 GDPR sets out exceptions. We may keep the strictly necessary data where:
- The law requires us to keep it: invoices and tax records for 4 years (Art. 66 Spanish General Tax Law 58/2003) and accounting and commercial records for 6 years (Art. 30 Spanish Commercial Code).
- It is needed to establish, exercise or defend legal claims, for the applicable limitation period.
- It is needed to exercise freedom of expression and information, for example in journalistic content or content of public interest.
- There are public interest reasons or archiving, research or statistical purposes provided for by law.
In those cases we will explain in writing what data we keep, why and until when, and delete the rest.
Blocking of data
Under Article 32 LOPDGDD, where erasure applies but we are obliged to retain data, the data is blocked: it is identified and set aside with technical and organisational measures that prevent any processing, including viewing. It may only be made available to courts, the Public Prosecutor or competent public authorities, in particular data protection authorities, to establish possible liabilities. When the period ends, it is securely destroyed.
Timelines and confirmation
- We will acknowledge receipt with a reference number.
- We will act on your request and tell you what we did within one month of receipt. This can be extended by two further months if the request is complex or we receive many, in which case we will tell you within the first month and explain why (Art. 12.3 GDPR).
- If we decide not to act on your request in whole or in part, we will tell you within one month with our reasons and inform you of your right to complain to the AEPD and to seek a judicial remedy (Art. 12.4 GDPR).
- We will reply by the same channel you used, unless you ask for another.
Third parties and processors
We will pass your request on to the processors who handle your data on our behalf (hosting, email, CRM, automation or AI tools, etc.) so that they delete it too.
If we have disclosed your data to other recipients, we will inform them of the erasure unless this is impossible or involves disproportionate effort, and we will tell you who they are if you ask (Art. 19 GDPR). If we made your data public, we will take reasonable steps to inform other controllers processing it that you have asked for any links, copies or replications to be erased (Art. 17.2 GDPR).
Backups
For technical reasons, your data may remain in encrypted backups until they are overwritten in their normal cycle, within a maximum of 35 days. During that time it is not used for any purpose and, if a backup ever had to be restored, we would re-apply your deletion.
Image, voice and published content
If you appear in content published on our channels, you can revoke your consent to the use of your image or voice at any time (Art. 2.3 Spanish Organic Law 1/1982). We will remove the content from our own channels, or edit you out, within a reasonable time, without prejudice to any compensation that may be legally due for damage caused, including justified expectations.
We cannot delete copies that unrelated third parties have downloaded or republished, but we will help you identify them and, where appropriate, ask the platform to remove them.
Right to be forgotten
Articles 93 and 94 LOPDGDD recognise the right to be forgotten in search engines and on social network services. To have a search result containing your data delisted, contact the search engine (for example, Google or Bing) through its dedicated form. For content posted by you or others on social networks, contact the platform. For content published on our own profiles, we will handle your request as described on this page.
Other options
If you don't want to delete all your data, you can:
- Unsubscribe from marketing using the link in every email (Art. 21 LSSI-CE).
- Object to a specific processing activity (Art. 21 GDPR).
- Restrict processing while a dispute is resolved (Art. 18 GDPR).
- Get a copy of your data before it is deleted, through the right of access (Art. 15 GDPR) or portability (Art. 20 GDPR).
- Correct inaccurate data (Art. 16 GDPR).
- Manage cookies from the site's settings panel. See our Cookie policy.
Minors and deceased persons
Minors. People aged 14 or over can exercise this right themselves. For children under 14, their parents or guardians exercise it (Arts. 7 and 12.6 LOPDGDD). We will delete as a priority any data from a minor collected without valid authorisation.
Deceased persons. People linked to the deceased for family or de facto reasons, and their heirs, may request erasure of the deceased's data by providing proof of death and of the relationship, unless the deceased expressly prohibited it or the law provides otherwise (Arts. 3 and 96 LOPDGDD).
Complaints to the AEPD
If we do not reply in time or you disagree with our answer, you can lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es, or with the supervisory authority in your EU country of residence. More information in our Privacy policy.
In the event of any discrepancy between the Spanish and English versions of this page, the Spanish version shall prevail.