<span  class="text-green-bold" >1.</span> <span  class="bold" >Registration. </span> Registration. This purpose allows Rili to carry out all relevant activities necessary to complete the registration procedure for the Services, including authorizing Rili to send electronic communications to the User in order to validate the User’s registration.

<span  class="text-green-bold" >2.</span> <span  class="bold" >Management of the services offered by Rili.</span> This purpose allows Rili to process the personal data of Users to manage any matter related to the Services offered by Rili, including, among others: name, surname, email address, user name and, where appropriate, payment data for managing subscriptions and transactions within the Services, biometric data such as facial image and voice to generate metahumans as part of the Services under registration. These data are converted into mathematical vectors that, when generated, prevent the original personal data from being retrievable, being only accessible to the system that generated it.

Finally, this purpose also allows Rili to carry out statistical studies with Users’ information in order to improve its service and/or design new functionalities for the Services.

<span  class="text-green-bold" >3.</span> <span  class="bold" >Monitor the User’s interaction with the Services through the installation of cookies in your browser. </span> Through this purpose, Rili may install different types of cookies on the User’s device/browser provided that the User has expressly consented to their installation.

<span  class="text-green-bold" >4.</span> <span  class="bold" >Sending commercial communications (discounts, promotions and special offers) on Rili products and services that may be of interest to the User and that are linked to the services provided.  </span> This purpose allows Rili to send electronic commercial communications relating to those Rili products and services that are similar to the services contracted by the User, including, but not limited to, special offers and discounts applicable to the services.

<span  class="text-green-bold" >5.</span> <span  class="bold" >To manage and resolve queries and other requests from Users relating to the Services.  </span> This purpose allows Rili to process Users’ personal data in order to resolve any incident (regardless of its nature) that Users may have during the use of Rili services (notifying defects or system failures, claiming refunds, etc.).

<span  class="text-green-bold" >6.</span> <span  class="bold" >Elaboration of User profiles, for the purpose of analysing the interests and behaviour of the User, using the content viewed, their way of interacting with the Services and the elements and technical data used in them, such as the browser used, the computer system used and information on the hours of use of the Services </span> .

For the elaboration of such profiles, automated decisions will be taken in order to provide a value proposition more tailored to the interests of the interested party. Automated decisions means decisions made solely on the basis of automated processing of the user’s personal data. This means processing using, for example, software code or an algorithm, which does not require human intervention. Automated decision is used to develop a profile about the user in order to customize a metahuman capable of getting to know the user, recalling important information about the user, and provide interactive feedback and conversations.

The above information is processed by means of OpenAI’s artificial intelligence tool, ChatGPT, which consists in a natural language processing model that leverages context understanding and logic that ponders the probability and suitability of certain words or phrases based on context and user input. Rili understands that this profiling does not produce legal effects concerning the user.

<span  class="bold" >Consent [Article 6(1)(a) GDPR]. </span>  The User will be deemed to have given consent when he/she checks the consent box appearing on the registration form, accepting Rili’s Terms and Conditions and this Policy.

The processing is necessary for the performance of a contract to which the User is a party [Article 6(1)(b) of the GDPR]. The processing of your personal data for the purposes contained in the first paragraph of the left column is necessary to comply with the provisions of the Terms and Conditions of use previously accepted by the User. The User is responsible for obtaining all necessary consents and providing the information required to enable the use and receipt of the Services by the User and the access, storage and processing by Rili of the data provided by the User. Likewise, any use of the Services must occur with the utmost respect for the rights to honor, privacy or image of individuals, and with the consent or authorization of their owners or rightful claimants. Finally, with regard to the performance of analytical/statistical studies, Rili understands that this purpose (management and provision of the Services) is compatible with the main purpose for which the User’s personal data is processed.

<span  class="bold" >Consent [Article 6(1)(a) GDPR]. </span> Consent shall be understood to have been granted by the User when he/she accepts the cookie notice displayed when accessing the Services. Some of the cookies installed are strictly necessary for the operation of the Services. In this sense, these cookies do not require the User’s consent.

<span  class="bold" >Consent [Article 6(1)(a) GDPR]. </span> The User will be deemed to have given consent when he/she checks the consent box appearing on the registration form, accepting Rili’s Terms and Conditions and this Policy.

The processing is necessary for the performance of a contract to which the User is a party [Article 6(1)(b) of the GDPR]. The processing of your personal data for the purposes contained in the first paragraph of the left column is necessary to comply with the provisions of the Terms and Conditions of use previously accepted by the User. The User is responsible for obtaining all necessary consents and providing the information required to enable the use and receipt of the Services by the User and the access, storage and processing by Rili of the data provided by the User. Likewise, any use of the Services must occur with the utmost respect for the rights to honor, privacy or image of individuals, and with the consent or authorization of their owners or rightful claimants. Finally, with regard to the performance of analytical/statistical studies, Rili understands that this purpose (management and provision of the Services) is compatible with the main purpose for which the User’s personal data is processed.

<span  class="bold" >Consent [Article 6(1)(a) GDPR]. </span> Consent shall be understood to have been granted by the User when he/she accepts the cookie notice displayed when accessing the Services. Some of the cookies installed are strictly necessary for the operation of the Services. In this sense, these cookies do not require the User’s consent.

Legitimate interest in the processing [Article 6(1)(f) GDPR]. The User’s data may be processed on the basis of Rili’s legitimate interests in the analysis, optimization and economic operation of the Services.

Rili may process the User’s personal data for the duration of his or her status as a registered User of the Services and/or until he or she requests the cancellation or deletion of his or her Personal Data. Thereafter, Rili may keep the User’s personal data duy blocked for a period of 5 years.

Rili may process the User’s personal data for this purpose for as long as the User remains a registered User of the Services and/or until the User requests the cancellation or deletion of his or her Personal Data. Thereafter, Rili may keep the User’s personal data duly blocked for a period of 5 years. With regard to the use of Users’ personal data for statistical analysis, all personal data will be duly anonymized, making it impossible to identify Users and ensuring that the anonymization process is not reversible. Once the data has been anonymized, Rili will be able to process the statistical and irreversible information indefinitely.

The data will be retained for  the period of validity of the accepted cookie. Notwithstanding the foregoing, the User may block, delete or disable cookies at any time. For more information on the cookies we install, their specific retention periods and how to uninstall, block or delete cookies, please visit our Rili.ai

Rili may process personal data indefinitely until the User unsubscribes/opposes the processing of his/her personal data for this purpose. The User may unsubscribe/opt out of the processing of his/her personal data for the purpose described herein through the unsubscribe procedure provided for in each communication he/she receives.

Rili may process the User’s personal data until the settlement or resolution of the corresponding incident and/or query. Thereafter, Rili may keep the User’s personal data duly blocked for a period of 5 years.

Rili may process personal data indefinitely until the User unsubscribes/opposes the processing of his/her personal data for this purpose. You have the right to object to our use of the profiling described in this section. You may do so in accordance with the method described in section 6 of this policy.

In accordance with the RGPD, Rili will process the User’s personal data for the purposes indicated above. Once these purposes are no longer necessary or have ended, Rili will keep the User’s personal data duly blocked for the retention periods also shown above. The blocking of personal data means that Rili will only be able to process the User’s personal data collected for any of the above purposes in order to meet any liabilities that may arise in connection with such purposes. Rili guarantees the deletion of the User’s personal data once the above-mentioned retention periods have expired.

Users are also informed of their right to revoke any consent given for the processing of their personal data. To properly exercise this right, please refer to the “Rights of the data subject” section of this Privacy.

‍

3. - SECURITY MEASURES

Rili has adopted the security levels of protection of personal data legally required by current legislation and has installed appropriate technical and organizational measures in order to ensure the security of personal data of Users. Thus, Rili’s security measures have been designed to protect Users’ personal data against destruction, loss, misuse, alteration, unauthorized access and/or theft. Rili has designed its security measures based on criteria such as the scope, context, purposes of the processing, the current state of the art and the risks involved in a given processing activity.

Users are also informed of their right to revoke any consent given for the processing of their personal data. To properly exercise this right, please refer to the “Rights of the data subject” section of this Privacy Policy.

‍

4. - RECIPIENTS OF PERSONAL DATA

Personal data may be transferred to the following third party recipients:

• Subsidiaries and affiliates of Rili. Manage the use of the Services in the different territories in which Rili is present.
• Third-party cookie providers. You can consult the complete list of cookie providers and the cookies used for the collection of your data to which the providers will have access in our Rili.ai.
• Banking entities, to validate transactions and payment for the use of Rili services.
• To entities and bodies of the competent public administration, including local governments or municipalities, if Rili is legally obliged to provide them with the User’s personal data.

Also, some entities subcontracted by Rili may have access to the User’s personal data and information as Processors of Rili. These entities will process Users’ personal data on behalf of Rili and, in any case, in accordance with Rili’s instructions and in strict compliance with the RGPD. In particular, the OpenAI entity will provide Rili with STT, image generation and conversational chat services, the De-Identification Ltd. entity will provide Rili with lip sync, voice cloning and TTS services, and the Google Cloud entity will provide Rili with STT, TTS and storage services. OpenAI’s privacy policy is available at the following link, while De-Identification Ltd.’s privacy policy is available at this link and Google Cloud’s privacy policy is available at the following link.

‍

5. - INTERNATIONAL TRANSFERS OF PERSONAL DATA TO THIRD COUNTRIES

As mentioned above, in order for Rili to provide the Services, Users’ personal data will be communicated to entities subcontracted by Rili, some of which may be located in third countries outside the European Economic Area (EEA).
In this regard, and in accordance with the RGPD, Rili will only communicate Users’ personal data to those entities that are able to provide adequate guarantees or that are located in an appropriate territory duly recognized by the European Commission.

‍

6. - RIGHTS OF THE INTERESTED PARTY

The User may exercise any of the following rights before Rili. To exercise such rights, the User must send a request to the following e-mail address: admin@rili.ai. If the request does not meet the necessary requirements, Users are informed that Rili may request its modification.

Additionally, if the User considers that Rili has not adequately addressed his or her request for rights, he or she may file a complaint against Rili before the competent Control Authority (Autorité de protection des données).

‍

7. - CHILDREN UNDER 18 YEARS OF AGE

The Services are not intended for users under the age of 18. No one under the age of 18 may provide any information to Rili through the Services. Rili does not knowingly collect personal data from children under the age of 18. If a potential User is under the age of 18, you must not use or provide any personal data through the Services or through any of its features, or provide any information about yourself to Rili, including your name, address, telephone number, email address or any screen name or user name you may use.

‍
If Rili discovers that personal data has been collected or received from a prospective User under the age of 18 without verification of parental consent, such information will be deleted. If the User believes that Rili may have information from or about a child under the age of 18, the User should contact Rili at admin@rili.ai. so that the case can be examined further.

‍

8. - CHANGES TO OUR PRIVACY POLICY

It is Rili’s policy to post any changes to this Policy. If material changes are made to the way in which Users’ personal data is processed, Rili will notify Users by e-mail to the e-mail address that the registered User has specified in his or her account. The date of the last revision of this Policy is identified at the top of the page. Registered Users are responsible for ensuring that their e-mail addresses are appropriately updated so that Rili can notify them of any changes to this Policy.If Rili discovers that personal data has been collected or received from a prospective User under the age of 18 without verification of parental consent, such information will be deleted. If the User believes that Rili may have information from or about a child under the age of 18, the User should contact Rili at admin@rili.ai. so that the case can be examined further.