Privacy policy

This Privacy Policy governs the processing of personal data of those who access and use www.sennia.io and the associated digital platform. The data controller is Sennia Global Technologies S.L., with tax ID B26596502 and tax address in Barcelona, Spain. Any data protection query may be sent to protecciondedatos@sennia.io.

Sennia is a SaaS platform for teachers and educational centers. Personal data is processed in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights, Law 34/2002 on Information Society Services and Electronic Commerce, and all other applicable European and Spanish digital regulations.

At Sennia, compliance is not understood as a mere formality, but as part of our ethical commitment to the education community. We therefore integrate the principles of lawfulness, transparency, data minimization, security and proactive responsibility into the design and operation of the platform.

For Sennia, data protection is not an administrative procedure, but a way of caring for the education community that places its trust in our digital environment.

Processing includes both data provided during registration on the website and data generated through use of the digital platform. This includes identification data, professional information required to contextualize the service, data derived from the contractual relationship and technical data linked to use of the digital environment.

Sennia processes mandatory identification data such as name and email address when an account is created. It also collects professional information such as educational stage, territory or role, necessary to adapt the artificial intelligence assistants to the relevant regulatory framework. When a subscription is activated, the data required for contractual, administrative and billing management is processed.

Use of the platform may generate data linked to interactions with assistants, as well as technical data such as IP address, session identifiers, browser or device type, for security and service improvement purposes.

Sennia does not request special categories of personal data or data unnecessary for the purpose of the service.

Personal data is processed to allow access and authentication on the platform; personalize assistant behavior according to the user's professional profile; manage subscriptions, trial periods and payments; maintain the security of the digital environment; respond to queries; and comply with legal obligations.

Data will not be used for purposes incompatible with the provision of the digital education service offered.

Personal data processing is based on:

• Performance of the service contract accepted by the user when registering and subscribing to the platform (Art. 6.1.b GDPR).
• Application of pre-contractual measures at the request of the data subject, when processing is necessary to manage registration or provide pre-contractual information.
• Consent, where required, for example for certain cookies or informational communications.
• Compliance with legal obligations applicable to the responsible entity (Art. 6.1.c GDPR).
• Sennia's legitimate interest, particularly to improve service quality, guarantee platform security, prevent misuse and reinforce protection of the digital environment, always respecting users' rights and freedoms (Art. 6.1.f GDPR).
• In all cases, processing is carried out in accordance with the principles of lawfulness, fairness, transparency, data minimization and proactive responsibility.

Sennia integrates assistants based on artificial intelligence technologies that generate guidance proposals from the information entered by the user.

These systems do not make automated decisions with legal effects, nor do they produce significant consequences without human intervention. Technology supports, but does not decide.

Validation, adaptation and application of generated content always belongs to the professional using the tool. We firmly believe that artificial intelligence can help people think better and with greater clarity, but never replace the presence, judgment or responsibility of those who support students in the classroom.

At Sennia we apply internal responsible AI principles aligned with the current European regulatory framework on data protection and technology regulation. For us, innovation only makes sense when linked to ethics.

For the technical operation of certain assistants, Sennia may rely on specialized technology providers, including OpenAI. Data processing by such providers is carried out in accordance with their own privacy policies and terms of use.

Sennia does not create profiles for commercial purposes or perform automated processing intended to evaluate personal aspects beyond the technical operation of the service.

• OpenAI Privacy Policy

When the service is contracted by an educational center, Sennia may act as processor for the data of users linked to the educational center, in accordance with the contract signed by the parties. In these cases, processing will be carried out exclusively according to the educational center's documented instructions and within the framework of the contracted service.

To provide the service, Sennia relies on technology providers that act as processors. These include cloud infrastructure, web hosting, network protection and payment gateway services.

These providers access only the data strictly necessary to provide the service and operate under contracts that guarantee compliance with Regulation (EU) 2016/679 (GDPR) and other applicable European data protection regulations.

For payment services, Sennia uses the secure Stripe gateway. Data processing by this provider is governed by its own Privacy Policy.

Sennia's main database is hosted in the European Union.

If any technology provider involves an international data transfer outside the European Economic Area, it will be carried out only with the appropriate safeguards provided by current regulations, such as standard contractual clauses approved by the European Commission.

Additional information on safeguards for international transfers of personal data is available on the official website of the Spanish Data Protection Agency (AEPD).

At Sennia we understand that digital trust is inseparable from professional trust, so we act with rigor and transparency in every technology decision.

• Stripe Privacy Policy
• Safeguards for international personal data transfers

Personal data will be kept while a contractual relationship exists and during the legally required periods to address liabilities arising from the service. Once those periods have ended, data will be deleted or blocked in accordance with applicable regulations.

Users may exercise at any time the rights recognized by data protection regulations. These rights include:

• Right of access: to know what personal data we are processing and for what purpose.
• Right of rectification: to request correction of inaccurate or incomplete data.
• Right of erasure: to request deletion of data when it is no longer necessary or when there is a legal basis for doing so.
• Right to object: to object to certain processing based on legitimate interest.
• Right to restriction of processing: to request temporary suspension of processing in certain cases.
• Right to portability: to receive data in a structured format and transmit it to another controller where technically possible.
• To exercise any of these rights, requests must be expressly sent to protecciondedatos@sennia.io if made electronically, or by post to the registered address indicated in the controller identification section.
• To guarantee the security and confidentiality of information, the applicant must prove their identity through a valid document confirming that they are the holder of the data in relation to which the right is exercised.
• If users consider that the processing of their data does not comply with current regulations, they may file a complaint with the Spanish Data Protection Agency (AEPD).
• At Sennia we understand that digital rights are not an administrative procedure, but a way of protecting the trust placed in our environment.

• Spanish Data Protection Agency

Sennia adopts appropriate technical and organizational measures to protect information against unauthorized access, loss, alteration or improper disclosure, taking into account the state of the art, the nature of the SaaS service offered and the risks associated with personal data processing.

Implemented measures include, among others:

• Authentication, authorization and session-revocation controls for critical access.
• Infrastructure protected through network security and monitoring services.
• Internal access control and review protocols.
• Continuous update and maintenance policies for the technological environment.
• Access credentials must comply with the platform's minimum security standards.
• If a password is forgotten, the user may request a new password through the secure recovery procedure enabled in the environment, using verification of the email associated with the account.
• Security of the digital environment is not an added feature, but part of Sennia's structural commitment to the education community and responsible technology use.
• For more information about cookies and similar technologies, please see our Cookie Policy.

This Policy may be updated when necessary to adapt it to regulatory, technical or service model changes. The version published on the website will always be the current version.