Privacy Policy

1. Data Controller

In compliance with Regulation (EU) 2016/679, of April 27, 2016 ("GDPR"), and Organic Law 3/2018, of December 5 ("LOPDGDD"), we inform you that the personal data collected through this website, contact forms, applications, services and other channels of Lantanis will be processed by:

Responsible: Lantanis Robotics S.L.
NIF/CIF: B93917789
Registered office: Ctra. de Toledo, 19, 28300 Aranjuez, Madrid, Spain
Email: info@lantanis.com
Website: www.lantanis.com

Hereinafter, "Lantanis".

This Privacy Policy explains what personal data we may process, what we use it for, what the legal basis for each processing is, how long we may keep it, with whom we may share it, and what rights you may exercise.

This policy applies to data processing carried out through Lantanis websites, forms, applications and services that refer to this Privacy Policy.

Private Our commitment to privacy.

At Lantanis, we understand privacy as an essential element in the development of autonomous robotics and artificial intelligence systems.

We aim to apply the principles of lawfulness, transparency, data minimisation, purpose limitation, accuracy, retention period limitation, integrity, confidentiality and proactive liability.

In particular, we will try to process only the personal data that are adequate, relevant and necessary for each specific purpose and not use them later for purposes incompatible with those for which they were obtained.

3. What personal data can we process?

Depending on your relationship with Lantanis and the services you use, we may process different categories of data.

Contact

in detail

Names and surnames.
Email address.
Telephone Num.
Company or organization you belong to.
Professional position or function.
Data included in the communications you send us.

This data may be provided, for example, when you request information, a demonstration, a meeting or contact us.

3.2. Account details

If certain features of Lantanis require a user account, we may process the data necessary to create, maintain and protect that account, such as:

Name.
Email.
User identification.
Credentials and data related to authentication.
Account settings
Information related to the use of the available functionalities.

Passwords, where they exist, must be stored using appropriate security mechanisms and will not be used for purposes incompatible with the authentication and security of the account.

3.3. Data related to products and services

When you use Lantanis products or services, we may process information necessary to:

Providing the service
Manage installations and deployments.
Facilitate downloads or updates.
Providing technical assistance.
Manage licenses or authorizations for use.
Staying Secure
Diagnose errors.
Improve the performance of our products.

The specific type of information will depend on the product, service and functionalities used.

3.4. Technical and usage data

When you access our websites, applications or services, certain data may be generated automatically, such as:

IP address.
Date and time of access.
Browser type and browser version
Operating system.
Type of device.
Technical identifiers.
Connection info
Information on the functionalities used.
Information about errors and technical events.
Data necessary to ensure the security of our systems.

This data may be used to maintain the operation, security and stability of our services.

3.5. Communications with Lantanis

When you contact us by email, form, phone or other enabled channels, we may process:

Contact
The content of your communications.
The files or documents that you voluntarily send us.
The information needed to respond to your request.
Information related to the subsequent management of the business relationship.
3.6. Information related to robotics, facilities and systems

Lantanis products and services can operate in robotic, industrial or professional environments.

When a customer uses our products, certain technical or operational data may be processed depending on the specific configuration and architecture of the contracted service.

This may include information relating to:

System Settings
Status and operation of the software.
Technical events.
Errors and diagnoses.
Robot configuration.
Installed skills or functionality.
Information needed to download, update or manage software.
Technical information needed to provide support.

Important: We do not assume that all data generated by a robot is automatically personal data. When information does not make it possible to directly or indirectly identify a natural person, it will not necessarily be considered personal data under the GDPR.

When Lantanis processes personal data on behalf of a business client following its instructions, said client may act as data controller and Lantanis as data processor, in which case the processing will be additionally governed by the corresponding processing agreement.

4. Data we don't need you to provide

You must not deliberately send us particularly sensitive data or personal information that is not necessary for the purpose for which you contact us.

In particular, unless there is a legitimate reason and it is expressly requested, we recommend that you do not include in forms or communications:

Health data
Biometric data
Information about ideology, religion, or union membership.
Data relating to sexual orientation.
Information about convictions or criminal offenses.
Any other special category of personal data.

If we accidentally receive information that is not necessary for the corresponding purpose, we may proceed to delete it when appropriate.

5. Where do we get the data?

We usually collect the data directly from you, for example when:

Fill out a form.
You request a demo.
You are requesting information.
Create an account 
You download or use a product.
Contact our team.
You hire or use any of our services.

In certain circumstances, we may also receive information from the company or organization you work for, technology providers, or other legitimate sources, provided there is a legal basis for doing so.

When the personal data has not been obtained directly from the interested party, the information required by the applicable regulations on its origin and categories of data will be provided.

What Do We Use the Personal Data For?

Lantanis may use the personal data for the following purposes:

3. Responding to inquiries and requests.

To respond to requests for information, inquiries, demonstrations, meetings, business requests or any other requests made through our contact channels.

Legal basis: consent where applicable and/or application of pre-contractual measures requested by the person concerned.

B. Manage business relationships

To manage budgets, contracts, orders, services, licenses, facilities, support and other business relationships with our customers and potential customers.

Legal basis: execution of a contract or application of pre-contractual measures.

Provide our services.

To provide, maintain, update, manage and protect our products and services.

Legal basis: performance of the contract and, where applicable, legitimate interest.

D. Create and manage accounts

To allow registration, authentication and account management when certain Lantanis functionalities require it.

Legal basis: execution of the contract or application of pre-contractual measures.

E. Safety and prevention of misuse

To detect, prevent and investigate unauthorised access, fraud, abuse, security incidents, cyber-attacks and other unlawful or harmful uses.

Legal basis: Lantanis' legitimate interest in protecting its systems, products, users and third parties and, where applicable, compliance with legal obligations.

Technical support.

To handle issues, troubleshoot errors, provide support, and maintain our products and services.

Legal basis: contractual execution, application of pre-contractual measures or legitimate interest, as appropriate.

G. Product development and improvement

We may use technical information, usage statistics, diagnostic data and other legitimately obtained information to analyze, maintain, develop and improve our products and services.

Where possible, we will endeavour to use aggregated, anonymised or de-identified information where it is not necessary to use personally identifiable information.

Legal basis: legitimate interest, provided that it is applicable and after the corresponding weighting, or contractual execution when the processing is necessary to provide the service.

31. Commercial communications.

Where you have requested commercial information or provided the necessary consent, we may send you information about Lantanis, our products, news, events, demonstrations or services.

You may withdraw your consent or unsubscribe from these communications at any time.

Legal basis: consent when required and, in the cases permitted by applicable regulations, legitimate interest.

Fulfilment of legal obligations.

To comply with applicable legal, tax, accounting, regulatory, judicial or administrative obligations.

Legal basis: compliance with a legal obligation.

J. Defence of rights and interests

To exercise, formulate or defend claims, administrative or judicial proceedings and protect the rights, property and safety of Lantanis, our users, customers and third parties.

Legal basis: Legitimate interest and/or compliance with legal obligations.

3. Legal grounding for the treatment

Each processing of personal data must be based on a valid legal basis.

Depending on the specific treatment, Lantanis may be based on:

Consent of the data subject.
The execution of a contract or the application of pre-contractual measures.
Fulfilment of legal obligations.
The legitimate interest of Lantanis or third parties, provided that such interest does not prevail over the rights and freedoms of the data subject.
Any other legal basis recognized by the applicable regulations.

Where the processing is based on consent, you may withdraw your consent at any time. Withdrawal shall not affect the lawfulness of the processing carried out prior to such withdrawal.

The identification of a specific legal basis will be based on each treatment and its circumstances. Data protection regulations require precisely identifying and documenting the basis that legitimizes each processing activity.

8. Is it mandatory to provide the data?

The data requested in forms or during the use of certain services will be strictly necessary for the corresponding purpose.

If you do not provide the necessary data, we may not be able to:

Respond to your request.
Organize A Demonstration
Create or manage an account.
Provide certain services.
Formalize a contractual relationship.
Provide support.

When a data is optional, we will try to indicate it clearly.

Recipients of the data.

Lantanis does not market your personal data.

We may communicate or allow access to personal data to the following categories of recipients where necessary and there is a legal basis:

Technology providers.
Accommodation and infrastructure providers.
Email and communications providers.
IT security providers.
Support and maintenance providers.
Providers of analytics and web services, where applicable.
Professional advisers
Financial institutions or payment providers, where applicable.
Public administrations, courts, tribunals and competent authorities when there is a legal obligation.
Related companies or collaborators necessary to provide certain services, where applicable.

Suppliers who process personal data on behalf of Lantanis must do so in accordance with our instructions and through the contractual and organizational guarantees required.

10. Suppliers and processors

Lantanis may use third party providers for certain technical and business services.

These may include providers of:

Hosting
Cloud and infrastructure.
Email Management
Managing Forms
Authentication
Safety and security.
Back-up
Monitoring.
Analysis.
Customer Service.
Business management

Before incorporating a supplier that is going to process personal data on our behalf, we will take the necessary measures to ensure that it offers sufficient guarantees and, where appropriate, we will formalize the corresponding processing contract.

International transfers

Some technology providers used by Lantanis may be established outside the European Economic Area or use infrastructure located in third countries.

When there is an international transfer of personal data, Lantanis will apply the mechanisms provided for by data protection regulations, including, where appropriate:

Adequacy decisions of the European Commission.
<g id="1">EU Standard Contractual Clauses</g>.
Additional guarantees
Other legally recognized measures.

The existence of an international transfer will depend on the specific suppliers used by Lantanis at any given time.

Cookies and similar technologies.

Our websites and services may use cookies and similar technologies.

These technologies can be used, depending on the specific configuration of the website, to:

Allow the technical operation of the page.
Maintain certain preferences.
Manage sessions and authentication.
Ensure Safety
Obtain usage statistics.
Analyze the performance of the website.
Improve our services

Cookies that are not strictly necessary will be installed only when the consent required by the applicable regulations has been obtained.

The user will be able to manage their preferences through the cookie configuration mechanism available on the website.

Lantanis may have a specific Cookie Policy, which will detail the specific cookies used, their purpose, provider, duration and management mechanism.

13. Data processing in artificial intelligence and robotics products

Lantanis develops artificial intelligence technology applied to autonomous robotics.

The operation of certain products may involve the processing of information generated by sensors, perception systems, software, robots or installations.

Lantanis seeks to design its systems following principles of minimization and safety from the design stage.

In particular, the operation of Lantanis OS has been designed so that certain artificial intelligence capabilities can be executed locally on the robot itself, reducing the need to transmit information to external services. The Lantanis website currently describes Lantanis OS as an architecture in which intelligence runs on the robot and notes that the cloud is used, among other things, to download or upload skills when the user chooses to do so.

However, the specific architecture and data processed may vary depending on the product, configuration, robot, installation and services contracted.

Where a customer uses Lantanis on its own premises and Lantanis processes personal data on behalf of that customer, the respective responsibilities of the parties under the GDPR shall be determined contractually.

14. Facilities and Learning Data

Lantanis may offer technologies intended to allow certain capabilities or abilities to be reused or shared between robotic systems.

The specific information that can be used for these purposes will depend on the corresponding functionality.

Where technically possible and appropriate, Lantanis will seek to use mechanisms such as aggregation, anonymization, de-identification or federated learning to reduce exposure of sensitive information.

The Lantanis website currently indicates that the facilities data belongs to the customer and that federated learning allows the robot to be improved without sensitive information having to leave the customer's environment.

Where a functionality involves processing of personal data on behalf of a customer, such processing shall be subject to the customer's instructions and the relevant data processing agreement where necessary.

Automated decisions and profiling.

Lantanis does not use the personal data collected through the ordinary contact forms to make automated decisions with significantly similar legal effects or effects on individuals.

We also do not create user profiles with that data to produce legal effects on them.

Certain functionalities of our products may use algorithms, artificial intelligence or automated processes for the technical operation of the system, the perception of the environment, planning, diagnosis, security or other functions of robotics.

These technical processes should not necessarily be confused with an automated decision about a person within the meaning of the GDPR.

When processing is introduced that involves automated decisions subject to specific rights under the regulations, Lantanis will provide the required information and apply the corresponding guarantees.

DATA RETENTION.

Lantanis will retain the personal data only for the time necessary to fulfill the purposes for which they were obtained.

Conservation criteria may depend on:

the nature of the data;
The treatment purpose
The existence of a contractual relationship
Applicable legal obligations.
periods of limitation.
security needs
The existence of complaints or proceedings.
Legal defense needs.

By means of an example:

The data used to attend a query will be kept for the time necessary to manage it and subsequently for the periods necessary to attend to possible responsibilities.
The data related to a contractual relationship will be kept for the duration of the relationship and, subsequently, for the applicable legal periods.
The data used for commercial communications will be kept as long as there is a valid relationship for such processing or until the data subject withdraws their consent or opposition where appropriate.
The technical and security data may be kept for the period necessary to ensure security, investigate incidents and comply with applicable legal obligations.

Once the data is no longer needed, it will be deleted or, where appropriate, anonymised or blocked in accordance with applicable law.

17. Security

Lantanis applies technical and organizational measures aimed at protecting personal data against:

Unauthorised access
Loss
Destruction.
Alteration
<g id="1">Unauthorized Disclosure. </g>
Inappropriate Use
Security incidents

The measures will be determined taking into account the nature of the data, the risks associated with the processing, the available technology and the context of the processing.

Among the measures that may be applied are access controls, authentication, encryption where appropriate, segmentation, backups, monitoring, vulnerability management and organizational access control measures.

No system connected to the Internet can guarantee absolute security. Therefore, Lantanis will reasonably review and update its security measures in accordance with technological developments and identified risks.

RIGHTS OF THE INTERESTED PERSONS

You may exercise, where applicable, the following rights:

Access Right

You can request information on whether we are processing your personal data and, where appropriate, obtain a copy of it.

Right to rectification

You can request the correction of inaccurate or incomplete personal data.

Right of cancellation

You can request that we delete your personal data when the legal requirements are met.

Right to restrict processing

You can request that we temporarily limit the processing of your data in the cases provided for by law.

Right to opposition

You can object to certain treatments, especially when they are based on legitimate interests or when there are particular circumstances that justify such opposition.

Right to data portability

Where applicable, you may receive certain personal data in a structured, commonly used and machine-readable format, or request that it be passed on to another controller.

Right to Withdraw Consent

Where the processing is based on your consent, you can withdraw it at any time.

Withdrawal of consent shall not affect the lawfulness of the processing carried out prior to such withdrawal.

How you use your rights

You can exercise your rights by sending a request to:

info@lantanis.com

Applications shall indicate:

Names and surnames.
Right you wish to exercise.
Sufficient information to identify the request.
Documentation that is necessary when reasonably required to verify your identity.

We will not use the information provided to verify your identity for purposes incompatible with such verification.

We will respond to your request within the deadlines established by the applicable regulations.

The data protection regulations recognize, among others, the rights of access, rectification, deletion, limitation, portability and opposition, as well as the right to withdraw consent when this is the legal basis of the processing.

Right to lodge a complaint to the Supervisory Authority

If you believe that Lantanis has processed your personal data in a manner contrary to the regulations, you can lodge a complaint with the competent data protection authority.

In Spain, the supervisory authority is:

The Spanish Data Protection Agency (AEPD).

You can find information about your rights and complaint procedures on their official website.

The possibility to complain to a supervisory authority is part of the information that must be provided to data subjects in accordance with the applicable data protection framework.

Minors.

Lantanis' professional and technological services are mainly aimed at companies, professionals and organizations.

Lantanis does not intend to knowingly collect personal data from minors where such collection is not necessary for the provision of a service.

If you believe that a minor has provided us with personal data without a legitimate basis for doing so, you can contact us at info@lantanis.com.

When applicable due to the nature of the service, Lantanis will adopt the measures required by law regarding the processing of data of minors.

Third party Links

Our website may contain links to third party pages, services or platforms.

Lantanis does not control the privacy practices of such third parties and this Privacy Policy does not apply to the processing carried out by them.

We recommend that you consult the relevant privacy policies before providing them with personal data.

Social networks.

Lantanis may have profiles on social networks or other third-party platforms.

Interactions made through these platforms will also be subject to the privacy policies and terms of use of each platform.

Lantanis will process the data it receives through these channels in accordance with the purpose for which they were provided and with the applicable legislation.

24. Data processing on behalf of our customers

Lantanis may provide technology services to businesses and other organizations.

In certain scenarios, our customers can decide what data is entered into our systems and for what purposes it is processed.

Where Lantanis processes personal data exclusively on the instructions of a customer, it may act as a processor and the customer as a controller.

In these cases:

The client will determine the purposes and means of the processing when appropriate.
Lantanis will process the data following the documented instructions of the client.
The corresponding obligations will be established by means of a processing contract when it is required.
Lantanis will apply technical and organizational measures appropriate to the risk.
Access to the data will be limited to individuals and providers who need access to the data in order to provide the service.

The distinction between controller and processor depends on who determines the purposes and means of the processing and who processes the data on the instructions of another.

25. Confidentiality of Business Information

When Lantanis has access to business, industrial, technical or confidential information of a client, such information may also be protected by the applicable contractual conditions, confidentiality agreements and other legal obligations.

This Privacy Policy governs personal data and does not replace any confidentiality agreements, commercial contracts, license agreements or data processing agreements that may be applicable.

Changes to this Privacy Policy

Lantanis may amend this Privacy Policy as necessary to reflect:

Regulatory changes
Changes to our products or services.
Changes in our treatment practices.
Changes in our suppliers.
Improvements in privacy and security.

The current version will be the one published on this page.

When the changes are substantial and the applicable legislation requires it, we will take the corresponding information measures.

Date of last update: August 20, 2026.

27 > Contact Form

For any questions related to this Privacy Policy or the processing of your personal data, you can contact:

Lantanis Robotics S.L.
Tax ID: B93917789
Ctra. de Toledo, 19
28300 Aranjuez, Madrid, Spain
Email: info@lantanis.com

Additional information

This Privacy Policy constitutes the general information on the processing of personal data carried out by Lantanis through its websites and services.

Certain products, applications, business services, forms, functionalities or contractual relationships may incorporate additional or specific privacy information when the nature of the processing so requires.

Where there is a difference between this general information and a specific information provided at the time of collecting the data, the specific information corresponding to the specific processing will prevail, to the extent permitted by applicable law.