Privacy Policy
1. Who is responsible
The controller responsible for data processing on this website is:
Cambio Automation SL
represented by Philipp Braukmann
Calle de Daganzo 8, 3D
28002 Madrid, Spain
E-mail: braukmann@cambio-automation.com
2. What we collect
When you visit this website, our hosting provider automatically records standard server log data (IP address, browser type, date and time of access, referring page). This is necessary to deliver the site securely and is processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR).
If you contact us by e-mail, WhatsApp, or by booking a call, we process the contact details and the information you provide in order to respond and, where relevant, to prepare a proposal. The legal basis is the performance of, or steps prior to, a contract (Art. 6(1)(b) GDPR).
3. Booking & third-party services
We use Google Calendar appointment scheduling to let you book an intro call. When you open the booking link, your data is processed by Google in accordance with its own privacy terms. We use no advertising trackers or analytics cookies on this site beyond what is strictly necessary to display it.
4. Client data in our engagements
For client engagements, data is hosted in Germany or the EU. We do not use client data to train third-party AI models; this is contractually fixed in the data processing agreement (Auftragsverarbeitungsvertrag, AVV). Where confidentiality requires it, systems can be self-hosted on the client's own infrastructure. Per workflow, the client decides what runs unattended and what waits for approval. All actions are logged.
5. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing. You may also lodge a complaint with a supervisory authority. To exercise any of these rights, contact us at braukmann@cambio-automation.com.
6. Retention
We keep personal data only as long as necessary for the purposes described above or as required by law, and delete it thereafter.
7. Changes
We may update this policy as the website and our services evolve. The current version always applies.
8. Automation audit tool
We offer an online self-check on our website. When you use it and choose to reveal your report, send your results, or book a call, we collect the business e-mail address you enter, your name and phone number if you provide them, and the answers and estimated results from the tool. We use this to show you your report, respond to your request, and contact you about the audit. The legal basis is your consent (Art. 6(1)(a) GDPR) and, where relevant, steps taken at your request prior to a contract (Art. 6(1)(b) GDPR). The submission is received via Cloudflare, Inc. and stored in Airtable (Formagrid, Inc.); both may process it outside the EU under appropriate safeguards, including the EU Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. We do not sell this data and do not use it to train AI models. You can withdraw your consent or ask us to delete your data at any time by e-mailing braukmann@cambio-automation.com.
9. Job applications
If you apply for a role at Cambio Automation, we process the data you give us in the application form: your name, contact details, place of residence, LinkedIn profile or CV, your answers to the application questions, and notes from interviews. We use this data only to assess your application and to communicate with you about it. The legal basis is Art. 6(1)(b) GDPR, steps taken at your request before entering into a contract.
Applications reach us by e-mail and are stored in our e-mail and office software (Google Workspace), which processes data on our behalf under a data processing agreement. We may use AI tools to summarise applications. No decision about an application is made automatically. A person reviews every application and makes every decision.
Access is limited to the people involved in hiring. We delete application data six months after the hiring process for the role has ended, unless you agree that we may keep it longer to contact you about future roles. If you join the shortlist for a role that is not open yet, we keep your details on the basis of your consent, Art. 6(1)(a) GDPR, for up to 12 months, and you can withdraw that consent at any time by writing to braukmann@cambio-automation.com.
10. Newsletter
Our newsletter, Off Your Desk, is sent with Substack (Substack, Inc., USA). If you subscribe on our website, we store your e-mail address, the language and the page you subscribed from, and use them only for the newsletter. Subscriptions are received via Cloudflare, Inc. and stored in Airtable (Formagrid, Inc.), as described in section 8. You are then taken to our Substack page to confirm your subscription; Substack sends you a confirmation e-mail and, once you have confirmed, the newsletter. Substack processes your e-mail address under its own privacy policy and may process it outside the EU. The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time with the link in every e-mail or by e-mailing braukmann@cambio-automation.com, and we delete your address when you do.