Privacy Policy

1. Data controller

Antonio Javier Muñoz Mendoza · Tax ID 47320295A · Contact: info@justaction.com.

2. Data we process

Registration form: first name, last name, email, phone, participation mode (individual or team) and team name, LinkedIn profile (optional), language, and the date and version of your acceptance of this policy.

Owly onboarding (voice assistant): recording and transcript of the conversation, AI-generated summary and themes, initial rating, duration and session status.

3. Purposes

Manage your registration and participation in the Hackathon Sostenible by Heura; send you event logistics; run the Owly onboarding to learn your motivation, what you want to build and the impact you seek, and organise teams and mentoring.

4. Legal basis

Your consent (Art. 6.1.a GDPR), which you can withdraw at any time without affecting prior processing, and performance of your participation in the event (Art. 6.1.b GDPR).

5. Retention

Data is kept for up to 12 months after the event unless the law requires otherwise, then deleted or anonymised. Owly transcripts may be disabled or deleted earlier.

6. Recipients and processors

We do not share your data with third parties unless legally required. We use technology providers as processors: Lovable Cloud (database hosted in Ireland, EU), ElevenLabs (voice conversation), AI providers for summaries and analysis, Resend (email delivery) and Cloudflare (web hosting).

Some providers may process data outside the EEA (e.g. the US); such transfers rely on the EU-US Data Privacy Framework and/or European Commission Standard Contractual Clauses.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to [privacy email] with proof of identity. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Cookies and local storage

This site uses no analytics or advertising cookies. It only uses strictly necessary technical storage (language preference and, for administrators, the sign-in session), which is exempt from consent under Art. 22.2 LSSI. If non-essential cookies are added in the future, your prior consent will be requested.