Privacy policy

Data controller

The controller of your personal data is the owner of this website.

Trade name

Nodus Inteligencia

Controller

NODUS INTELIGENCIA

Email

contacto@nodusinteligencia.com

Data we process

If you write to us through the form

We process the data you provide to us:

• Name.
• Company.
• Email address.
• Sector.
• Needs you select.
• Content of your message.

We ask you not to include in your message data of other people or special categories of data, such as health data.

If you browse this website

Your requests first reach Cloudflare, our security and delivery provider, which processes your IP address to deliver the website to you and protect it against attacks.

The hosting server receives requests through Cloudflare, so its logs show Cloudflare’s addresses and not yours.

To limit the frequency of submissions, the application also uses an irreversible digest of your IP address, known as a hash.

That hash is stored only in memory.

Cloudflare also uses your IP address to curb excessive requests.

The form’s anti-bot verification is our own proof of work, solved in your browser, with no third parties or cookies.

Minors

This website is aimed at companies and professionals.

If you are under 14, do not send us your data: that is the minimum age for giving consent set by Article 7 of the LOPDGDD.

Purposes and legal bases

Responding to your request

We use your data to read your message, reply to you and continue the conversation you start.

The legal basis is your consent, which you give by ticking the box and submitting the form (Article 6(1)(a) of the GDPR).

Preparing a proposal

If you ask us for a proposal or a quote, we process your data to prepare it.

The legal basis is the application of pre-contractual measures at your request (Article 6(1)(b) of the GDPR).

If you write to us on behalf of a company, the basis is our legitimate interest in dealing with it (Article 6(1)(f) of the GDPR and Article 19 of the LOPDGDD).

Protecting the website

We use the technical logs and the hash of your IP address to detect abuse, prevent attacks and maintain the service.

The legal basis is our legitimate interest in ensuring network and information security (Article 6(1)(f) and recital 49 of the GDPR).

We have reduced the impact on you: we do not keep access logs with your IP address, and the rate check processes it only in memory.

You may object to this processing as explained in the section on your rights.

Commercial communications

We will only send you commercial communications if you give us specific consent to do so (Article 6(1)(a) of the GDPR).

The contact form does not collect that consent and does not subscribe you to anything.

Whether providing data is mandatory

Providing your data is voluntary: no law or contract requires you to do so.

To handle your request, we need your name, your email address and your message, and you must also tick the privacy box.

Without that data we cannot reply to you.

The company, telephone, sector and needs are optional. If you give us your telephone number, we will only use it to respond to your request.

Retention periods

Enquiries

The message is not stored in any database on the website: it is forwarded by email to the company’s mailbox.

We keep enquiries for up to 12 months after the last contact.

We then keep them blocked for the limitation periods of any liabilities that may arise, and finally erase them.

While they are blocked, they can only be made available to judges, courts and competent authorities (Article 32 of the LOPDGDD).

Clients

If your enquiry leads to a contract, we keep the data while it is in force and for the applicable legal periods.

Technical logs

We do not keep our own access logs with your IP address.

Cloudflare keeps request security data for a short period, in accordance with its data processing agreement.

Rate limit

The hash of the IP address is deleted from memory within a maximum of 48 hours of your last request.

Cloudflare’s rate counters expire within seconds.

Recipients and processors

We do not sell your data or disclose it to third parties.

We will only communicate it to authorities, judges and courts when a law requires us to do so.

To provide the service we rely on data processors, who act on our instructions and under contract (Article 28 of the GDPR):

• The website hosting provider.
• The website’s security and delivery provider, Cloudflare, which also runs the contact form and delivers its messages to the company mailbox.
• The email provider that manages the company’s mailbox.

Hosting is provided by OVHcloud.

International transfers

We host the website in the European Union, but Cloudflare, Inc. is headquartered in the United States and its network may process your IP address outside the European Economic Area.

These transfers rely on the EU-US Data Privacy Framework and on the European Commission’s standard contractual clauses included in its data processing agreement (Chapter V of the GDPR).

Your rights

You may exercise these rights at any time:

• Access: to know what data about you we process and obtain a copy.
• Rectification: to correct inaccurate or incomplete data.
• Erasure: to ask us to delete your data, for example when it is no longer necessary.
• Objection: to object to processing based on our legitimate interest, on grounds relating to your particular situation.
• Restriction: to ask us to keep your data without using it, in the cases provided for in the GDPR.
• Portability: to receive in a commonly used format the data you provided to us, when the processing is based on your consent or on a contract.

To exercise them, contact us by any of these means:

• The contact form.
• Email, at contacto@nodusinteligencia.com.

State which right you wish to exercise.

If we have reasonable doubts about your identity, we may ask you for the information needed to confirm it.

Exercising these rights is free of charge.

We will reply within one month, which may be extended by a further two months in complex cases, and in that event we will let you know.

Withdrawing consent

You may withdraw your consent at any time, by the same means as for exercising your rights.

Withdrawing it does not affect the lawfulness of the processing prior to withdrawal (Article 7(3) of the GDPR).

Complaint to the AEPD

If you believe we have not handled your data properly, you may lodge a complaint with the Agencia Española de Protección de Datos (AEPD), the Spanish data protection authority.

Its website is www.aepd.es.

Its postal address is C/ Jorge Juan 6, 28001 Madrid.

Automated decisions

We do not take decisions based solely on automated processing that produce legal effects concerning you or significantly affect you (Article 22 of the GDPR).

Nor do we carry out profiling.

The anti-bot verification and the rate limit only protect the form against automated submissions and do not assess you.

Security

We apply technical and organisational measures appropriate to the risk, as required by Article 32 of the GDPR.

These include encryption of communications, validation of the data you send, rate limiting and not storing messages on the website.

If a security breach poses a high risk to your rights, we will notify you without undue delay (Article 34 of the GDPR).

Updates to this policy

We may update this policy when our processing or the applicable legislation changes.

The date of the last update appears at the top of this page.

If a change is significant, we will indicate it visibly on this website.