Privacy policy
This is a translation of the Spanish version. In case of discrepancy, the Spanish version prevails.
Data controller
Napptilus Artificial Intelligence Lab, S.L. Contact: info@napptilus.com
What data we process and why
If you email us, we process your name, your email address, your company if you give it and the content of your message. We use it solely to reply to your inquiry.
In addition, like any web server, the site logs technical data about each visit (IP address, date and time, requested page and browser). We use it only to keep the site secure and running, for example to detect abusive access.
Legal basis
- Pre-contractual measures taken at your request (Art. 6.1.b GDPR), where your inquiry concerns a possible service.
- Legitimate interest (Art. 6.1.f GDPR) in replying to the inquiries you send us and in the security of the site, for the technical data about visits.
Retention
We keep the data while your inquiry is being handled and afterwards, blocked, for the limitation periods of possible legal liabilities. If the inquiry leads to a contractual relationship, the data will be processed under that relationship. If there is no reply and no relationship, we will delete it within a maximum of one year.
Technical data about visits is deleted automatically after 30 days.
Recipients
We do not disclose your data to third parties except where legally required. Service providers acting as processors, under a contract compliant with Art. 28 GDPR, may access it:
- Google Cloud EMEA Limited (Ireland), which hosts the site on servers in the European Union (Belgium).
- Google Ireland Limited (Ireland), our email provider, where we receive your messages.
International transfers
Our providers process the data in the European Union. Google may access it from outside the European Economic Area to provide or support its services; in that case, the transfer relies on the EU-U.S. Data Privacy Framework and on the standard contractual clauses approved by the European Commission.
Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to info@napptilus.com stating which right you are exercising. We may ask you to prove your identity. We will reply within one month, extendable in complex cases as provided by the GDPR.
If you believe the processing does not comply with the rules, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).