Privacy policy

How we process your personal data on blacknodusai.com, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

This is an English translation provided for your convenience. In the event of any discrepancy, the Spanish version prevails.

1. Data controller

The controller responsible for processing your data is:

• Owner: Vicente Bueno Benito
• National ID (DNI): 46075222N
• Address: Camí Bovalar, 46138 Rafelbuñol (Valencia), Spain
• Contact email: admin@blacknodusai.com
• Website: https://blacknodusai.com

Black Nodus AI is the trade name under which the owner operates. If the business is later incorporated as a company, this information will be updated with the corresponding registered name and tax ID.

2. What data we collect and where from

We process only the data you provide voluntarily, mainly through the website's chat assistant or when you email us:

• Contact details: name, email address and, optionally, phone number and your company name.
• Enquiry details: your sector or type of business, the need you describe and the content of the conversation.
• Minimal technical data: IP address and browsing data necessary for the operation and security of the site (for example, anti-bot verification).

We do not collect special categories of data, and our services are not directed at minors.

3. Why we use your data and on what legal basis

• To handle your enquiry and contact you in order to prepare an assessment or quote. Legal basis: your consent when you provide the data, and pre-contractual measures taken at your request (Art. 6(1)(a) and 6(1)(b) GDPR).
• Sales management and follow-up of the interest you have shown (saving your contact in our CRM). Legal basis: consent and legitimate interest in managing the relationship (Art. 6(1)(f) GDPR).
• Site security and the prevention of abuse and fraud. Legal basis: legitimate interest.

4. Recipients and processors

We do not sell or transfer your data to third parties. To provide the service we rely on providers that act as data processors, with the safeguards required by the GDPR:

• HubSpot (the CRM where we store your contact). European instance; HubSpot, Inc. adheres to the applicable standard contractual clauses and transfer frameworks.
• OpenAI (processes the chat assistant's conversation). Our contract is with OpenAI Ireland Ltd., acting as data processor. Processing may take place on servers located outside the EEA (see section 5). Under that contract, content sent through their API is not used to train their models and is retained for a maximum of 30 days for abuse detection, after which it is deleted.
• Cloudflare ("Turnstile" anti-bot verification for the form/chat).
• OVH (site hosting on our own server, data centres in the EU).

Data will only be disclosed to authorities where there is a legal obligation to do so.

5. International transfers

Site hosting and the CRM are located within the European Union. The chat assistant's conversation is processed by OpenAI and may be handled on servers located in the United States. That transfer is covered by the standard contractual clauses approved by the European Commission, incorporated into the data processing agreement signed with the provider. Other providers (for example, HubSpot or Cloudflare) may process data outside the EEA under the same safeguards or under adequacy decisions.

If you would rather your data did not leave the EEA, do not use the assistant and email us directly at admin@blacknodusai.com: email and the CRM stay within the European Union.

6. How long we keep your data

We keep your data for as long as the commercial relationship or the interest shown lasts and, thereafter, for the periods legally required. If you ask us to delete it, we will do so unless we are legally obliged to retain it.

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, as well as withdraw the consent you have given, by writing to admin@blacknodusai.com (please put "Data protection" in the subject line). If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Cookies and similar technologies

This site does not use advertising or third-party tracking cookies. We only use the technologies strictly necessary for operation and security (for example, Cloudflare's anti-bot verification and font loading). We do not build profiles from your browsing.

9. Changes to this policy

We may update this policy to reflect legal or service changes. We will always publish the current version on this page, together with its update date.