1. Data controller
- Controller: Gestión de la Innovación en IA, S.L. (Naitives)
- Tax ID (NIF): B19843200
- Address: Espaitec 2, Avinguda de Vicent Sos Baynat, 12006 Castellón de la Plana, Castellón, Spain.
- Email: info@naitives.com
- Phone: +34 686 696 907
Naitives has not appointed a data protection officer. Data protection queries may be sent to info@naitives.com.
2. Personal data processed
Depending on the relationship with the user, Naitives may process: identifying data (name and surname); contact data (email, phone); professional data (company, position, sector); information included in queries or messages; data relating to requests for demonstrations or commercial information; subscription data and communication preferences; technical browsing data (IP, device, browser, pages visited, date and time), when the corresponding cookies have been authorized; and any other information the user voluntarily provides.
Users are advised not to include specially protected data, confidential information or personal data of third parties in the forms unless necessary to handle the query.
3. Purposes and legal bases
A. Queries and information requests. When the user uses the contact form or communicates with Naitives, their data is processed to handle and respond to the query. Legal basis: pre-contractual measures requested by the data subject (if the query seeks a possible engagement) or Naitives’ legitimate interest in handling communications received (general queries).
B. Requests for demonstrations, quotes or commercial proposals. To organize the demo, understand the client’s needs, prepare proposals and provide commercial follow-up. Legal basis: pre-contractual measures requested by the data subject; where the request is made by a company, legitimate interest in managing the relationship with the contact person.
C. Commercial communications and newsletter. If the user subscribes voluntarily, Naitives may send information about products, services and news. Legal basis: consent, which may be withdrawn at any time via the unsubscribe link or by writing to info@naitives.com.
D. Browsing, security and technical operation. Technical data necessary for access, security and fraud prevention. Legal basis: Naitives’ legitimate interest in ensuring the security and integrity of the Website. This does not involve installing non-essential cookies without consent.
E. Location and form protection (Google Maps and Google reCAPTCHA). On the contact page, the Website includes a Google Maps map showing Naitives’ location and uses Google reCAPTCHA to protect the contact form against spam and abuse. Both services load automatically when the page is visited. In this context, Google LLC may process the user’s IP address and other technical identifiers. Legal basis: Naitives’ legitimate interest in showing its location and protecting its forms against abuse. The Website provides a cookie management panel through which the user can configure their preferences.
F. Web analytics. Naitives uses Google Analytics 4 to obtain Website usage statistics. This service remains blocked and does not process data until the user accepts analytics cookies in the consent panel (Google Consent Mode v2). Legal basis: consent.
G. YouTube video playback. The Website includes YouTube videos in «click to play» mode: YouTube content does not load until the user clicks play, at which point the provider (Google LLC) may process identifiers, technical data and IP. Legal basis: user consent, given through the very act of playing the video.
H. Web fonts (Google Fonts). The Website currently uses Google Fonts loaded from Google’s servers, which involves transmitting the user’s IP address to Google LLC. Legal basis: legitimate interest in the correct presentation of the Website. Naitives plans to self-host these fonts to avoid such transmission.
I. Compliance with legal obligations and defense of rights. To comply with legal, tax or accounting obligations, respond to requests from authorities and defend Naitives’ rights. Legal basis: compliance with a legal obligation and legitimate interest.
4. Mandatory nature of the data
The mandatory fields in the forms are necessary to process the request. The user is not obliged to provide them, but their absence may prevent Naitives from responding to the query or providing the requested service. The user warrants that the data provided is accurate and, if providing third-party data, declares that they are authorized to do so and have informed that person.
5. Retention periods
- General queries: while being handled and, afterwards, a maximum of twelve months, unless longer retention is required.
- Demonstrations, quotes or proposals: during processing and, if no engagement follows, a maximum of twenty-four months from the last commercial interaction.
- Clients: during the contractual relationship and, afterwards, the applicable legal periods (tax, commercial, contractual).
- Newsletter: until consent is withdrawn or unsubscription is requested.
- Browsing data and cookies: as indicated in the Cookie Policy.
- Security logs: for the time necessary to investigate incidents.
6. Recipients and data processors
Naitives does not sell personal data. Data may be disclosed to: public administrations and authorities where there is a legal obligation; legal, tax or accounting advisors; and technology providers acting as data processors, including:
- Web hosting and Website maintenance providers.
- WPForms, to manage the contact form.
- Google LLC, for Google Maps, Google reCAPTCHA, Google Analytics 4 and Google Fonts.
- Intuit Inc. / the Mailchimp group, for newsletter management.
Naitives will enter into the contracts required by data protection regulations with these processors.
7. International transfers
Google LLC and Intuit Inc. (Mailchimp) process data from the United States. Where the provider is certified under the EU-U.S. Data Privacy Framework, the transfer is covered by the European Commission’s adequacy decision, within the scope of its certification; otherwise, standard contractual clauses are used. The data subject may request further information about the safeguards applied at info@naitives.com.
8. Automated decisions
The data collected is not used to make solely automated decisions that produce legal effects on the user.
9. Rights of data subjects
The data subject may exercise their rights of access, rectification, erasure, objection, restriction, portability and withdrawal of consent by writing to info@naitives.com, indicating the right they wish to exercise. They may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
10. Security
Naitives applies technical and organizational measures appropriate to the risk to protect data against loss, alteration or unauthorized access.
11. Minors
The Website is not directed at children under fourteen. Children under fourteen should not provide personal data without the authorization of their parents or guardians.
12. Changes to this Policy
Naitives may amend this Policy when regulations, technology or the processing carried out change, informing users when the change is significant.