Data protection
Privacy policy
We explain what personal data we may process, why we process it and how you can exercise your rights.
Last updated: 29 July 2026
1. Data controller
- Controller: Nitaki AI S.L.U.
- Tax identification number: B22514269
- Address: Calle Tampico 34, 28027 Madrid, Spain
- Privacy contact: info@nitakigroup.com
2. Data processed and source
When you contact us, we process the information you voluntarily submit: name, professional email address, company, area of interest and the content of your enquiry. The form sends this information to our corporate mailbox through the website’s hosting infrastructure; it is not stored in a separate contact database.
Minimum technical data may also be generated by hosting and security systems, such as IP address, date, requested resource, user agent and incident logs, when necessary to operate and protect the service.
3. Purposes and legal bases
- Responding to enquiries, preparing proposals and managing pre-contractual or contractual relationships: steps requested by the data subject and performance of a contract.
- Responding to general requests that do not result in a commercial relationship: legitimate interest in handling communications addressed to the company.
- Maintaining security, preventing abuse and resolving technical incidents: legitimate interest and compliance with legal obligations.
- Sending marketing communications: only where valid consent or a permitted prior relationship exists, always providing a simple way to object.
4. Retention
Enquiry data will be kept for the time required to respond and manage a possible professional relationship. It may then remain blocked for the periods required to comply with legal obligations or address possible liabilities. Technical logs are kept only for the period reasonably necessary for security and diagnosis.
5. Recipients and international transfers
We do not sell personal data. Providers delivering hosting, email, support or security services may access it under the required contractual safeguards. Data may also be disclosed to authorities where legally required.
If a provider processes data outside the European Economic Area, a safeguard recognised by the GDPR will be used, such as an adequacy decision or standard contractual clauses.
6. Your rights
You may request access, rectification, erasure, objection, restriction or portability, and withdraw consent whenever it is the legal basis, by writing to info@nitakigroup.com or Calle Tampico 34, 28027 Madrid, Spain. We may request reasonable information to verify your identity.
If you believe the processing does not comply with applicable law, you may lodge a complaint with the Spanish Data Protection Agency at aepd.es. We do not make automated decisions with legal effects or create profiles from the contact form.
7. Security and children
We apply technical and organisational measures proportionate to the risk. The website and its professional services are not specifically directed at children under fourteen and we do not knowingly request their data.
