Privacy Policy

This Privacy Policy aims to explain how we handle your personal data at NATIBOO ORIENTA TU CONOCIMIENTO, S.L. (hereinafter, the “Company” or the “Controller”) when you browse the website and, where applicable, when you use the enabled forms.

1. Data of the data controller

  • Company Name: NATIBOO ORIENTA TU CONOCIMIENTO, S.L.
  • Tax ID: B91965418
  • Address: CALLE VICTORIA KENT, 1 – 41920 – SAN JUAN DE AZNALFARACHE – SEVILLA
  • Email for data protection communications: info@natiboo.es

1.1. Applicable regulations

This Privacy Policy has been designed in accordance with Regulation (EU) 2016/679, of April 27, 2016 (General Data Protection Regulation, GDPR) and, to the extent that it does not contradict it, with the applicable Spanish regulations on the protection of personal data.

We may update this Privacy Policy to adapt it to legislative, jurisprudential developments or criteria from the Spanish Data Protection Agency. Additionally, this policy may be complemented by the Legal Notice, the Cookie Policy, and the specific conditions that may be established for certain products or services.

1.2. Data Protection Officer

We do not have a Data Protection Officer.

2. Purposes of processing

We process your personal data for the following purposes:

  • To provide you with information related to the products and services offered by the Company and detailed on this website.
  • To manage the contracting of our services through the acceptance of the corresponding budget/order and/or the signing of a commercial contract.
  • To send you, when appropriate and provided there is a legal basis that allows it, communications by email and/or postal mail with news and updates from the Company, as well as updates to our product and service catalog.
  • To manage inquiries made through the conversational assistant, processing the messages entered by the user through an artificial intelligence system to generate a response related to the contents, services, and activities of Natiboo.

2.1. Retention period

We will keep your personal data for as long as necessary to fulfill the purpose for which they were collected and, subsequently, for the periods required by applicable regulations or necessary to address potential liabilities.

In particular:

  • Data related to inquiries or requests for information will be kept for as long as necessary to respond to them and follow up. When the inquiry does not lead to a contractual relationship, they may be kept for a maximum period of one year, unless they need to be retained for a longer period to address a claim or there is another legal basis that allows it.
  • Data related to budgets, proposals, and pre-contractual actions will be kept as long as they remain valid and, subsequently, for the necessary period to address potential liabilities arising from such actions.
  • Data from clients, suppliers, and contractual relationships will be kept as long as the relationship is maintained and, once it has ended, for the periods established by tax, commercial, and civil regulations.
  • Data used for sending commercial communications will be kept as long as you do not withdraw your consent or oppose receiving them.
  • Technical data, access logs, and security evidence will be kept for the strictly necessary time to ensure the security of the systems, investigate incidents, and comply with applicable legal obligations.
  • Evidence of consent given will be kept as long as liabilities may arise from the corresponding processing.

When the data is no longer necessary for the indicated purposes, they will be blocked and only available to meet legal obligations or potential claims, until the applicable limitation periods expire. After these periods, they will be securely deleted.

3. Legitimacy and data collected

The legal basis for processing your personal data will generally be your consent given through a clear affirmative action (for example, submitting a form with the express acceptance of this Privacy Policy). Additionally, when applicable, we may process your data for the execution of a contract or to take pre-contractual measures at your request.

3.1. Consent to process your data

When you fill out forms, check the corresponding boxes, and submit the information, or when you write to us through the accounts set up for this purpose, you confirm that you have read this Privacy Policy and, where appropriate, give your consent to the processing of your data in accordance with the indicated purposes.

3.2. Categories of data

The data we may collect belongs to the category of identifying data, such as:

  • Name and surname
  • Phone
  • Postal address
  • Company
  • Email
  • Content of inquiries, messages, and conversations that the user enters in the forms or in the conversational assistant.
  • Any personal data that the user voluntarily includes in such messages.

We recommend not including in your inquiries especially sensitive information, passwords, financial data, medical information, or confidential information of third parties.

4. Security measures

To ensure the security and confidentiality of your personal data, we have adopted appropriate technical and organizational measures to prevent their alteration, loss, processing, or unauthorized access, taking into account the state of technology, the nature of the data, and the risks to which they are exposed, in accordance with Article 32 of the GDPR.

5. Recipients, providers, and international transfers

Recipients and service providers

To provide our services and keep this website operational, we may rely on providers who may access or process personal data when necessary for the purposes indicated in this policy.

Among these providers are:

  • Web hosting, infrastructure, backup, and storage providers.
  • Content distribution, DNS resolution, and protection against attacks and malicious traffic service providers.
  • Email and communications service providers.
  • Providers of communication and transactional mail services.
  • Web analytics providers, provided that the user has given the corresponding consent.
  • Providers of fraud prevention, abuse, and automated form submission services.
  • Providers of artificial intelligence tools, only when their use is necessary for the previously informed purposes and appropriate guarantees have been adopted.
  • Tax, accounting, labor, or legal advisors when necessary for compliance with legal or contractual obligations.

When these providers act as data processors, they will process the data following our instructions and will be subject to the corresponding contractual, security, and confidentiality obligations.

The data may also be communicated to public administrations, judicial bodies, law enforcement agencies, or other authorities when there is a legal obligation or it is necessary for the formulation, exercise, or defense of claims.

International transfers

Some of our providers belong to international corporate groups or may process data from countries located outside the European Economic Area.

When international data transfers occur, they will be carried out through one of the mechanisms permitted by applicable regulations, such as:

  • An adequacy decision by the European Commission.
  • The recipient's adherence to the EU-U.S. Privacy Shield, when applicable.
  • Standard contractual clauses approved by the European Commission.
  • Binding corporate rules.
  • Other appropriate safeguards recognized by the General Data Protection Regulation.

You can request additional information about international transfers, the safeguards applied, and how to obtain a copy of such safeguards by writing to info@natiboo.es.

6. Your rights

You have the right to obtain confirmation as to whether we are processing your personal data or not. You also have the right to access your data, request the rectification of inaccurate data and, where appropriate, request their deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, you may request the limitation of the processing of your data, and in that case, we will only keep them for the exercise or defense of claims. For reasons related to your particular situation, you may object to the processing. We will stop processing your data unless there are compelling legitimate grounds, or for the exercise or defense of potential claims.

In accordance with current legislation, you can exercise the following rights:

  • Access
  • Rectification
  • Deletion
  • Limitation of processing
  • Objection
  • Portability
  • Withdraw consent

6.1. How can you exercise your rights?

You can exercise your rights by writing to info@natiboo.es, indicating the right you wish to exercise and providing the necessary information to identify yourself and locate the affected data.

When there are reasonable doubts about your identity, we may request additional information strictly necessary to verify it.

You also have the right to file a complaint with the Spanish Data Protection Agency, especially if you believe that we have not adequately addressed the exercise of your rights.

7. Electronic communications

In accordance with the provisions of Law 34/2002, of July 11, on Information Society Services and Electronic Commerce, if you specifically check the box for sending commercial communications, you authorize Natiboo to send you by email or other equivalent electronic communication means information about its services, contents, and news. You can withdraw your consent at any time by writing to info@natiboo.es or using the unsubscribe mechanism included in each communication.