Privacy Policy

This Privacy Policy aims to explain how we handle your personal data at NATIBOO ORIENTA TU CONOCIMIENTO, S.L. (hereinafter, the “Company” or the “Controller”) when you browse the website and, where applicable, when you use the enabled forms.

1. Data of the data controller

  • Company Name: NATIBOO ORIENTA TU CONOCIMIENTO, S.L.
  • Tax ID: B91965418
  • Address: CALLE VICTORIA KENT, 1 – 41920 – SAN JUAN DE AZNALFARACHE – SEVILLA
  • Email for communications regarding data protection: info@natiboo.es

1.1. Applicable regulations

This Privacy Policy has been designed in accordance with Regulation (EU) 2016/679, of April 27, 2016 (General Data Protection Regulation, GDPR) and, to the extent that it does not contradict it, with the applicable Spanish regulations on personal data protection.

We may update this Privacy Policy to adapt it to legislative, jurisprudential developments or criteria from the Spanish Data Protection Agency. Additionally, this policy may be complemented by the Legal Notice, the Cookies Policy, and the specific conditions that may be established for certain products or services.

1.2. Data Protection Officer

We do not have a Data Protection Officer.

2. Purposes of processing

We process your personal data for the following purposes:

  • To provide you with information related to the products and services offered by the Company as detailed on this website.
  • To manage the contracting of our services through the acceptance of the corresponding budget/order and/or the signing of a commercial contract.
  • To send you, when appropriate and provided there is a legal basis that allows it, communications by email and/or postal mail with news and updates from the Company, as well as updates to our catalog of products and services.
  • To manage inquiries made through the conversational assistant, processing the messages entered by the user through an artificial intelligence system to generate a response related to the contents, services, and activities of Natiboo.

2.1. Retention period

We will retain your personal data for as long as necessary to fulfill the purpose for which they were collected and, subsequently, for the periods required by applicable regulations or necessary to address potential liabilities.

In particular:

  • Data related to inquiries or requests for information will be retained for as long as necessary to respond to them and follow up. When the inquiry does not lead to a contractual relationship, it may be retained for a maximum period of one year, unless it must be kept longer to address a claim or there is another legal basis that allows it.
  • Data related to budgets, proposals, and pre-contractual actions will be retained as long as they remain valid and, subsequently, for the time necessary to address potential liabilities arising from such actions.
  • Data of clients, suppliers, and contractual relationships will be retained as long as the relationship is maintained and, once it has ended, for the periods established by tax, commercial, and civil regulations.
  • Data used for sending commercial communications will be retained as long as you do not withdraw your consent or oppose receiving them.
  • Technical data, access logs, and security evidence will be retained for the strictly necessary time to ensure the security of the systems, investigate incidents, and comply with applicable legal obligations.
  • Evidence of consent given will be retained as long as liabilities may arise from the corresponding processing.

When the data are no longer necessary for the indicated purposes, they will be blocked and only available to address legal obligations or potential claims, until the applicable statute of limitations periods expire. After these periods, they will be securely deleted.

3. Legitimacy and data collected

The legal basis for processing your personal data will generally be your consent given through a clear affirmative action (for example, submitting a form with the express acceptance of this Privacy Policy). Additionally, where applicable, we may process your data for the execution of a contract or to apply pre-contractual measures at your request.

3.1. Consent to process your data

When you fill out forms, check the corresponding boxes, and submit the information, or when you write to us through the accounts enabled for this purpose, you confirm that you have read this Privacy Policy and, where appropriate, give your consent to the processing of your data in accordance with the indicated purposes.

3.2. Categories of data

The data we may collect belong to the category of identifying data, such as:

  • Name and surname
  • Phone
  • Postal address
  • Company
  • Email
  • Content of inquiries, messages, and conversations that the user enters in the forms or in the conversational assistant.
  • Any personal data that the user voluntarily includes in such messages.

We recommend not including in your inquiries especially sensitive information, passwords, financial data, medical information, or confidential information of third parties.

4. Security measures

To ensure the security and confidentiality of your personal data, we have adopted appropriate technical and organizational measures to prevent their alteration, loss, processing, or unauthorized access, taking into account the state of technology, the nature of the data, and the risks to which they are exposed, in accordance with Article 32 of the GDPR.

5. Recipients, providers, and international transfers

Recipients and service providers

To provide our services and keep this website operational, we may rely on providers who may access or process personal data when necessary for the purposes indicated in this policy.

Among these providers are:

  • Web hosting, infrastructure, backup, and storage providers.
  • Content distribution, DNS resolution, and protection against attacks and malicious traffic service providers.
  • Email and communications service providers.
  • Providers of communication and transactional mail services.
  • Web analytics providers, provided that the user has given the corresponding consent.
  • Providers of fraud prevention, abuse, and automated form submission services.
  • Providers of artificial intelligence tools, only when their use is necessary for the previously informed purposes and appropriate safeguards have been adopted.
  • Tax, accounting, labor, or legal advisors when necessary for compliance with legal or contractual obligations.

When these providers act as data processors, they will process the data following our instructions and will be subject to the corresponding contractual, security, and confidentiality obligations.

The data may also be communicated to public administrations, judicial bodies, security forces, or other authorities when there is a legal obligation or it is necessary for the formulation, exercise, or defense of claims.

International transfers

Some of our providers belong to international business groups or may process data from countries located outside the European Economic Area.

When international data transfers occur, they will be carried out through one of the mechanisms permitted by applicable regulations, such as:

  • An adequacy decision by the European Commission.
  • The recipient's adherence to the EU-U.S. Privacy Shield, when applicable.
  • Standard contractual clauses approved by the European Commission.
  • Binding corporate rules.
  • Other adequate safeguards recognized by the General Data Protection Regulation.

You can request additional information about international transfers, the safeguards applied, and how to obtain a copy of such safeguards by writing to info@natiboo.es.

6. Your rights

You have the right to obtain confirmation about whether we are processing your personal data or not. You also have the right to access your data, request the rectification of inaccurate data, and, where applicable, request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances, you may request the limitation of the processing of your data, and in that case, we will only retain them for the exercise or defense of claims. For reasons related to your particular situation, you may oppose the processing. We will stop processing your data unless there are compelling legitimate grounds, or for the exercise or defense of potential claims.

In accordance with current legislation, you can exercise the following rights:

  • Access
  • Rectification
  • Deletion
  • Limitation of processing
  • Opposition
  • Portability
  • Withdraw consent

6.1. How can you exercise your rights?

You can exercise your rights by writing to info@natiboo.es, indicating the right you wish to exercise and providing the necessary information to identify yourself and locate the affected data.

When there are reasonable doubts about your identity, we may request additional information strictly necessary to verify it.

You also have the right to file a complaint with the Spanish Data Protection Agency, especially if you believe that we have not adequately addressed the exercise of your rights.

7. Electronic communications

In accordance with the provisions of Law 34/2002, of July 11, on Information Society Services and Electronic Commerce, if you specifically check the box for sending commercial communications, you authorize Natiboo to send you by email or other equivalent electronic communication means information about its services, contents, and news. You can withdraw your consent at any time by writing to info@natiboo.es or using the unsubscribe mechanism included in each communication.