Privacy policy

Nubo Cloud S.L. is committed to protecting the privacy of people who visit this website and use any of its services. This policy does not apply to third-party websites or social networks reached through links; Nubo Cloud S.L. does not control their content or privacy policies.

In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the protection of personal data and the guarantee of digital rights (LOPDGDD), we provide the following information about how your personal data is processed.

Who is the data controller?

Owner

Nubo Cloud S.L.

Tax ID (NIF)

B55356497

Address

C/ Pedret, 111 · 17007 Girona

Phone

972 095 945

Email

hola@nuboip.com

Registration

Registered in the Mercantile Registry of Girona, section 8, sheet GI-56646, folio 124, volume 2968

What data does this website collect?

This website has no forms and no user registration: browsing it does not ask you for any personal data.

The call and WhatsApp simulator runs inside your browser. It does not use your microphone and does not send what happens in it to any server.

Like any website, the server that hosts it records technical data about visits, such as the IP address or browser, so that it works and to protect it against abuse.

Why do we process your data?

• To answer the enquiries you send us by phone, email or WhatsApp.
• To manage the contracting and provision of our services, including AI voice and WhatsApp agents.
• If you consent, to send you information about our activities, products or services.
• To keep the website secure and running.

How long do we keep your data?

Personal data is kept while you use our services or wish to receive information, and afterwards for the periods required to meet our legal obligations: 6 years for accounting records for commercial purposes (art. 30 of the Spanish Commercial Code) and 4 years for tax purposes (arts. 66 to 70 of the Spanish General Tax Act).

What is the legal basis for processing?

Performance of the services contract, the consent you give us and, for technical data about visits, our legitimate interest in keeping the website secure and running.

If the person providing data is under 16, the consent of their parent, guardian or legal representative is required. If this is not the case, the legal representative will inform us as soon as they become aware of it.

Who will your data be shared with?

Data will not be shared with third parties unless required by law or necessary for the purpose of the processing.

To host the website and provide the service we use technology providers that act as data processors, with the safeguards required by the GDPR.

What are your rights?

• To obtain confirmation of whether we are processing your personal data.
• To access your data, request the correction of inaccurate data or ask for its erasure when, among other reasons, it is no longer needed for the purposes for which it was collected.
• To request, in certain circumstances, the restriction of processing. In that case we will only keep the data for the exercise or defence of claims.
• To object to processing on grounds relating to your particular situation. We will stop processing the data, except for compelling legitimate grounds or for the exercise or defence of possible claims.
• To data portability.
• Not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you.
• To lodge a complaint with the supervisory authority; in Spain, the Spanish Data Protection Agency (aepd.es).

How can you exercise them?

By sending a written request, with a copy of an identity document, to hola@nuboip.com or to C/ Pedret, 111 · 17007 Girona.

Where does your data come from and what data do we process?

The data we process comes from the data subject, who guarantees that it is accurate and undertakes to tell us of any changes. It is identification and contact data (postal or email addresses and phone number), limited to what is needed to provide our services and run our business.

Do we use cookies?

Only one technical cookie, to remember the language you have chosen. We do not use analytics or advertising cookies. You will find the details in the cookie policy.

What security measures do we apply?

We apply the measures in Article 32 of the GDPR to ensure a level of security appropriate to the risk, with mechanisms that ensure the confidentiality, integrity, availability and resilience of our systems. These include:

• Informing staff of data processing policies.
• Regular backups.
• Access control to data.
• Regular testing, assessment and evaluation processes.

How do we process data on behalf of our customers?

When we provide our services, for example when a Nubo IA agent answers a customer company's calls and WhatsApp messages, we process data for which that company is the controller. We do so as data processors under Article 28 of the GDPR. Therefore:

• We will process the data only on documented instructions from the controller, including with regard to transfers to third countries or international organisations, unless required to do so by Union or Member State law. In that case, we will inform the controller before processing, unless that law prohibits it on important grounds of public interest.
• We ensure that persons authorised to process the data have committed themselves to confidentiality.
• We apply the security measures in Article 32 of the GDPR: confidentiality, integrity, availability and resilience of systems; prompt restoration of access to data after an incident; regular testing of the effectiveness of the measures; and pseudonymisation and encryption where appropriate.
• We will respect the conditions in paragraphs 2 and 4 of Article 28 of the GDPR for engaging another processor.
• We will assist the controller in responding to requests to exercise the rights in Chapter III of the GDPR and in meeting the security obligations in Articles 32 to 36.
• At the choice of the controller, we will delete or return all data at the end of the service and delete existing copies, unless the law requires us to keep it.
• We will make available to the controller all information needed to demonstrate compliance with Article 28 of the GDPR and allow for audits and inspections by the controller or an authorised auditor.