Website privacy

Who processes your data

The controller of the data processed to respond to enquiries and manage this website is SHINY BRAIN, S.L., Spain, the owner of Datafruit. You can contact us at info@datafruit.es. The company's identification details are set out in the legal notice.

What information is used

The website has no registration or contact forms. Email and telephone links open the program or function configured on your device; opening them does not automatically send an enquiry through this page.

• If you contact us by email or telephone: your email address or number, name and the information you provide during the conversation, such as your company or service needs.
• When you visit the website: the hosting systems may process technical data needed to serve and protect the pages, such as your IP address, date, requested resource and browser information.

Please send only the information needed for your enquiry. We do not need passwords, access codes, identity documents or information about third parties for an initial enquiry.

Purposes and legal bases

• Responding to enquiries and preparing a requested proposal: taking steps before entering into a contract at the data subject's request, or managing the professional relationship on the basis of a legitimate interest in responding to the contact.
• Maintaining the availability and security of the website and email: a legitimate interest in preventing abuse, diagnosing incidents and protecting systems.
• Meeting legal obligations or handling claims: compliance with applicable obligations and, where appropriate, a legitimate interest in defending rights.

Contacting us does not subscribe you to an advertising list or activate WhatsApp notifications. This website's code does not include analytics, behavioural advertising or commercial profiling tools.

Who can access the data

Access is available to authorised people handling the enquiry and to service providers, to the extent necessary for their role:

• Page hosting and delivery: OpenAI Sites, with Cloudflare infrastructure for hosting, distribution and protection of web traffic. These services may process the technical connection data described in this policy.
• Email: Google Workspace, used to receive and manage email for the domain.

We do not sell contact data. Data may also be disclosed to authorities when there is a legal obligation.

The providers use international infrastructure, which may include the United States and other countries outside the European Economic Area. Transfer safeguards depend on the service and the applicable framework, including adequacy decisions or standard contractual clauses where appropriate. You can request information about the safeguards applicable to the processing of your data at info@datafruit.es.

You can consult OpenAI's information on providers and hosting, the Cloudflare privacy policy and the Google Workspace data processing terms.

How long data is kept

Correspondence is kept for as long as necessary to handle the enquiry and related matters. If a contractual relationship is established, the necessary information is managed as part of that relationship. Afterwards, only what is necessary for legal obligations or potential liabilities is retained, with restricted access where appropriate.

Technical data is retained according to its operational and security purposes. There is no single retention period for data with different characteristics and purposes.

Your rights

You can request access, rectification, erasure, objection, restriction and portability where applicable. Where processing is based on your consent, you may withdraw it without affecting processing lawfully carried out before withdrawal.

Write to info@datafruit.es, explaining your request and how you contacted us. Additional information will be requested only if necessary to identify you. See also the instructions for requesting deletion.

As a general rule, you will receive a response within one month. If the complexity or number of requests requires a lawful extension, you will be informed within that first month. You can lodge a complaint with the Spanish Data Protection Agency.