ESContact

Privacy Policy

Última actualización: April 2026

This is an English translation, provided for convenience. The binding version is the Spanish one: Política de Privacidad. In the event of any discrepancy, the Spanish version prevails.

1. Data controller

Company name:
AIKIT RESEARCH, S.A.
Tax ID (CIF):
A56760267
Address:
Sector Literatos 38, 28760 Tres Cantos, Madrid (Spain).
Email:
admin@aikit.io
Telephone:
+34 914 68 22 04

This Policy applies to the websites operated by AIKIT RESEARCH, S.A.

Data protection contact: admin@aikit.io

2. Dual role: controller and processor

AIKIT RESEARCH, S.A. acts in two distinct capacities:

a) As data controller: when it processes personal data for its own purposes (handling enquiries, the contractual relationship, sending commercial communications, running the website, and so on).

b) As data processor: when customers use the Nodu platform and entrust their own data («Customer Data») to it for processing. In that case the customer is the data controller and AIKIT RESEARCH, S.A. acts solely on their instructions, in accordance with the Data Processing Agreement (DPA) available on this website.

3. Data we process, purposes and legal bases

3.1. Enquiries and requests for information

Data processed:
name, email, telephone, content of the message.
Purpose:
to deal with and manage your enquiry.
Legal basis:
legitimate interest (art. 6.1.f GDPR) in dealing with requests addressed to the company.
Retention period:
until the enquiry is resolved and, where applicable, for the applicable statutory limitation periods.

3.2. Contractual relationship (Nodu platform customers)

Data processed:
identifying, contact and billing data of the customer and of their designated users.
Purpose:
provision of the contracted service, billing, technical support and management of the contractual relationship.
Legal basis:
performance of the contract (art. 6.1.b GDPR).
Retention period:
for the term of the contract and, thereafter, blocked for the statutory periods (tax and commercial obligations: minimum 6 years; other liabilities: until they lapse).

3.3. Customer Data inside the Nodu platform

Data processed:
whatever the customer enters as Inputs and the Outputs generated (they may include personal data at the customer's discretion).
Purpose:
provision of the contracted AI service, exclusively.
Legal basis:
performance of the contract and compliance with the customer's instructions as data controller (art. 28 GDPR).
Retention period:
as set out in the DPA; a maximum of 30 days after the end of the service, unless there is a legal obligation.

3.4. Commercial communications (newsletter)

Data processed:
name and email address.
Purpose:
sending commercial information about the services of AIKIT RESEARCH, S.A.
Legal basis:
the data subject's explicit consent (art. 6.1.a GDPR), in accordance with art. 21 LSSI-CE. In the case of existing customers, legitimate interest for communications about services similar to those contracted, with the possibility of objecting at any time.
Retention period:
until consent is withdrawn or unsubscription is requested.

3.5. Browsing the website

Data processed:
browsing data (IP address, browser type, pages visited) collected by means of cookies.
Purpose:
technical working of the website and, where applicable, statistical analysis.
Legal basis:
technical cookies: legitimate interest. Analytics and third-party cookies: consent (art. 22.2 LSSI-CE).

For more information, please see our Cookie Policy.

4. Your data is not used to train AI models

AIKIT RESEARCH, S.A. guarantees that «Customer Data» (Inputs and Outputs processed through the Nodu platform) will not under any circumstances be used to train, develop or improve artificial intelligence models, whether its own or those of third parties. Your information is used exclusively to provide you with the contracted service. This commitment applies by default and to all plans, free or paid.

5. Recipients of the data

Your data may be disclosed to:

a) Technology providers (sub-processors): those necessary for providing the service (cloud infrastructure, third-party AI models, and so on). We keep an up-to-date list available to data subjects, which can be requested at admin@aikit.io.

b) Public authorities: where there is a legal obligation (the Spanish tax authority, the courts, and so on).

c) We do not sell or transfer personal data to third parties for commercial purposes.

6. International data transfers

Depending on the configuration of the service and the providers or models the Customer uses at any given time, processing may take place entirely within the European Economic Area (EEA) — with no international transfer — or involve providers located in the United States (AI models such as OpenAI or Anthropic; cloud infrastructure such as Microsoft Azure). Where there is a transfer to the USA, the following safeguards apply.

These transfers are carried out with the appropriate safeguards required by Chapter V of the GDPR (arts. 44 to 49):

  • Adequacy Decision: EU-US Data Privacy Framework (European Commission Implementing Decision of 10 July 2023), for providers certified under that framework.
  • Standard Contractual Clauses (SCCs): approved by the European Commission, entered into with those providers that require them as an additional or alternative safeguard.

You may request further information about the safeguards applied by writing to admin@aikit.io.

7. Your rights

In accordance with articles 15 to 22 of the GDPR and articles 12 to 18 of the LOPDGDD, you have the right to:

  • Access: find out whether we process your data and obtain a copy of it.
  • Rectification: request the correction of inaccurate or incomplete data.
  • Erasure (the «right to be forgotten»): request the deletion of your data when it is no longer necessary for the purpose for which it was collected.
  • Restriction of processing: request that processing be restricted in certain circumstances.
  • Portability: receive your data in a structured, commonly used format, or request that it be transmitted to another controller.
  • Objection: object to the processing of your data in certain cases, including direct marketing.
  • Not to be subject to automated decisions: including profiling, which produce legal effects or significantly affect you.

To exercise these rights, send an email to admin@aikit.io stating your identity and the right you wish to exercise. We will reply within a maximum of one month.

If you believe your rights have not been properly attended to, you may contact us at admin@aikit.io or lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Accuracy of the data

The User warrants that the data provided is true, accurate, complete and up to date. If you provide third-party data, you warrant that you have informed those people and have their authorisation.

9. Security

AIKIT RESEARCH, S.A. applies technical and organisational security measures appropriate to the risk, in accordance with article 32 of the GDPR. These include, among others: encryption of data in transit and at rest, least-privilege access control, activity monitoring, backups and incident response plans.

All staff with access to personal data are bound by a duty of confidentiality.

10. Cookies

The website uses cookies. For detailed information about the cookies used, their purpose and how to manage them, please see our Cookie Policy, available on this website.

11. Minors

The services of AIKIT RESEARCH, S.A. are aimed exclusively at professionals and businesses. Persons under 18 years of age may not use the services available through this website.

12. Changes

AIKIT RESEARCH, S.A. reserves the right to amend this Privacy Policy to adapt it to legislative developments or changes in its services, updating the version date at the top of the document. The User is advised to review this policy periodically.

13. Applicable law and jurisdiction

This Privacy Policy is governed by Spanish law and the applicable European regulations (GDPR, LOPDGDD). For any dispute, the parties submit to the Courts and Tribunals of the city of Madrid, without prejudice to the rights the User may have as a consumer.