Who We Are

This Privacy Policy explains how ANDALUZA DE PROYECTOS SIGLO XXI SL (“Andaluza,” “we,” “our,” or “us”) collects, uses, stores, protects, and shares personal data when you visit our website, contact us, request information, use our platform, or interact with our services.

Our website is andaluza.ai.

Company Information

ANDALUZA DE PROYECTOS SIGLO XXI SL is a company registered in Spain.

Our operating address is Carretera Ctra. de Vicálvaro a Coslada S/N KM 5400, 28032 Madrid, Spain.

Our NIF is B23907728.

You can contact us by email at contact@andaluza.ai or through our contact page at https://andaluza.ai/contact/.

The company is registered in the Registro Mercantil de Madrid under hoja M-866712.

Scope of This Privacy Policy

This Privacy Policy applies to personal data collected through our website, contact forms, demo requests, sales communications, marketing interactions, customer support, account access, platform usage, and related services.

Where Andaluza processes personal data on behalf of a business customer through our enterprise platform, we may act as a data processor. In that case, the customer acts as the data controller, and the processing is governed by the applicable customer agreement or data processing agreement.

Information We Collect

We may collect personal data that you provide directly to us, including your name, business email address, company name, job title, phone number, message content, demo request details, account information, support requests, billing information, and communication preferences.

We may also collect technical information automatically when you use our website or services, including IP address, browser type, device type, operating system, pages visited, access times, referral information, cookie data, and website usage information.

When customers use our platform, we may process data submitted, uploaded, connected, or generated through the platform, including workflow configurations, integration data, prompts, agent instructions, business documents, audit logs, system activity, and related operational data.

How We Use Personal Data

We use personal data to operate and improve our website, respond to enquiries, schedule demos, provide sales support, manage customer relationships, deliver services, provide technical support, maintain security, prevent fraud or misuse, monitor platform performance, comply with legal obligations, and communicate with users.

We may also use personal data to send product updates, service announcements, marketing communications, or other business-related messages where permitted by law or where you have provided consent.

Legal Basis for Processing

We process personal data under the following legal bases, depending on the context.

We may process data to take steps before entering into a contract or to perform a contract with you or your organization.

We may process data where it is necessary for our legitimate interests, including operating our business, improving our services, protecting our platform, communicating with customers and prospects, and maintaining security.

We may process data where required to comply with legal obligations.

We may process data based on your consent, including for certain marketing communications or non-essential cookies where consent is required.

Controller and Processor Roles

For website visitor data, prospect data, newsletter data, sales communication data, and most direct business-relationship data, Andaluza acts as the data controller.

For customer-submitted data processed through the enterprise platform on a customer’s instructions, Andaluza may act as a data processor. These processor relationships should be governed by a separate data processing agreement that describes the subject matter, duration, nature, purpose, categories of data, categories of data subjects, security obligations, and subprocessor terms.

Marketing Communications

If you request information, submit a contact form, request a demo, or subscribe to updates, we may send you relevant business communications about Andaluza products and services.

Where consent is required, we will request it separately. You may unsubscribe or opt out of marketing communications at any time by using the unsubscribe option in our emails or by contacting us at contact@andaluza.ai.

AI and Automated Processing

Andaluza provides an enterprise AI workflow and orchestration platform that may include AI agents, workflow automation, integrations, audit trails, orchestration, governance features, authentication controls, and AI-assisted outputs.

AI-assisted features may process information provided by customers or users to generate outputs, automate workflows, route tasks, summarize content, classify information, or support business actions.

AI-generated outputs may not always be complete, accurate, or suitable for every business context. Users and customers are responsible for reviewing AI-assisted outputs before relying on them for important business, legal, financial, compliance, employment, or operational decisions.

Andaluza does not provide legal, financial, tax, accounting, employment, or regulatory advice through the website or general platform descriptions.

Customer Data and Platform Processing

Customers are responsible for ensuring that they have the right to upload, connect, or process any personal data or business data through the Andaluza platform.

Where we process customer data on behalf of a customer, we process such data according to the customer’s documented instructions and the applicable agreement.

Customers are responsible for configuring workflows, integrations, permissions, user access, AI agents, and connected-system actions appropriately for their organization.

Data Sharing

We do not sell personal data.

We may share personal data with trusted service providers that help us operate our website, platform, and business. These may include hosting providers, infrastructure providers, security tools, analytics providers, communication tools, customer relationship management tools, payment or billing providers, professional advisers, and support providers.

We may also disclose personal data where required by law, regulation, legal process, court order, public authority request, or where necessary to protect our rights, users, customers, systems, or services.

International Data Transfers

Personal data may be processed or accessed by service providers located outside the European Economic Area where necessary for business operations.

Where such transfers occur, we use appropriate safeguards required by applicable data protection laws, such as adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.

Data Retention

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy.

Retention periods may depend on the type of data, the purpose of processing, contractual requirements, legal obligations, security needs, dispute resolution, and business record requirements.

When personal data is no longer needed, we will delete, anonymize, or restrict it in accordance with applicable law.

Security

We use appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

These measures may include access controls, authentication, encryption where appropriate, logging, monitoring, security reviews, vendor controls, and internal procedures.

No online service can guarantee absolute security. Users are responsible for protecting their credentials and using secure access practices.

Your Data Protection Rights

Subject to applicable law, you may have the right to access your personal data, request correction of inaccurate data, request deletion, restrict processing, object to processing, request data portability, withdraw consent, and object to certain automated decisions.

You can exercise your rights by contacting us at contact@andaluza.ai.

You also have the right to lodge a complaint with the Spanish Data Protection Authority, the Agencia Española de Protección de Datos, if you believe your personal data has been processed unlawfully.

Cookies

We may use cookies and similar technologies to operate our website, improve user experience, analyze website usage, remember preferences, and support marketing or performance measurement where permitted.

Non-essential cookies will only be used where legally permitted and, where required, after receiving consent.

More information should be provided in a separate Cookie Policy or cookie settings page.

Children

Our website and services are intended for business and professional users. They are not directed to children.

You must be at least 18 years old to use our services or interact with the platform as a user.

We do not knowingly collect personal data from children.

Third-Party Links and Integrations

Our website or platform may contain links to third-party websites, services, tools, APIs, models, or integrations.

We are not responsible for the privacy practices, security, availability, or content of third-party services. Your use of third-party services may be governed by their own terms and privacy policies.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When we make changes, we will update the “Last updated” date above. Continued use of our website or services after an update means the revised policy applies from the updated date.

Contact Information

For questions about this Privacy Policy or to exercise your data protection rights, please contact us:

ANDALUZA DE PROYECTOS SIGLO XXI SL

Carretera Ctra. de Vicálvaro a Coslada S/N KM 5400, 28032 Madrid, Spain

NIF: B23907728

Email: contact@andaluza.ai

Contact page: https://andaluza.ai/contact/.