Privacy Policy

Version 1.0 - Last updated:

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD - Spanish data protection law), PalmAI informs users of this website about its privacy and personal data protection policy.

1. Data Controller

  • Controller identity: PalmAI - Hugo Nguyen, Self-Employed
  • Tax ID: ESY9751892K
  • Address: C. Pedro Miguel Hernandez Camacho, 41, 38760 Los Llanos de Aridane, Santa Cruz de Tenerife
  • Contact email: info@palmai.es
  • Website: https://palmai.es
  • Data Protection Officer (DPO): It is not mandatory to appoint a DPO under Article 37 of the GDPR for companies of this size. For data protection inquiries, contact via info@palmai.es.

2. Purpose of Data Processing

The personal data we collect through the website contact form will be processed for the following purposes:

  • Inquiry management: To attend to and respond to requests for information, quotes, or inquiries about our services that the user submits through the contact form.
  • Service provision: To manage the commercial relationship derived from contracting our technology services.
  • Improvement of user experience: To analyze website usage through analytical cookies (only with prior consent) to improve the functionality and content of the site.
  • Compliance with legal obligations: To comply with applicable legal obligations, such as the retention of fiscal and accounting documentation.

3. Legal Basis for Processing

The legal basis for the processing of your personal data is based on:

  • Consent of the data subject (Art. 6.1.a GDPR): By submitting the contact form, the user expressly consents to the processing of their data for the purposes indicated.
  • Performance of a contract (Art. 6.1.b GDPR): The processing is necessary for the performance of a contract or pre-contract in which the user is a party (quote request, service provision).
  • Legitimate interest (Art. 6.1.f GDPR): For technical cookies and essential website functionality that does not involve behavioral tracking for advertising or analytical purposes.
  • Legal obligation (Art. 6.1.c GDPR): To comply with legal obligations applicable to PalmAI, such as tax and accounting regulations.

4. Data Recipients

The personal data collected will not be transferred to third parties, except in the following cases:

  • Hosting service providers: The website is hosted on servers provided by third-party hosting companies that act as data processors under a data processing agreement. These providers are located within the European Union and comply with GDPR.
  • Email service providers: For communication via email with users, we use email service providers that act as data processors.
  • Public administrations: When required by law (tax authorities, courts, etc.).

PalmAI does not sell, rent, or transfer personal data to third parties for marketing purposes.

5. International Data Transfers

Currently, PalmAI does not perform international transfers of personal data outside the European Economic Area (EEA). If such transfers become necessary in the future, appropriate safeguards will be implemented in accordance with Chapter V of the GDPR (standard contractual clauses, adequacy decisions, etc.).

6. Data Retention Period

Personal data will be retained for the following periods:

  • Contact inquiries: Data will be retained for the time necessary to respond to the inquiry and up to 1 year after the last communication, unless the user requests deletion.
  • Commercial relationships: Data from contracted services will be retained for the duration of the contractual relationship and up to 6 years after its termination, in accordance with tax and accounting regulations (General Tax Law).
  • Consent-based cookies: Cookie data will be retained for a maximum of 25 months, in accordance with AEPD (Spanish Data Protection Agency) guidelines.

After these periods, data will be securely deleted or anonymized, unless there is a legal obligation to retain it.

7. Data Subject Rights

Users have the right to exercise the following rights regarding their personal data:

  • Right of access (Art. 15 GDPR): To obtain confirmation as to whether personal data are being processed and, if so, to access such data and information about the processing.
  • Right to rectification (Art. 16 GDPR): To obtain the rectification of inaccurate personal data or to complete incomplete data.
  • Right to erasure ("right to be forgotten") (Art. 17 GDPR): To obtain the deletion of personal data when they are no longer necessary for the purposes for which they were collected or when consent is withdrawn.
  • Right to restriction of processing (Art. 18 GDPR): To obtain restriction of processing in certain cases (e.g., while verifying the accuracy of contested data).
  • Right to data portability (Art. 20 GDPR): To receive personal data in a structured, commonly used, and machine-readable format, and to transmit those data to another controller.
  • Right to object (Art. 21 GDPR): To object to the processing of personal data based on legitimate interest or for direct marketing purposes.
  • Right not to be subject to automated individual decision-making (Art. 22 GDPR): To not be subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect the data subject.

How to exercise your rights

Users can exercise their rights through the following means:

  • Email: Sending a request to info@palmai.es, including a copy of an identity document (DNI, NIE, passport).
  • Postal mail: Sending a written request to C. Pedro Miguel Hernandez Camacho, 41, 38760 Los Llanos de Aridane, Santa Cruz de Tenerife.

PalmAI will respond to requests within a maximum period of 1 month from receipt of the request, which may be extended by 2 additional months if necessary, taking into account the complexity and number of requests.

Right to lodge a complaint

If users consider that the processing of their personal data violates the GDPR, they have the right to lodge a complaint with the competent supervisory authority:

  • Spanish Data Protection Agency (AEPD): www.aepd.es
  • Address: C/ Jorge Juan, 6, 28001 Madrid
  • Phone: 901 100 099 / 912 663 517

8. Data Security Measures

PalmAI has implemented appropriate technical and organizational security measures to protect personal data against unauthorized access, alteration, loss, or disclosure, in accordance with Article 32 of the GDPR:

  • Encryption: HTTPS/TLS encryption for data transmission over the internet.
  • Access control: Restricted access to personal data to authorized personnel only.
  • Regular backups: Periodic backups to prevent data loss.
  • Security updates: Regular updates of systems and software to protect against vulnerabilities.
  • Data minimization: Only data strictly necessary for the purposes indicated are collected.

Despite these measures, no internet transmission method or electronic storage method is 100% secure. PalmAI implements industry best practices but cannot guarantee absolute security.

9. Minors' Data

This website is not directed at minors under 14 years of age (or the minimum age required by applicable law). PalmAI does not knowingly collect personal data from minors without parental or guardian consent.

If you are a parent or guardian and believe that your child has provided us with personal data, please contact us at info@palmai.es so we can delete such data.

10. Cookies and Tracking Technologies

This website uses cookies and similar tracking technologies. For detailed information on the types of cookies used, their purpose, and how to manage them, please consult our Cookie Policy.

11. Updates to the Privacy Policy

PalmAI reserves the right to modify this Privacy Policy to adapt it to legislative changes, new data processing activities, or recommendations from data protection authorities. Any substantial change will be notified to users through a notice on the website or via email if we have the user's contact details.

It is recommended to periodically review this Privacy Policy to stay informed of any updates. The date of the last update is indicated at the top of this document.

12. Contact and Additional Information

For more information about our data protection practices or to exercise your rights, you may contact us through:

  • Email: info@palmai.es
  • Contact form: Access the form
  • Postal address: C. Pedro Miguel Hernandez Camacho, 41, 38760 Los Llanos de Aridane, Santa Cruz de Tenerife

For additional information, please also consult our Legal Notice and Cookie Policy.

This Privacy Policy complies with the GDPR (Regulation (EU) 2016/679) and the Spanish LOPD-GDD (Organic Law 3/2018). Periodic review by a specialized data protection legal advisor is recommended.