Privacy Policy

• Company name: AIKIT RESEARCH, S.A.
• VAT: ESA56760267
• Registered office: Sector Literatos 38, 28760 Tres Cantos, Madrid (Spain)
• Email: admin@aikit.io
• Telephone: 914 68 22 04

This Policy applies to the websites operated by AIKIT RESEARCH, S.A.

Data protection contact: admin@aikit.io

AIKIT RESEARCH, S.A. acts in two distinct capacities:

a) As controller: when it processes personal data for its own purposes (handling enquiries, the contractual relationship, sending commercial communications, managing the website, etc.).

b) As processor:when clients use the AiKit platform and entrust their own data (“Client Data”) for processing. In this case, the client is the controller and AIKIT RESEARCH, S.A. acts solely on the client's instructions, in accordance with the Data Processing Agreement (DPA) available on this website.

3.1. Enquiries and requests for information

• Data processed: name, email, telephone, message content.
• Purpose: to address and handle your enquiry.
• Legal basis: legitimate interest (Art. 6.1.f GDPR) in responding to requests directed to the company.
• Retention period: until the enquiry is resolved and, where applicable, for the applicable statutory limitation periods.

3.2. Contractual relationship (AiKit platform clients)

• Data processed: identification, contact and billing data of the client and its designated users.
• Purpose: provision of the contracted service, billing, technical support and management of the contractual relationship.
• Legal basis: performance of the contract (Art. 6.1.b GDPR).
• Retention period: for the term of the contract and, thereafter, blocked for the applicable statutory periods (tax and commercial obligations: minimum 6 years; other liabilities: until they become time-barred).

3.3. Client Data within the AiKit platform

• Data processed:data entered by the client as Inputs and the Outputs generated (may include personal data at the client's discretion).
• Purpose: provision of the contracted AI service, exclusively.
• Legal basis: performance of the contract and compliance with the instructions of the client as controller (Art. 28 GDPR).
• Retention period: as stipulated in the DPA; maximum 30 days after the termination of the service, unless required by law.

3.4. Commercial communications (newsletter)

• Data processed: name and email address.
• Purpose: sending commercial information about the services of AIKIT RESEARCH, S.A.
• Legal basis: explicit consent of the data subject (Art. 6.1.a GDPR), in accordance with Art. 21 LSSI (Spanish E-Commerce Act 34/2002). For existing clients, legitimate interest in communications about services similar to those contracted, with the right to object at any time.
• Retention period: until consent is withdrawn or unsubscription is requested.

3.5. Browsing the website

• Data processed: browsing data (IP address, browser type, pages visited) collected by means of cookies.
• Purpose: technical operation of the website and, where applicable, statistical analysis.
• Legal basis: technical cookies: legitimate interest. Analytical and third-party cookies: consent (Art. 22.2 LSSI (Spanish E-Commerce Act 34/2002)).
• For further information, please consult our Cookie Policy.

AIKIT RESEARCH, S.A. guarantees that “Client Data” (Inputs and Outputs processed through the AiKit platform) will under no circumstances be used to train, develop or improve artificial intelligence models, whether its own or those of third parties. Your information is used solely to provide you with the contracted service. This commitment applies by default and to all plans, whether free or paid.

Your data may be disclosed to:

a) Technology providers (sub-processors): necessary for the provision of the service (cloud infrastructure, third-party AI models, etc.). We maintain an up-to-date list available to the data subject, which may be requested at admin@aikit.io.

b) Public Authorities: where there is a legal obligation (Tax Agency, courts, etc.).

c) We do not sell or transfer personal data to third parties for commercial purposes.

Depending on the service configuration and the providers or models the Client uses at any given time, processing may take place entirely within the European Economic Area (EEA) —with no international transfer— or may involve providers located in the United States (AI models such as OpenAI or Anthropic; cloud infrastructure such as Microsoft Azure). Where there is a transfer to the U.S., the following safeguards apply.

These transfers are carried out with the appropriate safeguards required by Chapter V of the GDPR (Arts. 44 to 49):

• Adequacy Decision: EU-US Data Privacy Framework (European Commission Implementing Decision of 10 July 2023), for providers certified under that framework.
• Standard Contractual Clauses (SCCs): approved by the European Commission, entered into with providers where required as an additional or alternative safeguard.

You may request additional information on the safeguards applied by writing to admin@aikit.io.

In accordance with Articles 15 to 22 of the GDPR and Articles 12 to 18 of the LOPDGDD, you have the right to:

• Access: to know whether we process your data and to obtain a copy of it.
• Rectification: to request the correction of inaccurate or incomplete data.
• Erasure (“right to be forgotten”): to request the deletion of your data when it is no longer necessary for the purpose for which it was collected.
• Restriction of processing: to request that processing be restricted in certain circumstances.
• Portability: to receive your data in a structured, commonly used format, or to request that it be transmitted to another controller.
• Objection: to object to the processing of your data in certain cases, including direct marketing.
• Not to be subject to automated decisions: including profiling, that produce legal effects or significantly affect you.

To exercise these rights, send an email to admin@aikit.io stating your identity and the right you wish to exercise. We will respond within a maximum period of one month.

If you consider that your rights have not been duly addressed, you may contact us at admin@aikit.io or lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

The User warrants that the data provided is true, accurate, complete and up to date. If you provide third-party data, you warrant that you have informed those persons and have obtained their authorisation.

AIKIT RESEARCH, S.A. applies technical and organisational security measures appropriate to the risk, in accordance with Article 32 of the GDPR. These include, among others: encryption of data in transit and at rest, least-privilege access control, activity monitoring, backups and incident response plans.

All personnel with access to personal data are bound by a duty of confidentiality.

The website uses cookies. For detailed information on the cookies used, their purpose and how to manage them, please consult our Cookie Policy, accessible on this website.

The services of AIKIT RESEARCH, S.A. are aimed exclusively at professionals and businesses. Persons under 18 years of age may not use the services available through this website.

AIKIT RESEARCH, S.A. reserves the right to amend this Privacy Policy in order to adapt it to legislative developments or changes in the services, updating the version date at the beginning of the document. The User is advised to review this policy periodically.

This Privacy Policy is governed by Spanish law and the applicable European regulations (GDPR, LOPDGDD). For any dispute, the parties submit to the Courts and Tribunals of the city of Madrid, without prejudice to the rights to which the User may be entitled in their capacity as a consumer.