Privacy policy

Last updated: 24 October 2026

This policy explains how personal data related to nexuradigital.es, its technical measurement, the artificial-intelligence assistant and contacts initiated via WhatsApp, email or telephone are processed.

Privacy by design: the site does not install analytics or advertising cookies, does not use localStorage or sessionStorage to track visitors and the chatbot uses a locally hosted AI model. Public conversations are not used to train or re-train the model.

1. Controller and contact

Data controller: Alfonso Ángel Morales Toledano, C/ Párroco A. Jurado, 12, 14520 Fernán-Núñez (Córdoba), Spain. Operational controller of the site: NexuraDigital, commercial name used for the provision of digital services at nexuradigital.es.

Email: nexuradigital2026@gmail.com
Phone/WhatsApp: 603 636 249
Identifying information of the provider: Legal notice.

2. Data that may be processed

Origin	Data	Observation
Navigation and security	IP address, date/time, requested URL, HTTP status, user-agent and technical referrer when sent by the browser.	Web-server access data; does not include the content of chatbot queries.
First-party measurement	Aggregated event, page, destination and UTM parameters if present.	The specific measurement log does not record IP addresses or use cookies or persistent identifiers.
Chatbot	Text entered by the visitor and minimal technical request metadata.	The message is processed transiently by a local model. The gateway does not keep a conversation history or record the message body.
Voluntary contact	Data provided by the user when writing via WhatsApp/email or calling.	Subsequent processing also depends on the chosen channel and its provider.

3. Purposes and legal bases

Provide and protect the site: availability, error diagnosis, abuse prevention and security. Legal basis: legitimate interest in maintaining a safe and reliable service (Art. 6(1)(f) GDPR).
Handle commercial or pre-contractual enquiries: answer questions about services and prepare a possible quote when requested by the user. Legal bases: pre-contractual measures at the data subject’s request (Art. 6(1)(b) GDPR) and, where applicable, legitimate interest in managing enquiries (Art. 6(1)(f) GDPR).
Improve the site: first-party usage statistics without persistent cookies or individual profiling. Measurement is limited to events and pages to assess usefulness and conversion.

4. Artificial intelligence assistant

The assistant identifies itself as AI from the first interaction. It is limited to NexuraDigital products and services and must not be used to transmit passwords, keys, health data, financial information or other especially sensitive data.

Engine: AI model executed locally on infrastructure controlled by NexuraDigital.
Training: public conversations are not used to train or re-train the model.
Persistence: the gateway does not retain conversational history; the content is processed to generate the response and is not included in the standard server log.
Decisions: the chatbot does not make decisions with legal effects or similarly significant effects on the person.
Pricing: any request for price or quote is redirected to human assistance via WhatsApp.

5. Recipients and external services

The technical infrastructure of the site may involve necessary hosting and communications providers. When the user chooses to contact via WhatsApp or email, those external services process data according to their own terms and policies. The chatbot does not send the conversation text to an external AI-model provider.

6. Retention

Access/security logs: daily rotation with up to 14 rotations, normally around 14 days, unless evidence must be retained for an incident, claim or legal obligation.
First-party measurement: technical records rotate under the same policy; aggregated statistics that cannot identify an individual may be kept longer.
Chatbot: no durable storage of conversation history by the gateway; access metadata follows the period above.
Commercial contacts: retained for the time necessary to handle the request and thereafter for the legal or defence periods applicable to any claims.

7. Rights

Data subjects may request access, rectification, erasure, restriction, objection and, where applicable, portability by writing to nexuradigital2026@gmail.com. If they consider the processing non-compliant with the regulations, they may lodge a complaint with the Spanish Data Protection Agency (AEPD).

8. Children and sensitive data

The site and chatbot are not specifically directed at children. Users should not enter sensitive information about themselves or third parties into the chatbot.

9. Changes

This policy will be updated before activating any new relevant processing, non-essential cookies, external AI providers or tracking mechanisms that alter what is described herein.

Home · Privacy · Cookies · Legal notice