1. Who We Are
This privacy policy explains how DataAlchemist Iberia, SL ("DataAlchemist", "we") processes personal data in connection with this website. DataAlchemist is the data controller.
Paseo de la Castellana 116, Planta 10A
28046 Madrid, Spain
Email: contact@dataalchemist.ai
2. Personal Data We Collect
We collect personal data when you submit an inquiry through our contact form or correspond with us by email: typically name, work email, organization, country, organization type, expected use profile, and the content of your message. When you book a meeting through our scheduling integration (Calendly), the scheduling provider collects the information you submit through their interface.
When you visit this website, we automatically collect technical information through cookies and similar technologies, including IP address, browser type, operating system, referring URL, pages visited, and approximate geographic location.
Providing contact-form information is voluntary, but we may not be able to respond to your inquiry or provide access-related information without the details needed to process the request.
3. How We Use Personal Data
Processing basis
Purpose and lawful basis under GDPR Article 6.
| Purpose | Lawful basis (GDPR Article 6) |
|---|---|
| Responding to your inquiry and managing related correspondence | Performance of pre-contractual measures or contract — Art. 6(1)(b) |
| Discussing access, licensing, walkthroughs, and account terms | Performance of pre-contractual measures or contract — Art. 6(1)(b) |
| Operating, securing, and improving our website, including site reliability and protection against misuse | Legitimate interests — Art. 6(1)(f) |
| Aggregated analytics and usage measurement | Consent where required — Art. 6(1)(a); legitimate interests where appropriate — Art. 6(1)(f) |
| Compliance with legal obligations (record-keeping, tax) | Legal obligation — Art. 6(1)(c) |
We do not use personal data submitted through this website for automated decision-making or profiling that produces legal or similarly significant effects.
4. Recipients and International Transfers
We share personal data only with parties that need it to support our operations and only under appropriate confidentiality and data-protection terms. Categories of recipients include hosting and infrastructure providers, customer-relationship and email-service providers, analytics and tag-management providers (including Google Analytics and Google Tag Manager), scheduling providers (including Calendly), professional advisers, and public authorities where required by law. We do not sell personal data and do not share it for third-party marketing purposes.
Some providers operate, or store data, outside the European Economic Area, including in the United States. Where personal data is transferred outside the EEA, we rely on appropriate safeguards under GDPR Articles 44–49, including Standard Contractual Clauses, the EU–US Data Privacy Framework where applicable, and equivalent protections under adequacy decisions.
5. Retention
We retain personal data only as long as necessary for the purpose for which it was collected, subject to applicable legal, accounting, or reporting obligations. Inquiry-related correspondence is typically retained for up to 36 months from the last meaningful interaction; client-relationship records are retained for the duration of the relationship and for the period thereafter required by law. When the retention period expires, personal data is deleted or anonymized.
6. Your Rights
Under the GDPR, you have the right to access, rectify, erase, restrict, and port your personal data, to object to processing based on legitimate interests, and to withdraw consent where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, contact us at contact@dataalchemist.ai. We will respond within the time limits set out in the GDPR (typically one month, extendable for complex requests).
If you believe our processing infringes the GDPR, you have the right to lodge a complaint with a supervisory authority: for Spain, the Agencia Española de Protección de Datos (www.aepd.es), or the supervisory authority in your country of residence or place of work.
7. Cookies and Analytics
This website uses cookies and similar technologies to operate the site, measure aggregated usage, and support integrated services. Categories include strictly necessary cookies (required for the site to function), analytics cookies (set by Google Analytics and similar providers), and functional cookies (set when you interact with services such as Calendly). You can manage cookies through your browser settings, or through any consent mechanism presented on this site. Disabling cookies may affect site functionality.
8. Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction, taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of processing.
9. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices, applicable law, or services. Updated versions will be posted on this page with the revised date shown at the top. Material changes will be communicated by reasonable means.
10. Contact
For any questions about this privacy policy or our processing of your personal data, contact us at contact@dataalchemist.ai or by post at the address shown in section 1.