Privacy policy

Version 1.2.0, in force since October 9, 2026. This English text is the binding version of this document; the versions in other languages are translations provided for convenience.

Who is responsible for your data

The controller of the personal data processed through this website is:

• Company: AD Caldas Innotec SA
• NIF: A66316399
• Registered address: Calle Blanco 1011595 Torrecera (Cádiz)Spain
• Privacy contact: privacy@nordixaigency.com

We have not designated a data protection officer. For any question about your data, write to privacy@nordixaigency.com.

What data we process

• What you send us through the forms: your name, the name of your business, your email address, your phone number if you give it, your preferred channel, your country when the page does not say it, the solution or sector you ask about and your message. Your name and your email address are always required, and so is the name of your business, except on the waiting list. Your phone number is required when you ask us to reply by phone or on WhatsApp. When a form asks for your country, it is required too.
• How you reached us: the page, the button and the campaign or source that brought you to the form (for example the campaign parameters of the link you followed). If you accept analytics cookies, we also keep the first and last source of your visits and a random identifier that links your visits to the form you send us.
• Cookies and similar technologies: as explained in the cookie policy. Analytics and advertising cookies are used only with your consent; without it, Google receives only the notices without cookies that the cookie policy describes.
• Technical data: your IP address is checked once to prevent spam and is never stored; the server keeps only a keyed code derived from it for two hours, to limit abuse. The access logs of the network that delivers this website, which include the IP address, are kept for 90 days for security.
• When you go to the app: if you click «Create account» to sign up, this website passes to the NordixAIgency app your country, your language, the version of the price list, the page and the button you came from and, if you accepted analytics cookies, the source of your visit. The app has its own privacy notice, Terms of Service and data processing agreement, under the same controller.

Giving us your data is up to you, but a form cannot be sent without its required fields, and without them we cannot answer your request. We do not ask for special categories of data, and the service is meant for businesses. Please do not include sensitive information in your message.

Why we process it, and on what legal basis

Purpose	Legal basis
Answering your request (contact, prices, integrations, the waiting list) and following it up	Steps taken at your request before a contract (GDPR art. 6(1)(b))
Sending you commercial communications, only if you tick the separate, unticked box	Your consent (GDPR art. 6(1)(a) and LSSI-CE art. 21)
Measuring our website and our advertising with cookies and, when you send a form, telling Google Ads about it with your email address and your phone number (if you gave it) in hashed form	Your consent to the analytics or advertising measurement categories (LSSI-CE art. 22.2 and GDPR art. 6(1)(a))
Letting Google estimate, in aggregate and without cookies, the visits and requests our website and our ads bring, from the notices sent while you have not accepted analytics or advertising measurement	Our legitimate interest in knowing which of our spending works (GDPR art. 6(1)(f)), assessed and documented
Telling Google Ads when a request becomes a qualified request, with the click identifier and your email address in hashed form, or a purchase, with the click identifier and its value	Your consent to the advertising measurement category (GDPR art. 6(1)(a))
Knowing which page and campaign brought each request, and where requests stop on the way to a purchase	Our legitimate interest in knowing which of our spending works (GDPR art. 6(1)(f)), assessed and documented
Keeping the forms secure and free of spam and abuse	Our legitimate interest in the security of the service (GDPR art. 6(1)(f))
Keeping a record of your cookie choices and of the requests you make about your data	Our legal obligation to demonstrate consent and to answer those requests (GDPR arts. 6(1)(c), 7(1) and 12–22)

You can object to the processing based on legitimate interest at any time by writing to privacy@nordixaigency.com.

We take no decision about you based solely on automated processing, and we build no profile of you. If you accept personalised advertising, Google may add you to the audiences of our ads, as the cookie policy explains.

Who receives your data

We use these providers:

• Amazon Web Services, which hosts the website, the forms, the database and the sending of emails, in the European Union (Frankfurt), on our behalf and under a data processing agreement.
• Cloudflare, which runs the anti-spam check of the forms (Turnstile), on our behalf and under a data processing agreement.
• Microsoft, which provides the mailbox where we receive the notice of each request, with your contact details, on our behalf and under a data processing agreement.
• Google, which provides Google Tag Manager, Google Analytics and Google Ads. With your consent they use cookies; without it, Google receives only the notices without cookies that the cookie policy describes. These tools run in Google accounts that our group manages on behalf of AD Caldas Innotec SA, which remains the controller. Google processes the measurement and conversion data on our behalf, under its data processing terms. If you accept personalised advertising, Google also uses your visit for its own advertising, as an independent controller under its own terms.

Apart from that use by Google, which needs your consent, we do not pass your data to any other company to use for its own purposes, and we do not sell it. NordixBIOS, the platform the solutions are built on, receives nothing from this website's forms. We may disclose data to public authorities when the law requires it.

Transfers outside the European Economic Area

Google LLC, in the United States, receives data from Google Ads and Google Analytics under the EU-US Data Privacy Framework, for which it is certified, with the standard contractual clauses of the European Commission as a fallback. The EU General Court confirmed the Framework on 3 September 2025; an appeal is pending before the Court of Justice. Where another provider processes data outside the European Economic Area, the transfer relies on the safeguards of its data processing terms, such as an adequacy decision or the standard contractual clauses.

How long we keep it

• Your request and your contact details: 24 months from the last change in the status of your request, and then they are deleted. The proof of a consent is kept for three more years.
• The history of your visits linked to a request (only with analytics consent): 25 months.
• Anti-spam and security records: from two hours to 90 days, depending on the record.
• Access logs of the network that delivers this website: 90 days.
• Records of your cookie choices: three years.
• Records of requests about your data: five years.
• Google Analytics: 14 months. Data sent to Google Ads is kept by Google under its own terms.
• Cookies: as listed in the cookie policy.

Your rights

You can ask for access to your data, its correction or deletion, the restriction of its processing, its portability, and object to its processing. You can withdraw a consent at any time, without affecting what was done before, from the cookie settings or by writing to us. Send your request to privacy@nordixaigency.com; we answer within one month.

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) (www.aepd.es), or to the data protection authority of the country of the European Union where you live, work or where the alleged infringement took place.

Cookies

We use cookies and similar technologies as explained in the cookie policy. Unlike some websites, we do use analytics and advertising cookies, but only when you accept them.

Changes to this policy

This policy has a version number, shown at the top. Each request you send us records the version of the policy that was in force, so we always know what you were told. If we change the policy, we update its version and the date above.