Privacy Policy
Last updated: 15 October 2026.
At TRUEAI ACADEMY S.L. we only process the personal data we need to respond to the people who visit or contact us. This policy explains what data we process, why, with which providers and what your rights are, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Summary
- Controller: TRUEAI ACADEMY S.L., Tax ID B75255117.
- Purposes: to answer your enquiries and, if you agree, send you commercial information; to produce aggregated usage statistics for the site and to protect it.
- Legal basis: your consent, steps taken at your request before entering into a contract, and our legitimate interest.
- Recipients: we do not share your data with third parties. It is processed on our behalf by the hosting, email delivery and corporate email providers listed below.
- International transfers: yes, to the United States, with the safeguards required by the GDPR.
- Rights: access, rectification, erasure, objection, restriction, portability and withdrawal of consent.
- Further information: below.
1. Data controller
- Identity: TRUEAI ACADEMY S.L.
- Tax ID: B75255117
- Address: C/Isla de Tenerife, 552, 19170 El Casar, Spain
- Email: fernando@trueai.academy
- Phone: +34 650349938
2. What data we process and where it comes from
Contact form. Your name, email address, message and, if you provide it, phone number. We also record whether you accepted this policy (required to send the form) and whether you agreed to receive commercial communications (optional).
Emails you send us directly. Whatever data you include in them.
Browsing the site. When you visit the site, your browser sends technical data such as your IP address, browser type and the page requested. Our hosting provider uses it to serve the site, protect it against attacks and produce aggregated visit statistics without cookies.
All data comes from you. We do not process special categories of data, and we ask you not to include any in your messages.
3. Why we process your data and on what legal basis
| Purpose | Legal basis |
|---|---|
| To answer your enquiry and, where relevant, prepare a service proposal | Your consent and steps taken at your request before entering into a contract (art. 6.1.a and 6.1.b GDPR) |
| To send you information about our activities and services | Your consent, only if you tick the corresponding box (art. 6.1.a GDPR) |
| To produce aggregated usage statistics for the site, without cookies | Our legitimate interest in understanding how the site is used (art. 6.1.f GDPR) |
| To protect the site against attacks and automated traffic | Our legitimate interest in the security of the site (art. 6.1.f GDPR) |
We do not make automated decisions or build profiles from your data.
4. How long we keep your data
- Enquiries: for as long as needed to deal with them. If they lead to a business relationship, for the duration of that relationship and then for the applicable legal periods.
- Commercial communications: until you withdraw your consent.
- Technical browsing data: kept by our hosting provider for short periods for security purposes. Visit statistics are aggregated and cannot identify you.
5. Who we share your data with
We do not sell or share your data with third parties, except where required by law. To provide the service we use the following providers, who act as processors on our behalf under the corresponding data processing agreements:
| Provider | Service | Data | Location |
|---|---|---|---|
| Cloudflare, Inc. | Website hosting, security, cookieless visit statistics and processing of the contact form | Technical browsing data and, in transit to our inbox, the form data | United States and global network |
| Resend | Delivery of contact-form messages to our inbox | Form data | United States |
| Google (Google Workspace) | Corporate email, where we receive and answer your messages | Form data and the emails you send us | European Union and United States |
6. International transfers
Cloudflare, Resend and Google may process data in the United States. These transfers rely on the EU-U.S. Data Privacy Framework, where the provider is certified under it, or on the standard contractual clauses approved by the European Commission, under articles 45 and 46 GDPR.
7. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent, without affecting the lawfulness of processing carried out before the withdrawal.
To exercise them, write to fernando@trueai.academy or to our postal address, stating which right you wish to exercise. If we have reasonable doubts about your identity, we may ask for additional information to confirm it.
If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Minors
The site is aimed at companies and professionals and is not intended for children under 14. If you are under 14, please do not send us your data.
9. Cookies
The site does not use analytics, personalisation or advertising cookies. See our cookie policy for details.
10. Security
We apply technical and organisational measures appropriate to the risk (art. 32 GDPR), including: encrypted connections (HTTPS) across the whole site; contact-form messages are not stored in any website database but sent straight to our inbox; protection against automated submissions that requires no third-party services; and restricted access to the data.
11. Changes to this policy
We may update this policy to reflect legal changes or changes to our services. The new version will be published here with its update date.