Last updated: 21 September 2026 · Version 3
This English translation is provided for convenience. In the event of any discrepancy, the Spanish version prevails.
Aligeria is committed to complying with Spanish and European personal data protection law and to applying the measures set out in the General Data Protection Regulation (GDPR) (EU) 2016/679 and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights.
This policy describes how the data you provide when contacting Aligeria or hiring its services is processed. The data controller is David Conde Lázaro, trading as Aligeria.
- Owner and data controller
- David Conde Lázaro
- Trade name
- Aligeria
- Tax ID (NIF)
- 07977219Z
- Registered address
- Calle Primera, 17-19, Oficina 204, 37188 Carbajosa de la Sagrada (Salamanca)
Collection and processing of personal data
Personal data is any information relating to a person, such as their name, email address, address, phone number or tax ID. When a User visits this website, certain information may be stored automatically for technical reasons, such as the IP address assigned by their internet provider.
Only the data needed to provide the contracted service or to respond properly to an enquiry will be collected. The data collected includes contact details, the content you provide in your messages and the technical records needed to handle the enquiry. It will not be used for any purpose other than the one for which it was collected.
Processing activities and purposes
Enquiries and requests for information
Purpose: to answer questions about our services and assess the needs raised by the person through the available contact channels.
Legal basis: taking steps prior to entering into a contract when the enquiry concerns hiring a service and, in other cases, the consent applicable to the requested processing.
Provision of services
Purposes: managing contracted services, preparing quotes, coordinating projects, providing support and meeting invoicing and administrative obligations.
Legal basis: performance of the contract and compliance with applicable legal obligations.
Data may be processed by technology providers, accountants, advisers and other providers acting on behalf of the controller where necessary to provide the service. It may also be disclosed to public authorities where there is a legal obligation to do so.
This website's form and assistant
When you submit the form, your name, email, message and the optional company and phone details are sent to the website's server and forwarded by email to Aligeria via Resend, in order to handle your enquiry. The enquiry is stored in Supabase together with your acceptance of the privacy policy and the delivery status; it also remains in our support inbox and in the email service logs. It is not added to any marketing list.
Alicia: conversations and enquiry preparation
Alicia is an artificial intelligence assistant, not a person. Its purpose is to answer questions about Aligeria and help you explain your needs. Its answers may contain errors; your project will be assessed by our human team. It does not make decisions that produce legal or similarly significant effects on visitors.
The messages you send and the context of the conversation are sent to OpenAI to generate answers and are stored in Supabase to keep the conversation. This processing starts when you send messages and does not depend on whether you later confirm an enquiry to the team. Do not include passwords, bank details, special category data or third-party data that is not needed for your enquiry.
If you turn on "Voice", your browser will ask for microphone access when needed. While it is active, the audio is sent to OpenAI to keep the conversation going and generate synthetic speech. We display and store transcripts in the conversation history; they may contain errors, so please check your contact details carefully. Aligeria does not store audio files in its database. OpenAI processes audio under the terms and controls that apply to its API. When you turn off "Voice", close the assistant or move the page to the background, we stop capturing the microphone. Voice is not activated automatically when you reload the page.
We keep voice session identifiers, dates, closing status and the duration reported by the provider in order to monitor usage and resolve incidents. To limit abuse, we use an identifier that cannot be directly reversed to the IP address. Allowing microphone access does not confirm that an enquiry is sent: with voice, too, you must review the details and press "Accept and send enquiry".
To pass an enquiry to the team, Alicia asks for your name and email; phone and company are optional. Before it is sent, you can review and correct the summary. By pressing "Accept and send enquiry" you confirm the details and agree to their processing to handle your request under this policy. There is no additional checkbox. The enquiry is recorded and sent via Resend after that action; typing "yes" in the chat does not send it. The email contains the summary and your contact details, not the full conversation history.
We store the visitor's messages and Alicia's answers, the technical conversation identifier, the activity and expiry dates and the draft enquiry. For confirmed enquiries we also store the source (form or Alicia), the contact details, the reviewed message or summary, the date and version of your acceptance and the records needed to manage the email: status, attempts and provider identifier. These records help avoid duplicates and resolve delivery failures.
You can resume the conversation for up to 24 hours of inactivity from the same browser. A technical cookie containing a session identifier is used, together with tab storage for the visual state and any unsent text. "Start again" deletes the conversation and its draft, but does not delete or cancel enquiries already confirmed to the team. Closing the browser or deleting the cookie does not delete the history stored on the server.
Marketing communications
This website does not currently offer a newsletter subscription. If one is enabled, you will be informed of its purpose and asked for the appropriate consent, with a way to unsubscribe. No marketing communications will be sent without the necessary legal basis.
Users and minors
Aligeria's services are aimed at businesses and professionals. This website has no user registration or private area.
Only people over 14 years of age may provide personal data on their own consent. For children under 14, the consent of their parents or guardians is required. Hiring services requires the corresponding legal capacity.
Security, accuracy and disclosure of data
Security measures
Aligeria will take reasonable technical and organisational measures to prevent the loss, misuse, alteration, unauthorised access to and theft of data. Before enabling data submission through forms, the website must use a secure HTTPS connection and measures appropriate to the processing.
Accuracy of data
Users state that the data they provide is true and correct and undertake to keep it up to date. They will be responsible for any conflicts arising from false or inaccurate data.
Disclosure and data processors
Aligeria will not disclose data to third parties except where required by law or where necessary to provide a service through a Data Processor. This may include payment platforms, technology providers, accountants, advisers or other providers bound by contract and subject to confidentiality obligations.
Technology providers
- Vercel: hosting and running the published website, with the technical data needed to serve requests.
- OpenAI: receives the messages and context needed to generate Alicia's answers and, when you turn on voice mode, processes the audio and generates spoken answers.
- Supabase: stores conversations and enquiries. This project's database is hosted in Paris, European Union.
- Resend and Aligeria's mailbox provider: process and keep the emails for confirmed enquiries.
Aligeria does not use these conversations to train its own model. According to its documentation, OpenAI does not use API data to train its models by default, unless sharing is expressly enabled. Providers may keep technical, security or backup records under their own terms. Deleting a conversation at Aligeria does not mean all those copies are deleted immediately.
The European location of the database does not mean that all processing by providers takes place exclusively in the European Union. Using these services may involve international data transfers. You can request information about the recipients and the applicable safeguards by writing to hola@aligeria.com.
More information from the providers: OpenAI API data processing, Supabase data processing agreement and Resend data processing agreement.
Where there is a legal obligation, Client data may be disclosed to bodies such as the Spanish Tax Agency, banks or competent authorities.
Exercising your rights
Users may exercise their rights by sending a request to hola@aligeria.com or by writing to the address given in the Legal notice. The request must state the right being exercised and the details needed to identify the User and respond. Additional information to confirm identity will only be requested where there is reasonable doubt.
The recognised rights include:
- Access: finding out whether your data is being processed and obtaining information about that processing.
- Rectification and erasure: correcting inaccurate data or requesting its deletion where appropriate.
- Restriction: requesting that processing be limited to certain purposes.
- Objection: objecting to processing in the cases provided for by law.
- Portability: receiving your data in a structured format where applicable.
Where processing is based on consent, Users may withdraw it at any time without affecting the lawfulness of prior processing. Requests will be handled within the applicable legal time limit.
If you believe there is a problem with how your data is processed, you can lodge a complaint with the Spanish Data Protection Agency (AEPD).
Data retention
Data provided for an enquiry will be kept for as long as needed to handle it. Where processing is based on consent, it may be withdrawn at any time.
Client data will be processed while the contractual relationship lasts and, afterwards, for the periods required to meet legal obligations or deal with potential liabilities. Retention will depend on the nature of the information and the service, limiting any later use to those purposes.
Submitted enquiries are kept in the database and in the support mailbox for as long as needed to manage them.
The 24-hour inactivity period limits how long a conversation can be resumed; it does not mean that all records are deleted automatically when it ends. You can request erasure through the channels given in this policy.
Other processing
Confidentiality
Information provided by Users will be treated as confidential and will not be used for purposes other than those described in this policy.
Social media
This website links to Aligeria's official profiles on Instagram and X. If you visit them or interact with their posts, each platform will process your data under its own policies. Aligeria will directly process the data it receives through those profiles to share news about its activities and respond to Users within the possibilities of each platform. No data will be extracted for other purposes without an appropriate legal basis.
Cookies and third-party tools
Alicia uses a technical session cookie lasting up to 30 days. It does not contain the conversation text; access to the history expires after 24 hours of inactivity. Tab storage keeps the chat state and draft message to make browsing easier. These elements are not used for advertising.
This version does not include analytics or advertising cookies, tracking pixels or embedded social content. Social media icons are local graphics. If tools that use cookies or similar technologies are added, this information will be updated and consent will be requested where required.
Validity
This policy may be updated to reflect changes in legislation, case law, technology or the processing carried out. The version published on this page applies at any given time.
