Privacy Policy

1. Data Controller

• Controller: ARANIS INTELLIGENCE, S.L.
• Tax ID (NIF): B05755699
• Registered Address: Calle Gran Vía de Don Diego López de Haro, 1, 48001 Bilbao, Bizkaia, Spain
• Privacy Contact Email: maite.mugica [at] aranisintelligence.com

2. Data Collected and Contact Channels

Our contact form requests your name, company, professional email address, and an optional message. When submitted, this data is received through the form-handling service of our hosting provider, Netlify, and is used to generate an email containing your inquiry, which is sent to the Aranis Intelligence contact inbox. The data is retained within that email message, stored in Google Workspace, and in the form submission records kept by Netlify until we delete them. This workflow does not use an additional contact database.

The mandatory checkbox confirms that you have read this Privacy Policy. The authorization to receive news and updates is separate, optional, and unchecked by default. Your choice is included in the contact message to manage your subscription and serve as proof of consent when granted.

If you contact us directly via email, the message and any data you include are received through the same email service. Our website is hosted by Netlify, Inc. Technical logs from the website and the email delivery service may include your IP address and connection data.

3. Purposes and Legal Bases

Contact emails are used to handle support inquiries, respond to requests for commercial information, and follow up on those requests. Messages sent through the form and those received directly via email are managed for the same purposes:

• Pre-contractual or Contractual Measures: Inquiries linked to a requested service or support for an existing contract are handled on the basis of pre-contractual measures or the performance of a contract, as applicable (Article 6.1.b of the GDPR).
• Legitimate Interest (Inquiries): Other general inquiries are handled based on Aranis Intelligence's legitimate interest in responding to messages it receives (Article 6.1.f of the GDPR), taking into account the rights and expectations of the sender.
• Legitimate Interest (Security & Technical Operations): Technical connection data is used to serve the website, maintain its operation, and prevent incidents and abusive access, based on Aranis Intelligence's legitimate interest in protecting its services (Article 6.1.f of the GDPR).
• Consent (Web Analytics): If you accept analytics cookies in the preferences panel, technical visit data and cookies are used to obtain aggregated audience statistics (visits, pages viewed, traffic sources, and user interactions) using Google Analytics. The legal basis is your consent (Article 6.1.a of the GDPR and Article 22.2 of the Spanish LSSI), which you can withdraw at any time via the "Cookie Settings" panel.
• Consent (Marketing & Updates): Sending news and commercial communications via email is based on your specific consent for that purpose (Article 6.1.a of the GDPR). Only those who have explicitly authorized it are included; requesting support or information does not imply subscribing.

You may withdraw your authorization for marketing updates at any time, without affecting the handling of your inquiries, by using the unsubscribe link included in each communication or by writing to maite.mugica [at] aranisintelligence.com. No automated decisions or profiling are carried out using the data submitted via the contact form.

4. Data Retention

The retention criterion for support and commercial information emails is to keep them for as long as necessary to manage the request, conduct follow-ups, or service any resulting contractual relationship. This applies to both emails received directly and those sent through the form. Once they are no longer needed, they will be deleted or, where required by legal obligations or potential liabilities, retained in a blocked state for the applicable statutory limitation periods.

Data used to send news and updates is kept for as long as your authorization remains valid and stops being used for such mailings upon requesting to unsubscribe. Evidence of consent may be retained for the time necessary to demonstrate compliance and address potential liabilities. Unsubscribing from updates does not automatically delete messages needed for an independent inquiry or contract.

Technical logs are retained for the time necessary to maintain security and resolve incidents, and for the required legal periods if they relate to a legal obligation or claim. The deletion of messages is also subject to the recovery and deletion cycles of our email provider, as described in their data processing agreement.

Audience measurement data is retained by Google in accordance with our Google Analytics retention settings, Google's Data Processing Terms, and its Privacy Policy; Aranis Intelligence accesses statistical reports within the service dashboard. Your cookie preference is stored in your browser (via cookie or local storage) until you change it or clear your browser data.

5. Service Providers and International Transfers

• Hosting and Form Handling: Netlify, Inc. (United States) hosts the website, delivers it through a global content delivery network, and processes the contact form submissions.
• Email & Productivity: Google Workspace (Google Ireland Limited / Google LLC) provides the email service for Aranis Intelligence and stores contact messages. Netlify forwards the form data as an email notification to our contact inbox.
• Web Analytics: Google Ireland Limited (along with Google LLC, headquartered in the United States) provides the audience measurement service (Google Analytics), which is only activated if the visitor accepts analytics cookies.

You can consult Netlify's Data Processing Addendum, as well as Google Workspace's and Google Analytics' Data Processing Terms and Google's Privacy Policy.

Hosting and email processing may take place outside the EEA. Under Google's agreements, data may be processed in countries where Google and its subprocessors maintain facilities, subject to applicable location and transfer commitments. For transfers to the United States or other countries outside the European Economic Area (EEA) subject to the GDPR, international transfers are safeguarded by the EU-U.S. Data Privacy Framework (for certified US entities like Google LLC) and/or the Standard Contractual Clauses (SCCs) approved by the European Commission, as incorporated into the providers' Data Processing Terms. You may request further information regarding applicable safeguards by writing to maite.mugica [at] aranisintelligence.com.

6. Your Rights

Data subjects may exercise their rights of access, rectification, erasure, objection, restriction of processing, and data portability, where applicable, as well as withdraw their consent at any time where consent is the legal basis for processing. To do so, please write to maite.mugica [at] aranisintelligence.com.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos - AEPD) at www.aepd.es.

7. Security

Aranis Intelligence is committed to protecting personal data with technical and organizational measures appropriate to the risk, and to reviewing these measures whenever processing activities or security needs change. Please consult our Security Policy to learn more about Aranis Intelligence's public commitment to security.

8. Cookies and Similar Technologies

This website uses cookies and local storage technologies. Analytical measurement of visits via Google Analytics uses first-party cookies to distinguish users and analyze browsing behavior, and is therefore only activated if you explicitly accept it in our consent banner.

The preferences panel uses browser local storage or a strictly necessary technical cookie to remember your consent choice; it does not contain any data from the contact form. If you choose a language with the language selector, a functional cookie (nf_lang) stores that choice for 12 months. If other optional technologies are incorporated in the future, this policy will be updated and your permission will be requested before activating them. More information can be found in our Cookie Policy.

9. Changes to This Policy

This information will be updated whenever the website, its service providers, or its data processing activities change. The current version will always be published on this page along with its revision date.

Last updated: October 25, 2026.