Privacy policy

Last updated: 28/09/2026

1. Data controller

• Controller: Elek Cunill Jaumà (DelegaloAI)
• Tax ID (NIF): 41677205D
• Address: Carrer d'Ermengarda, 12, 08014 Barcelona (Spain)
• Email: elek@delegaloai.com

This policy applies to personal data processed through delegaloai.com and the associated contact channels (booking form, course waiting list, email and WhatsApp), in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).

2. What data we collect and when

• Call booking form: name, email, company or website, phone number (WhatsApp) and, if you choose to provide them, your role, sector, company size and approximate turnover, the process you want to automate and how you found us.
• Course waiting list: name, email and, if you choose to provide it, phone number, plus how you found the page (for example, from an ad or a podcast).
• WhatsApp: your phone number and the content of the conversation you have with us.
• Email: your address and the content of the messages you send us.

By default we do not collect browsing data for tracking purposes. Only if you accept the marketing category in the cookie banner do Meta's advertising identifiers (the _fbp and _fbc cookies) get switched on and your completed booking recorded (see the Cookie policy).

3. What we use your data for, and on what legal basis

• Managing your call booking (scheduling it, sending you the calendar invitation and the video call link, confirmations and reminders): pre-contractual steps taken at your request (art. 6.1.b GDPR).
• Contacting you on WhatsApp about your booking: your express consent, which you give in the form itself and can withdraw at any time by replying STOP (art. 6.1.a GDPR).
• Notifying you about the course if you join the waiting list (opening, launch terms and course news), by email and, if you leave us your phone number, by WhatsApp: your consent, which you give by ticking the box on the form and can withdraw at any time (art. 6.1.a GDPR).
• Answering your enquiries by email or WhatsApp: legitimate interest in replying to whoever contacts us (art. 6.1.f GDPR).
• Commercial management of prospective clients (recording your request in our internal management system): legitimate interest in organising our commercial activity (art. 6.1.f GDPR).
• Measuring how well our ads work: your consent to the marketing category in the cookie banner (art. 6.1.a GDPR). When you confirm a booking, we tell Meta that it happened, together with your email and phone number turned into an irreversible cryptographic digest (SHA-256) that only lets Meta check whether the event belongs to someone who saw our ad. We do not send those details in the clear, and they cannot be recovered from the digest.
• Including you in Meta advertising audiences (to show you our ads or build lookalike audiences): only if you tick the optional checkbox that appears on the course waiting list form, separate from the rest (art. 6.1.a GDPR). It is voluntary, does not affect your registration and you can withdraw it whenever you like by writing to us. If you don't tick it, your data is not included in any advertising list.

We never sell your data. It is only passed to a third party for advertising in the two purposes above and always with your authorisation: if you do not accept the marketing category and do not tick the optional box, your data is not used for advertising.

4. Automated support with artificial intelligence

Our WhatsApp number may be answered initially by an assistant based on artificial intelligence, which identifies itself as such. You can ask at any time for the conversation to continue with a person. No automated decisions with legal effects on you are taken, and no profiling within the meaning of art. 22 GDPR is carried out.

5. Recipients and processors

To provide the service we use suppliers acting as data processors:

• Google Ireland Ltd. (Google Workspace: email, calendar and video calls).
• Our own infrastructure in the European Union (servers contracted with Hetzner Online GmbH, Germany) where our management system is hosted.
• Meta Platforms Ireland Ltd. (WhatsApp), if you choose to contact us through that channel. WhatsApp may involve international data transfers covered by the safeguards provided by the supplier (standard contractual clauses and the EU-US Data Privacy Framework).
• Google Ireland Ltd. (Google Analytics 4) and Meta Platforms Ireland Ltd. (advertising measurement through the browser pixel and the server-side Conversions API), only if you accept the analytics or marketing categories in the cookie banner. The details are in the Cookie policy.
• Meta Platforms Ireland Ltd. (advertising audiences), only for those who tick the optional box in the form. In creating and managing those audiences Meta acts as a data processor on our behalf, under its Custom Audiences Terms. Data is always handed over as an irreversible cryptographic digest (SHA-256), never in the clear.

Beyond these cases, data will only be disclosed to third parties where required by law.

6. Retention periods

We keep your data for as long as the relationship lasts (handling your request or the contracted service) and, afterwards, blocked for the applicable statutory limitation periods. If you only made an enquiry and we never worked together, we delete your data within a maximum of 2 years from the last contact. Course waiting list data is kept until you unsubscribe and, if you never enrol, for a maximum of 2 years from when you signed up.

If you authorised advertising use, you stay in the audience until you withdraw that consent; as soon as you withdraw it you drop out of the next update of the list and we remove your contact from the audience hosted at Meta.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw any consent given, by writing to elek@delegaloai.com stating which right you wish to exercise. We will reply within a maximum of one month.

If you believe the processing does not comply with the regulations, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Security

We apply appropriate technical and organisational measures to protect your data (encryption in transit, access control, infrastructure in the EU and minimisation of the data collected).

9. Changes to this policy

We will publish any change to this policy here, with its update date. If the change affects processing based on your consent, we will ask you for it again. This English text is a translation provided for convenience: in the event of any discrepancy, the Spanish version of this policy prevails.