Privacy policy

Queiku Digital, S.L., in accordance with current regulations on the protection of personal data, hereby informs you that the personal data collected through paper or electronic forms is included in the specific automated files for users of Queiku’s services.

The purpose of the collection and automated processing of personal data is to maintain the business relationship and to carry out tasks related to information, training, and consulting, as well as other activities typical of Queiku.

This data will be disclosed only to those entities that are necessary, for the sole purpose of fulfilling the objective stated above.

Queiku takes the necessary measures to ensure the security, integrity, and confidentiality of data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

Users may at any time exercise their rights of access, objection, rectification, and erasure as recognized in the aforementioned Regulation (EU). Users may exercise these rights themselves by sending an email to: queiku@queiku.es or by writing to the following address: C/ Embajadores 61 5B, 28012 – Madrid.

The user represents that all information provided by him or her is true and accurate, and agrees to keep it up to date by notifying Queiku of any changes.

Virtual Assistant with Artificial Intelligence

Queiku offers a virtual assistant to answer questions about its services, identify user needs, and—when requested—prepare an inquiry for our team or schedule an appointment.

Using this chatbot, we can process the messages entered by the user, the contact information they provide—name, email address, and phone number—a summary of their request, the language of the conversation, and appointment details. Please do not provide health information, banking information, or other particularly sensitive data.

The assistant uses Anthropic’s Claude API to generate responses. To do this, messages and the necessary conversation context—which may include contact information provided by the user—are sent to this provider.

When a user confirms the submission of an inquiry to our team, we save their contact information and the confirmed summary in our website’s management system. The chatbot plugin does not archive the entire conversation as an inquiry record. This does not preclude the processing and retention that providers may perform in accordance with the terms and conditions applicable to their services.

When a user selects a time slot to book an appointment, we send their contact information, a summary of the request, and the selected date and time to Google Calendar to create the event and manage the invitation.
Responses are generated automatically and may contain errors. The assistant does not make automated decisions that produce legal effects or significantly affect the user. Use of the assistant does not constitute a subscription to promotional communications.

You can contact our team directly and exercise your data protection rights by writing to queiku@queiku.es.

How long is the collected personal data retained?

The personal data provided will be retained for as long as the business relationship continues and you do not request its deletion. After the relationship ends, the data will be retained for the periods required by law (unless, in either case, the processing was based on the User’s consent and the User revoked it, in which case the data will be retained until such revocation is received).

Therefore, we can guarantee that your data will not be retained for longer than is necessary for the purposes described above, without prejudice to any retention that may be necessary for the establishment, exercise, or defense of potential claims and/or to the extent permitted by applicable law.

Purpose of the Processing of Personal Data

For what purpose will we process your personal data?

At Queiku, we will process the personal data we collect for the following purposes:

  1. In the event that the goods and services offered are purchased, for the purpose of maintaining the contractual relationship, as well as for the management, administration, information, provision, and improvement of the service.
  2. Sending of information requested via forms provided in digital or physical format.
  3. To send newsletters, as well as commercial communications regarding promotions and/or advertising from our organization and/or the industry.

We remind you that you may opt out of receiving marketing communications by any means and at any time by sending an email to the address listed above.

The fields in these records are required; it is impossible to fulfill the stated purposes without providing this information.

How long is the collected personal data retained?

The personal data provided will be retained for as long as the business relationship continues and you do not request its deletion. After the relationship ends, the data will be retained for the periods required by law (unless, in either case, the processing was based on the User’s consent and the User revoked it, in which case the data will be retained until such revocation is received).

Therefore, we can guarantee that your data will not be retained for longer than is necessary for the purposes described above, without prejudice to any retention that may be necessary for the establishment, exercise, or defense of potential claims and/or to the extent permitted by applicable law.

With regard to the virtual assistant, we will retain confirmed inquiries and appointment information for as long as necessary to address the request and follow up on it. Once the matter has been resolved, we will delete any data that is no longer necessary, without prejudice to any required retention for the purpose of addressing potential legal liabilities. If a contractual relationship is established, the retention periods applicable to that relationship will apply.

Legal Standing

The processing of your data is carried out on the following legal grounds, which provide the basis for such processing:

  1. Requests for information and/or the contracting of Queiku’s services, the terms and conditions of which will always be made available to you prior to any potential contract.
  2. Free, specific, informed, and unambiguous consent, in that we are informing you by making this privacy policy available to you; after reading it, if you agree, you may accept it by means of a statement or a clear affirmative action, such as checking a box provided for that purpose on our web form.
  3. In the case of the virtual assistant, the processing necessary to respond to requests for information regarding the potential use of our services and to schedule meetings requested by the data subject is based on the implementation of precontractual measures at the data subject’s request, in accordance with Article 6.1.b of the GDPR. This legal basis applies solely to the processing necessary to address such requests.

If you do not provide us with your information, or if the information you provide is incorrect or incomplete, we will not be able to process your request, making it completely impossible to provide you with the requested information or to proceed with the service contract.

Recipients

In order to provide our services, hosting providers, maintenance providers, and other technology service providers necessary for our operations may access personal data, in accordance with the applicable data protection terms and obligations.

Specifically, Anthropic is involved in the virtual assistant for processing messages using artificial intelligence, and Google is involved in managing appointments requested through Google Calendar. The scope of the data processed by each provider is described in the section titled “Virtual Assistant with Artificial Intelligence.”

In addition to any access that third-party providers may have to personal data—for which Queiku is responsible as a data processor, whether domestic or international—in connection with the provision of a service to the data controller, Queiku may transfer the User’s personal data to Queiku’s authorized distributors, provided that it has requested the User’s consent and the User has expressly granted it.

In addition to the foregoing, Queiku may transfer or disclose personal data to fulfill its obligations to public authorities in cases where such disclosure is required under the laws in effect at any given time and, where applicable, to other entities such as state law enforcement agencies and judicial bodies.

User Rights

Queiku informs Users of their right to access, correct, object to, delete, and transfer their personal data, as well as to restrict its processing, and to object to the automated processing of personal data collected by Queiku

These rights may be exercised free of charge by the User, or by the User’s representative where applicable, by submitting a written and signed request to the following address: C/ Embajadores 61 5B, 28012 Madrid. Such a request must include the following information: the User’s first and last names, address for notification purposes, a photocopy of the National Identity Card or passport, and a statement specifying the nature of the request. We also inform you that the User may exercise the aforementioned rights via email at: queiku@queiku.es

In addition to the above rights, the User has the right to withdraw the consent granted at any time by following the procedure described above, without such withdrawal affecting the lawfulness of the processing that took place prior to the withdrawal. Queiku may continue to process the User’s data to the extent permitted by applicable law.

Queiku reminds the User that he or she has the right to file a complaint with the relevant supervisory authority.

Safety measures implemented

Queiku is committed to fulfilling its obligation to keep personal data confidential and its duty to safeguard it, and will take the necessary measures to prevent its alteration, loss, unauthorized processing, or unauthorized access, in accordance with applicable regulations.

Queiku has implemented the necessary technical and organizational security measures to ensure the security of your personal data and to prevent its alteration, loss, and unauthorized processing and/or access, taking into account the state of technology, the nature of the stored data, and the risks to which it is exposed—whether arising from human action or from the physical or natural environment—in accordance with the provisions of applicable regulations.

Queiku, an organization committed to privacy, continuously monitors, controls, and evaluates its processes to strengthen the confidentiality and integrity of information within the organization and to ensure that privacy and information security are upheld in accordance with international standards.

Protection of hosted information

Queiku backs up the content hosted on its servers; however, it is not liable for the loss or accidental deletion of data by users. Similarly, it does not guarantee the full restoration of data deleted by users, as such data may have been deleted and/or modified during the time that has elapsed since the last backup.

The services offered, with the exception of those specifically related to backup, do not include the restoration of content stored in the backups created by Queiku when such loss is attributable to the user; in this case, a fee will be determined based on the complexity and volume of the recovery, subject to the user’s prior approval.

The recovery of deleted data is included in the service price only when the loss of content is due to causes attributable to Queiku.

Business communications

In accordance with the LSSI, Queiku will not send advertising or promotional communications via email or any other equivalent electronic means of communication unless such communications have been previously requested or expressly authorized by the recipients.

In the case of users with whom there is a prior contractual relationship, Queiku is authorized to send commercial communications regarding products or services that are similar to those initially covered by the contract with the customer.

In any case, after verifying their identity, users may request that no further marketing information be sent to them through the channels listed above.