Privacy policy

1. Data controller

The controller of the personal data processed on this website (dodolab.es) is DodoLab.

For any question about privacy or your data, write to info@dodolab.es.

2. What data we collect

We only collect the data needed to respond to your enquiry:

• Contact form: name, email, phone (optional), company (optional), the service you are interested in and your message.
• AI assistant: the messages in the conversation, an automatically generated summary and, if you fill in the form inside the chat, the same contact details and your preferred time.
• Live chat: the messages you exchange with our team and, if you provide them, your name and email.
• Record data: the page you wrote from, the language and the date and time you gave your consent.
• Technical data: technical cookies and your IP address, used temporarily to protect the website against abuse.

We do not ask for or need special categories of data, such as data revealing racial or ethnic origin, political opinions, religious beliefs, trade union membership, health or sex life. Please do not send them through the form or the chat.

Providing your data is voluntary. Without a way to contact you, such as your email, we cannot reply.

3. Why we use your data and on what legal basis

We only process your data for these purposes:

• answering your enquiry, understanding your needs and, if you ask, preparing a proposal: based on your consent and to take pre-contractual steps at your request (Art. 6(1)(a) and 6(1)(b) GDPR);
• sending you confirmation that we received your message: on the same basis;
• protecting the website against spam, attacks and misuse: based on our legitimate interest in keeping the website secure (Art. 6(1)(f) GDPR);
• sending you news or content, only if you give specific consent for it. Every message includes a simple way to unsubscribe.

We do not sell your data, we do not pass it on to third parties for their own purposes and we do not use it for purposes other than those described here.

4. Artificial intelligence assistant

The website assistant answers automatically and can make mistakes. Its answers are for guidance only: prices, timelines and terms are only valid in a formal proposal from our team.

To generate answers, the conversation messages are processed by an artificial intelligence provider engaged as a processor. We work with providers that do not use the data sent to train their models.

The assistant does not make automated decisions that produce legal effects on you or similarly affect you: any proposal or business decision is reviewed by a person on our team.

The conversation is only linked to your enquiry if you leave your details through the form in the chat.

5. Who we share your data with

We only share data with providers that process it on our behalf, as processors, under a contract that requires them to follow our instructions, not to use it for other purposes and to keep it confidential:

• website and database hosting providers;
• an artificial intelligence provider, to run the assistant;
• an email delivery service, for confirmations and replies;
• a messaging service, which we use to alert our team when a new enquiry arrives and to answer live conversations on the website.

We may also disclose data when required by law or ordered by a competent authority.

If you want to know exactly which companies provide these services, ask us for the list at info@dodolab.es.

6. International transfers

Some of these providers process data on servers located outside the European Economic Area, for example in the United States.

These transfers are made with appropriate safeguards under the GDPR: to providers certified under the EU-U.S. Data Privacy Framework or through the standard contractual clauses approved by the European Commission. You can ask us for more information at info@dodolab.es.

7. How long we keep data

Enquiries that do not lead to a contract are kept for up to 24 months and then deleted or anonymised.

If you become a client, data is kept for as long as the relationship lasts and then blocked for the limitation periods of any applicable legal liabilities.

8. Your rights

As the data subject, you can at any time:

• access your data and find out how we process it;
• ask for it to be rectified if it is inaccurate or incomplete;
• ask for its erasure when it is no longer needed or you withdraw your consent;
• object to processing based on our legitimate interest;
• ask for processing to be restricted in the cases provided for in the GDPR;
• ask for the portability of the data you gave us;
• withdraw your consent at any time, without affecting processing carried out before.

To exercise them, write to info@dodolab.es stating your request and a way to verify your identity. It is free of charge and we reply within one month, extendable in the cases provided for in the GDPR.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

9. Security

We apply technical and organisational measures to protect the security and confidentiality of your data, such as an encrypted connection (HTTPS), encrypted passwords, restricted access to the internal panel and limits against unauthorised access attempts.

10. Cookies and browser storage

This website only uses technical cookies, needed for it to work, which do not require consent. We do not use advertising, tracking or audience analytics cookies. If that changes, we will ask for your consent first.

Name	Purpose	Duration
dodolab-session	Keeps your session on the website, for example to submit the form and continue the conversation with the assistant.	120 minutes
XSRF-TOKEN	Protects forms against forged submissions from other websites.	120 minutes
assistant-chat (tab storage)	Keeps the conversation with the assistant while you browse the website.	Until the tab is closed

You can delete or block cookies in your browser settings. If you block technical cookies, the form and the assistant may stop working.

11. Minors

This website is aimed at businesses and professionals. We do not knowingly collect data from children under 14, the minimum age set by the LOPDGDD to consent to the processing of their data.

12. Changes to this policy

We may update this policy to reflect changes to the website or the law. The date of the last update appears at the top of the page.

See also: Terms of use.