1. Data controller
- Controller: [OWNER] (ROMBIA)
- Tax ID (NIF): [NIF]
- Registered address: [ADDRESS]
- Contact email for privacy matters: [EMAIL]
2. What data we process
- Data you provide in the assessment form: first and last name, business email, phone number, company name, size, how you heard about us and the information you share with us about your company.
- Data you send us by email, WhatsApp or other contact channels.
- If you are a client: contact and billing details necessary to provide the service.
- Browsing data, only if you accept the relevant cookies (see the Cookie Policy).
We do not ask for specially protected data. Please do not include sensitive information in forms unless it is necessary.
3. Rombi: enquiries, data and storage
Rombi handles enquiries and collects details you provide voluntarily so the ROMBIA team can contact you and handle your request. Each message is sent from your browser to n8n Cloud with a session identifier, the visited page, language and commercial consent status. n8n also receives technical connection information. When we detect an email in your message, we store the contact, the message containing it (up to 2,000 characters), page, language, session identifier and commercial choice in Lovable Cloud.
The tab temporarily stores the conversation, session identifier, chat open state and a private reference for managing your choice. This provides the chat you request, works even if optional cookies are rejected and disappears when the tab closes. Chat opening and usage metrics do not include message content and are sent only with Analytics accepted and Google Analytics configured. n8n history, retention and downstream providers depend on its workflow; ROMBIA must check its configuration and apply the enquiry retention period stated in this policy.
4. Optional commercial emails
You may authorise us, without any obligation to purchase, to email content, news and offers about consulting, artificial intelligence and automation. Declining does not prevent us handling your enquiry. The checkbox is unticked and Rombi requires “Yes, I want to receive them”. Providing an email, not responding, accepting privacy or cookies (including Marketing) does not grant this permission.
We record the contact’s granted, not granted or withdrawn status, whether an explicit answer was given, server date, source, language, notice version and text. Earlier evidence is retained when the choice changes. We do not attribute consent to existing contacts without valid evidence.
You can withdraw authorisation free of charge from the request confirmation or Rombi during the same session. Afterwards, you can use the unsubscribe link in each communication or write to the privacy contact shown on this page. This website does not run campaigns: before activating a sending platform, ROMBIA must connect permissions and withdrawals, include an unsubscribe link in every email and exclude contacts without current authorisation.
5. What we use your data for and on what legal basis
| Purpose | Legal basis |
|---|---|
| Handle your enquiry through Rombi or the forms and contact you about your request, whether or not you purchase | Pre-contractual steps requested by you (art. 6.1.b GDPR); necessary operation of the requested chat (art. 22.2 LSSI) |
| Send you a service proposal if you request it | Pre-contractual measures (art. 6.1.b GDPR) |
| Provide the contracted services and manage billing | Performance of the contract and legal obligations (art. 6.1.b and 6.1.c GDPR) |
| Analyse use of the website to improve it | Your consent via cookies (art. 6.1.a GDPR) |
| Email content, news and offers from ROMBIA about consulting, artificial intelligence and automation, even if you do not purchase | Specific, optional affirmative consent (art. 6.1.a GDPR and art. 21 LSSI), independent of the request, privacy and cookies |
We do not make automated decisions or build profiles that have legal effects on you.
6. How long we keep your data
- Assessment requests that do not result in a contract: a maximum of 12 months from the last contact.
- Clients: for the duration of the contractual relationship and, afterwards, for the legal limitation periods and tax obligations (generally, up to 6 years).
- Commercial communications: until you withdraw your consent.
- Cookie data: according to the periods indicated in the Cookie Policy.
7. Who we share your data with
We do not sell your data. To handle requests, we use Lovable Cloud hosting and storage and n8n Cloud automation for Rombi. These services receive the data needed for their function, as well as technical connection information such as your IP address and browser headers. Google Analytics, if configured, receives browsing data and events only after Analytics is accepted. AI, CRM and email providers used by the n8n workflow must be identified from its actual configuration before additional uses are enabled.
8. International transfers
Hosting, n8n Cloud and connected services may involve processing outside the European Economic Area. ROMBIA must check locations, processing agreements, subprocessors and applicable safeguards for each service. We do not claim to have verified a safeguard or certification for an unchecked provider.
9. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, as well as withdraw your consent, by writing to [EMAIL] with the subject "Data Protection" and indicating which right you wish to exercise. We will respond within a maximum period of one month.
If you believe we have not handled your data correctly, you can file a complaint with the Spanish Data Protection Agency, the Agencia Española de Protección de Datos (www.aepd.es).
10. Security
We apply appropriate technical and organisational measures to protect your data against loss, unauthorised access or alteration, taking into account the state of the art and the nature of the data.
11. Third-party data in our projects
When we implement systems for a client that involve personal data of their own customers or employees, we act as data processors, following their instructions and signing the corresponding data processing agreement.
12. Changes to this policy
We may update this policy to adapt it to legal changes or changes to our services. We will always publish the current version on this page, together with its update date.