Legal information
Privacy Policy
At ITNOVE we take the protection of your personal data very seriously. This policy explains what data we collect, for what purpose, for how long we keep it, who we share it with, and how you can exercise your rights, in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and Spanish Organic Law 3/2018 (LOPDGDD, the Spanish Data Protection Act).
1. Data controller
2. Data we process and its purpose
We only collect the data necessary for the following processing activities:
| Processing activity | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form | Name, company, corporate email, message | Handle your request and send you a commercial reply. | Consent (art. 6.1.a GDPR). |
| Course enrollment | First name, last name, email, phone, billing details, tax ID, attendees | Process the enrollment, issue an invoice, grant access to course resources and invite you to the event. | Performance of a contract (art. 6.1.b GDPR) and legal obligation (art. 6.1.c) for invoicing. |
| Card payment | Processed by Stripe; ITNOVE does not store card data | Charge the course fee. | Performance of a contract (art. 6.1.b GDPR). |
| Training communications | Student's email | Send you reminders, materials and communications about the course you enrolled in. | Performance of a contract (art. 6.1.b GDPR). |
| Newsletter / marketing | Send you content, news and offers related to our services. | Consent (art. 6.1.a GDPR), revocable at any time. |
3. Retention periods
- Contact form: 1 year from the last contact, unless an earlier deletion request is made.
- Enrollments and invoicing: 6 years, in accordance with article 30 of the Spanish Commercial Code.
- Newsletter: until you unsubscribe.
- Technical server logs: 30 days.
- Conversations with AI assistants: for as long as necessary to handle your request and improve the service; you can request their deletion at any time (see section 6).
4. Data recipients
We do not disclose your data to third parties, except where required by law or strictly necessary to provide the service you have contracted. For this we rely on duly selected data processors, all of them bound by contracts that meet the requirements of article 28 of the GDPR and that offer adequate guarantees of security and confidentiality.
The categories of processors that may process data on ITNOVE's behalf are:
- Website hosting and technical infrastructure providers.
- Payment processing providers.
- Invoicing and accounting providers.
- Email communication providers.
- Training management and delivery platform providers.
- Security and anti-fraud / anti-bot protection providers.
- Artificial intelligence model providers, for the features described in section 6.
If you would like to know the up-to-date list of data processors, you can request it by writing to info@itnove.com.
5. International transfers
Some data processors may be located outside the European Economic Area. In all such cases, ITNOVE has put in place the appropriate safeguards provided for in Chapter V of the GDPR — mainly the Standard Contractual Clauses approved by the European Commission — to ensure a level of protection equivalent to that required by European regulations.
6. Use of artificial intelligence
Some features of this website and of our learning platform run on generative artificial intelligence models. The provider is Anthropic (Claude models), acting as a data processor. Data sent through their API is not used to train models.
These are the features involved and what is sent in each case:
| Feature | What is sent to the model | Legal basis |
|---|---|---|
| Blog assistant and certification advisor | The text of your messages and the topic of the article or page. Your email is not sent unless you type it into the conversation. | Legitimate interest (art. 6.1.f GDPR): visitor support. |
| Course activity grading (open answer, Excel exercise) | The text or template content you submit and the activity brief. | Performance of a contract (art. 6.1.b GDPR): delivery of the course you purchased. |
| Lesson questions (AI tutor) | Your question and the lesson content. | Performance of a contract (art. 6.1.b GDPR). |
| Sentence grading in the English app for children | Only the written sentence and the exercise brief. The student's name is not sent. | Performance of a contract (art. 6.1.b GDPR). |
| Lesson narration with a synthetic voice | The lesson text. No student data is sent. | Performance of a contract (art. 6.1.b GDPR). |
| Internal aggregated analysis (feedback, browsing behaviour) | Aggregated or pseudonymised data used to detect patterns and improve the service. | Legitimate interest (art. 6.1.f GDPR): service improvement. |
No automated decisions with legal effects. We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you (art. 22 GDPR). In particular, the scores AI assigns to course activities do not by themselves determine whether you obtain a certificate: they are indicative, allow retries, and you can always request human review through the lesson questions channel or by writing to info@itnove.com.
Whenever you interact with an AI feature we tell you so in the interface itself, in accordance with article 50 of Regulation (EU) 2024/1689 on Artificial Intelligence. You can find the details on our How we use artificial intelligence page.
Assistant conversations are kept for as long as necessary to handle your request and improve the service; you can request their deletion at any time by writing to info@itnove.com. Course submissions and grades are kept for as long as your access to the course lasts.
7. User rights
You can exercise your rights at any time to:
- Access — know what data we hold about you.
- Rectification — correct inaccurate data.
- Erasure ("right to be forgotten") — delete your data when it is no longer necessary.
- Restriction of processing.
- Objection to processing.
- Portability — receive your data in a structured format.
- Withdraw consent — at any time, without affecting the lawfulness of prior processing.
To exercise any of these rights, write to us at info@itnove.com indicating the right you wish to exercise and attaching a copy of your ID document or equivalent.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), especially if you consider that we have not properly handled your request (www.aepd.es).
8. Security
We apply appropriate technical and organizational measures to protect your data: encryption in transit (HTTPS), access control, backups, activity logging and confidentiality agreements with all data processors.
9. Minors
Our services are aimed at professionals and companies. We do not knowingly collect data from minors under 14 years of age. If you become aware that a minor has provided us with data without consent, please write to us so we can delete it.
10. Changes to this policy
We may update this policy to reflect legal changes or changes to our services. The date of the last update appears at the top of the document. We recommend you review it periodically.