1. Data Controller
Hexagonal Guru S.L. is the controller of the personal data you provide to us. We process your data transparently, lawfully and in accordance with the General Data Protection Regulation (GDPR) and Organic Law 3/2018 of 5 December on Personal Data Protection and the guarantee of digital rights (LOPDGDD).
- Company name: Hexagonal Guru S.L.
- Tax ID: B33861329
- Address: Suárez de la Riva, 2 1º Izda. 33007 Oviedo
- Email: privacy@hexagonalguru.com
2. Information We Collect
We may process the following categories of personal data depending on the relationship you have with us:
- Identifying data: name, surname, ID number, postal and email address.
- Contact data: phone number, email address.
- Browsing data: IP address, browser type, operating system, pages visited and time spent on them.
- Commercial data: purchase history, product or service preferences.
- Financial data: payment and transaction information (handled exclusively by certified payment gateways).
3. Purpose and Legal Basis of Processing
| Purpose | Legal basis |
|---|---|
| Management of the contractual relationship and provision of requested services | Performance of a contract (art. 6.1.b GDPR) |
| Sending commercial communications and newsletters | Explicit consent of the data subject (art. 6.1.a GDPR) |
| Handling requests, enquiries or complaints | Consent of the data subject (art. 6.1.a GDPR) |
| Compliance with legal obligations (tax, accounting, etc.) | Legal obligation (art. 6.1.c GDPR) |
| Improvement of the user experience and statistical analysis | Legitimate interest (art. 6.1.f GDPR) |
4. Data Retention
Your personal data will be kept for as long as necessary to fulfil the purpose for which it was collected and to determine any liabilities that may arise from that purpose and from the processing of the data.
- Customer data: for the duration of the contractual relationship and, thereafter, the legally established period for compliance with tax and accounting obligations (usually 6 years).
- Candidate data (HR): for a maximum of 2 years from the last update, unless you tell us otherwise.
- Contact and enquiry data: for as long as necessary to respond and resolve the issue.
- Newsletter subscription data: until you request to unsubscribe or withdraw your consent.
5. Recipients and Disclosure of Data
Your data will not be disclosed to third parties, except where required by law or where necessary for the performance of the contractual relationship. In such cases, it may be disclosed to:
- Public administrations with competence in the matter.
- Financial entities for the management of payments.
- Technology service, hosting and IT maintenance providers (data processors under contract).
- Legal, tax and audit advisors.
All of our data processors comply with the GDPR and have signed the corresponding data processing agreements.
6. International Transfers
In principle, we do not carry out international transfers of data. However, if any of our technology service providers (for example, cloud storage services) has servers outside the European Economic Area (EEA), such transfer will only be made if the destination country has been deemed adequate by the European Commission, or if appropriate safeguards (standard contractual clauses) have been adopted in accordance with Article 46 of the GDPR.
7. Your Rights (GDPR)
As the data subject, you may exercise the following rights by contacting Hexagonal Guru S.L. at the address indicated in section 1 or by email at privacy@hexagonalguru.com, attaching a copy of your ID or equivalent identification document. We will respond to your request within one month, extendable by a further two months for complex or numerous requests, in accordance with Article 12.3 of the GDPR:
Right of Access
Find out what data of yours we are processing and obtain a copy of it.
Right of Rectification
Request the modification of inaccurate or incomplete data.
Right of Erasure
Request the deletion of your data when it is no longer necessary.
Right to Object
Object to the processing of your data for reasons related to your particular situation.
Right of Restriction
Request the restriction of processing in certain circumstances.
Right to Portability
Receive your data in a structured, commonly used format, or have it transmitted to another controller.
Right to withdraw consent: You may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Complaint to the AEPD: If you consider that the processing of your data infringes the regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).
8. Origin of the Data
The personal data we process comes directly from the data subject, through the forms available on the website, email, telephone or the contractual relationship. Under no circumstances do we process special categories of data (health, ethnic origin, political opinions, etc.) unless this is strictly necessary and with your explicit consent.
9. Automated Decisions and Profiling
Hexagonal Guru S.L. does not make decisions based solely on automated processing, including profiling, which produce legal effects on the data subject or significantly affect them in a similar way. Responses from the artificial intelligence virtual assistant are purely informative and indicative in nature, and under no circumstances replace the review and decision of a person.
10. Artificial Intelligence
Hexagonal Guru S.L. uses artificial intelligence technologies on the Website and in the provision of its services in accordance with Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (the European Artificial Intelligence Act or «AI Act»), which has been directly applicable in Spain since 1 August 2024 under a progressive implementation schedule.
- Virtual assistant (chatbot): the Website may include an AI-based support assistant. In accordance with Article 50 of Regulation (EU) 2024/1689, we inform you that you are interacting with an artificial intelligence system. Conversations may be recorded for the purpose of handling your request and improving the service, and any personal data you may provide will be processed in accordance with this policy (legal basis: consent and legitimate interest).
- AI in professional services: where an engagement includes artificial intelligence components, their treatment will be governed by the corresponding particular contract, defining the role of the parties in accordance with Regulation (EU) 2024/1689 (provider, deployer, importer or distributor), as well as the transparency, technical documentation, data quality and human oversight obligations that apply.
- Hexagonal Guru S.L. does not use artificial intelligence systems subject to the prohibited practices under Article 5 of Regulation (EU) 2024/1689, and AI-generated content is identified as such where required by applicable regulations.
- No decisions based solely on artificial intelligence that produce significant legal effects on individuals are adopted without prior human intervention and review, in accordance with Article 22 of the GDPR and Article 14 of Regulation (EU) 2024/1689.
In Spain, supervision of artificial intelligence corresponds to the Spanish Agency for the Supervision of Artificial Intelligence (AESIA, created by Royal Decree 729/2023), in coordination with the AEPD when the system processes personal data. The Organic Law Bill for the proper use and governance of artificial intelligence is currently going through the parliamentary process; until it is approved, the European Regulation is directly applicable.
11. Minors
The services on the Website are intended for persons over 14 years of age. In accordance with Article 7 of the LOPDGDD, we do not knowingly collect personal data from children under 14. If we become aware that we have collected data from a child under that age without the consent of the person holding parental responsibility or guardianship, we will delete it immediately.
12. Information Security
We have adopted the technical and organisational measures necessary to ensure the security of your personal data and to prevent its alteration, loss, processing or unauthorised access, taking into account the state of the art, the nature of the stored data and the risks to which it is exposed. These include:
- SSL/TLS encryption on all communications.
- Restricted access to personal data, granted only to authorised personnel.
- Data backup and recovery protocols.
- Periodic security audits.
13. Cookies and Similar Technologies
This website uses first-party and third-party cookies to improve the browsing experience, analyse traffic and personalise content. For more information, see our Cookie Policy.
14. Changes to the Privacy Policy
Hexagonal Guru S.L. reserves the right to modify this policy to adapt it to legislative or jurisprudential developments, as well as industry practices. We recommend that you visit this page periodically to stay informed of any changes.
15. Contact
If you have any questions about this Privacy Policy or about the processing of your personal data, you can contact us at:
- Hexagonal Guru S.L.
- Suárez de la Riva, 2 1º Izda. 33007 Oviedo
- privacy@hexagonalguru.com
- Tax ID: B33861329
Last updated: 07/10/2026