Privacy

Privacy policy

Data collected, legal basis, retention, recipients and your rights.

Last updated: 24 June 2026

Compliance — at a glance
GDPR · privacy by design
art. 25
0 tracking cookies
ePrivacy
Data hosted in the EU
no transfer outside the EU
Anonymous analytics
Plausible, no IP
In short: we only collect what is necessary (art. 5 GDPR), your data is hosted in the EU and is never sold. You keep access, rectification and erasure rights (art. 15–22).

Data controller

The personal data collected through this site is jointly processed by GETUL CONSULTING, S.L. (Spain) and GETUL CONSULTING, SAS (France), entities of the Getul group, acting as joint data controllers. Single point of contact: hello@getulconsulting.com.

Data collected

  • Contact-form data (name, email, company, message) when you write to us.
  • Messages you type into the AI assistant (chatbot).
  • Cal.eu booking metadata (name, email, time slot).
  • Anonymous traffic data via Plausible Analytics (no cookie, IP not stored).

Legal basis

Article 6.1.b GDPR (pre-contractual measures) for forms and bookings. Article 6.1.f GDPR (legitimate interest) for traffic analysis and the operation of the AI assistant.

Retention

Contact form: 3 years from the last interaction. Bookings: 5 years (tax obligation). Analytics: 12 months aggregated. AI assistant: conversations are not stored on our servers; only requests sent via the form are kept (3 years).

Recipients and processors

Your data is not sold. It is accessible to our technical processors, governed by contract:

  • Hostinger (hosting, EU region).
  • Cal.eu / Cal.com (appointment booking).
  • Plausible Analytics (audience measurement, EU).
  • Mistral AI (primary AI assistant engine, France — EU).
  • Scaleway (AI assistant fallback engine, France — EU).

Transfers outside the EU

The AI assistant processes the message you type through language-model providers established in the EU (Mistral AI and Scaleway, France); no visitor data is transferred outside the EU, and, under these providers’ API terms, your requests are not used to train their models. All other data (form, bookings, analytics) is likewise hosted and processed in the EU region. Only our internal back-office tools may rely on providers outside the EU (for example the Anthropic Claude API, United States), under Standard Contractual Clauses; this does not concern visitor data.

Automated decision-making

No fully automated decision-making or profiling producing legal effects is applied to visitors (Art. 22 GDPR).

Data protection officer

The appointment of a DPO is not mandatory within the meaning of Article 37 GDPR given the nature of our activity. For any question regarding your data: hello@getulconsulting.com.

AI Act, Article 50: transparency

The site provides a conversational assistant (chatbot) powered by a generative AI system. In accordance with Article 50 of Regulation (EU) 2024/1689 (AI Act), you are informed that you are interacting with an artificial intelligence: the notice is shown at all times in the assistant window. It provides information about our services and directs you to the right contact; it makes no decision producing legal effects concerning you. Our other AI tools (Claude API, n8n workflows) operate solely for our back-office.

Your rights

Access, rectification, erasure, portability, objection, restriction. Contact: hello@getulconsulting.com. You may also lodge a complaint with the AEPD (Spain) or the CNIL (France).

Legal notice · Terms · Privacy · Cookies · AI Act compliance