Privacy policy.
Information about the processing of personal data through udae.ai.
Last updated: September 2026
Data controller
The controller for the personal data collected through this website is Álvaro Urra Gómez, with Spanish NIF 49466361P and registered address for legal purposes at Calle Pla de la Ramona 4, 46500 Sagunto, Valencia (Spain). Contact email:hola@udae.ai. You may write to that address for any matter regarding the processing of your data or the exercise of the rights recognized by applicable law.
Purposes of processing
udae processes the personal data provided by users for the following purposes: (i) responding to inquiries, requests for information and communications sent through the contact form or by email; (ii) managing the pre-contractual and contractual relationship with clients and partners; (iii) sending informational or commercial communications by electronic means, when there is prior consent or a prior contractual relationship that allows it; and (iv) analyzing site usage for statistical purposes and service improvement.
Legal basis
Processing is based on the following legal bases under Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD): the data subject's consent for commercial communications and for the use of non-essential cookies; the performance of a contract or the application of pre-contractual measures for the management of engagements and quotes; compliance with legal obligations applicable to the controller; and udae's legitimate interest in handling received communications, ensuring site security and keeping its services in adequate conditions.
Categories of data
As a rule, we process identifying and contact data (name, email, company, role), data related to the communication sent (message content, date) and navigation data derived from access to the site (technical identifiers, device information and site-usage information). No special categories of data or data from minors are requested.
Recipients and international transfers
Data is not shared with third parties except by legal obligation. To provide the service, udae relies on technology providers acting as data processors under article 28 of GDPR, with whom the corresponding data processing agreements have been signed. Where any of these providers involves international data transfers, appropriate safeguards are in place, such as European Commission adequacy decisions or standard contractual clauses, under the terms of chapter V of GDPR.
Retention periods
Data is kept for as long as necessary to fulfill the purpose for which it was collected. Inquiries received are kept while the communication is maintained and for a reasonable period afterwards for evidentiary purposes. Data linked to contractual relationships is kept during the term of the contract and, after termination, for the periods legally required by applicable law. Data processed on the basis of consent is kept until consent is withdrawn.
Data subject rights
Data subjects may exercise the rights of access, rectification, erasure, objection, restriction of processing and portability, and may withdraw consent at any time without affecting the lawfulness of prior processing. Requests may be sent tohola@udae.ai, providing proof of identity where appropriate. You are also informed of the right to file a claim with the Spanish Data Protection Agency (www.aepd.es) if you consider that processing does not comply with applicable law.
Security measures
udae applies appropriate technical and organizational measures to ensure a level of security suited to the risk of processing, in accordance with article 32 of GDPR, including access control, data minimization, encrypted connections and diligent supplier selection.
Policy updates
This policy may be updated to adapt to regulatory, case-law or service changes. Users are encouraged to review its content periodically. When changes are substantial, they will be communicated by appropriate means.