Privacy, stated plainly.

The controller for personal data processed on this website (hbtrainers.ai) and in the demo access (app.hbtrainers.ai) is HBTRAINERS SLU (HBTRAINERS.AI). For any privacy question or request, write to the email address below.

Controller

HBTRAINERS SLU (HBTRAINERS.AI)

Registered office

C/ Vandelvira 8, 2.º A, 23001 Jaén, Spain

Tax ID (NIF)

B27523372

Email

[email protected]

Phone

+34 620 87 10 61

• Legal notice
• Contact page

We count visits in aggregate by page, language, and day, so we know which content is read. The measurement places no cookies, stores nothing on your device, and does not build a profile of you or follow you across sites.

It is carried out by a third-party provider of privacy-friendly website measurement, described here by category without naming the tool: your browser loads a small script from the provider and reports the page view to it. As with any web request, the provider receives your IP address in order to deliver that service; the measurement does not use it to identify you. Legal basis: our legitimate interest in knowing which content is useful (Art. 6(1)(f) GDPR).

This website and the demo sit behind a perimeter protection service. To route requests and protect both against attacks and abuse, it processes your IP address and the technical data of each request, and it may place strictly necessary security cookies, for example after a security check. These cookies are not used for advertising or visit measurement. Legal basis: our legitimate interest in keeping the website and the demo secure (Art. 6(1)(f) GDPR).

When you start to use the contact form, an automated anti-abuse check, which is part of this protection, confirms that the submission comes from a person and not from a program. For that check, the service processes your IP address and technical data from your browser; nothing is checked if you only read the page, and the form is not sent if the check cannot be completed. The legal basis is the same.

If you write to [email protected], we use your email address and whatever you choose to include to answer your enquiry and follow up on it, for example to prepare a proposal you have asked for. Legal basis: your request and the pre-contractual steps you ask us to take (Art. 6(1)(b) GDPR) or, if you write on behalf of a company, our legitimate interest in answering it (Art. 6(1)(f) GDPR). Please do not send personal or confidential information that is not needed.

The contact form on the Contact page asks for your name, your email address, your message, and, if you wish, your company. We use only those details to reply to your enquiry and follow up on it. The form delivers them to our mailbox, which is the only place they are kept; the website keeps no copy. The legal basis is the same as for email. Before each submission, an automated check confirms that it comes from a person, as described under perimeter security.

Everything this page says about the demo applies only if you have a demo account at app.hbtrainers.ai. We create accounts only on request, each for one person. An account holds an email address, a password stored only in irreversible form, its status, and an expiry date. While you are signed in, the demo uses one strictly necessary session cookie that expires after 8 hours at most.

Legal basis: our legitimate interest in providing and securing the access you or your company asked for (Art. 6(1)(f) GDPR). Inactive accounts, meaning those that have been expired or deactivated for 90 days without being reactivated, are automatically deleted with all their data.

Each sign-in, failed attempt, lockout, and sign-out is recorded with the date, time, result, the account concerned, and the source IP address, so we can protect the service, detect misuse, and investigate security incidents.

Each question you ask in the demo is recorded with the answer shown, the date, the time, and the interface language, linked to your account, so we can improve the demo and understand failures. Please do not include personal data or confidential information in your questions. Both kinds of record, including technical copies of questions and answers, are deleted after 90 days at most, and only HBTRAINERS.AI can consult them.

Before the demo records your questions and answers, it asks for your express acceptance through a checkbox that is not pre-ticked. The acceptance record contains the notice version, the language, the date, and the time; it is kept for as long as the account exists and is deleted with it. You can withdraw your consent at any time by writing to [email protected]; this does not affect the lawfulness of earlier records, which you can also ask us to erase. Without that acceptance, the demo does not let you ask questions.

In summary, we rely on consent for conversation records, and on legitimate interest for security and access records, demo accounts, visit measurement, and the anti-abuse check of the contact form. Email and form enquiries rely on your request or on our legitimate interest, as explained above.

We keep each category of data for these periods:

• Access records: 90 days.
• Demo questions and answers, including technical copies: 90 days at most.
• Acceptance record: as long as the account exists.
• Demo accounts: until they are deleted at your request or automatically, 90 days after expiry or deactivation.
• Email correspondence, including contact form messages: as long as needed to handle the enquiry and any resulting business relationship or legal obligation.
• Security data from perimeter protection: only as long as that protection requires.
• Visit measurement: only aggregate figures are kept, with no personal data.
• Backups: data erased at your request also disappears from backups when they expire, within 35 days at most.

We use processors, bound by contract to act only on our instructions, in these categories: hosting of the website and the demo, perimeter protection, website measurement, email (which also receives the messages sent through the contact form), and the language model provider that powers the demo. We describe them by category rather than naming them. We do not disclose your data to any other recipient unless the law requires it.

Some of these processors handle data outside the European Economic Area, in particular in the United States, which means international transfers. These transfers rely on an adequacy decision of the European Commission or on the Commission’s standard contractual clauses. You can ask us for information about these safeguards at [email protected].

You can request access to your data, rectification, erasure, restriction of processing, and data portability, and you can raise an objection to processing based on our legitimate interest. To exercise these rights, write to [email protected] describing your request. If it concerns a demo account and does not come from that account’s email address, we will ask for confirmation from that address first. We reply within one month.

Erasure covers your account, your acceptance record, and your access and conversation records. We do not take decisions based solely on automated processing that have legal or similarly significant effects on you. You can also lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) or with the data protection authority where you live or work.

If we change how we handle personal data, we will update this page and its date. If the change affects demo conversation records, the demo will ask for your acceptance again before your next question.