Privacy Policy
Last reviewed: 19 August 2026 Effective date: 19 August 2026
Status of this notice. AI IBIZA is the trading name of AI IBIZA SOLUTIONS, S.L., a company registered in Spain.
> 1. Data controller
| Controller | AI IBIZA SOLUTIONS, S.L. |
| Trading as | AI IBIZA |
| NIF | B57970980 |
| Registered office | C/ Cayetano Soler, número 4, 07800 Ibiza, Illes Balears, Spain |
| Commercial registry | Registro Mercantil de Eivissa — hoja IB-00013990, tomo 306, libro 305, folio 073 |
| Contact | geevandonselaar@protonmail.com |
| Website | https://aiibiza.com |
> 2. Scope
This notice covers personal data processed through aiibiza.com — primarily contact form submissions, direct emails, technical logs, and any data placed in cookies described in our Cookie Policy.
It does not cover the AIIBIZA on-premise AI systems delivered to clients. Those systems are designed to run on hardware controlled by the client and are governed by separate contractual documentation when an engagement is signed.
> 3. What we process
We only process personal data you provide voluntarily, or that is technically generated by your browser when you visit the site.
| Category | Examples | Source |
|---|---|---|
| Identification and contact | Name, email, organisation, phone | You — through the contact form or by writing directly |
| Message content | Free-text content of your inquiry | You |
| Technical and security data | IP address, user agent, request timestamps | Your browser, server logs |
| Cookie data | Strictly necessary cookies only at the time of writing | Your browser — see Cookie Policy |
We do not use website visitor data to train AI models.
> 4. Purposes and legal bases
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Responding to your inquiry | Art. 6(1)(b) — pre-contractual measures at your request |
| Communication with prospective investors and partners | Art. 6(1)(b) — pre-contractual measures |
| Site security, fraud prevention, debugging | Art. 6(1)(f) — legitimate interest in operating the site safely |
| Compliance with legal obligations | Art. 6(1)(c) — where applicable |
> 5. Retention
| Data | Retention |
|---|---|
| Contact inquiries and correspondence | Up to 24 months from last contact, unless an ongoing relationship is established |
| Investor and partner communications | Active fundraising period + 5 years for accounting and corporate records |
| Server and security logs | Maximum 30 days |
| Cookie data | As specified in the Cookie Policy |
> 6. Recipients and processors
We rely on a small number of providers to operate the website. Each provider acts as a processor under Art. 28 GDPR. The list at the time of writing:
| Processor | Role | Location |
|---|---|---|
| SiteGround | Web hosting | EU (Madrid datacenter) |
| Formspree | Contact form processing | United States — transfer governed by the EU–US Data Privacy Framework where applicable, with Standard Contractual Clauses as fallback |
| Proton (Proton Mail) | Inbound email | Switzerland (adequacy decision in place) |
| Cloudflare | Reverse proxy / CDN for the AI chat backend (ai.aiibiza.com) | United States (global network) — transfer governed by Cloudflare's Data Processing Addendum incorporating Standard Contractual Clauses |
We do not transfer your data to any other third country in the operation of this website. If this changes, this notice will be updated and the appropriate safeguards under Chapter V GDPR will be put in place.
> 7. Your rights
You have the following rights under Articles 15 to 22 GDPR:
- Access your personal data.
- Rectify inaccurate data.
- Erase data when no longer necessary.
- Restrict processing.
- Object to processing.
- Data portability.
- Not be subject to automated decisions with legal effects.
To exercise any of these, email geevandonselaar@protonmail.com with a copy of your identity document. We will respond within one month, with one further month of extension where the request is complex.
You may also file a complaint with the Spanish Data Protection Agency (AEPD) — https://www.aepd.es — C/ Jorge Juan 6, 28001 Madrid, the lead supervisory authority for this controller.
> 8. Artificial intelligence
AIIBIZA designs AI systems for local, on-premise deployment. This section covers the AI feature live on this website today.
Chat widget. The website includes a chat feature (labelled "Talk to the AI"), clearly identified as an AI assistant from its first message. It is not a human operator.
- The assistant runs on a self-hosted language model on hardware in Ibiza, Spain, that we control directly — your conversation is not sent to a third-party AI provider for inference.
- Cloudflare acts as a reverse proxy in front of the AI backend and can see connection metadata (IP address, timestamps) in transit — see the processor table in Section 6.
- Chat messages are used only to generate a reply in real time and are not written to a database by this website. Standard request/security logs are retained under the same 30-day policy as Section 5.
- Chat content is not used to train AI models.
- The website does not subject you to automated decision-making with legal effects.
- Any additional AI feature added to the website will be disclosed here, with a renewed legal basis assessment.
> 9. Security
The website uses HTTPS by default. Access to inbox and form submissions is restricted to the controller. Security logs are kept on a short rotation. These measures are designed to reduce exposure to common web risks; no online service can be guaranteed to be free from risk.
> 10. Changes
This notice will be updated as the project evolves. The "Last reviewed" date at the top reflects the current version. Material changes will be highlighted in this section for at least 90 days after they take effect.
19 August 2026 — Updated the data controller identification (Section 1) and lead supervisory authority (Section 7) to reflect that AI IBIZA SOLUTIONS, S.L. is now registered in Spain, replacing the earlier natural-person-pending-Irish-registration status.
29 July 2026 — Updated Section 8 to disclose the live "Talk to the AI" chat widget (previously described only as a future feature) and added Cloudflare to the processor table in Section 6 as the reverse proxy for the AI chat backend.