Legal
Privacy policy
Last updated: August 21, 2026
This is an informative translation. In case of any discrepancy, the Spanish version of this document is the one that applies.
This explains what we do with your data, in compliance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR).
Who processes your data
- Controller: Zunox Ltd, a company incorporated in Bulgaria.
- Office: Madrid, Spain.
- Data protection contact: hola@zunox.es.
What we collect, what for, and on what legal basis
We only process what you give us yourself, through the demo request form or by writing to us by email.
| Data | What for | Legal basis (art. 6 GDPR) |
|---|---|---|
| Name and email | Replying to your request | Pre-contractual steps, art. 6(1)(b) |
| Box name, city, number of members | Preparing the demo with your context | Pre-contractual steps, art. 6(1)(b) |
| Phone, if you give it | Contacting you the way you prefer | Consent, art. 6(1)(a) |
| Your message | Understanding what you need | Pre-contractual steps, art. 6(1)(b) |
We do not profile you and we take no automated decisions with legal effects on you. We do not send you marketing you have not asked for. We do not share or sell your data to anyone.
How long we keep it
For as long as the commercial relationship lasts and, afterwards, for as long as needed to deal with any legal liabilities. If you ask us to delete it and no legal obligation prevents it, we delete it.
Where it is stored and who touches it
On servers inside the European Economic Area. The providers we use to host the website and the database act as processors and have signed the contract required by article 28 GDPR. Should a transfer outside the EEA ever be needed, it would rely on the standard contractual clauses approved by the European Commission.
Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw any consent you have given, by writing to hola@zunox.es. We will reply within one month.
If you believe we have not handled your request properly, you may complain to the supervisory authority in your country. In Spain that is the Agencia Española de Protección de Datos (aepd.es); in Bulgaria, the Commission for Personal Data Protection (cpdp.bg).
The data of our clients' members
When a box hires Zunox, the controller of its members' data is still the box; we act as a processor. We sign the article 28 GDPR contract with every client.
That data is used to serve their members and to fine-tune their own assistant. It does not feed general artificial intelligence models and is not shared with other clients.