Who we are. Durandir Technologies, Saragossa, Spain. Legal matters: [email protected]. General contact: [email protected].
This website
What we collect. Nothing about you as a visitor. The site has no analytics, newsletters or tracking.
Technical data. To deliver the site and protect it against attacks, our hosting provider Nominalia and our content delivery and security network, Cloudflare, briefly process technical data such as your IP address, browser type and the page requested. This happens under our legitimate interest in running a secure website (Art. 6(1)(f) GDPR). The data is kept only as long as these providers need for security and operations, and we do not use it to identify or profile you.
If you write to us. When you use the contact form or email us, we use your address and message only to reply, and delete them when they are no longer needed.
External links. Links to other websites are governed by those sites’ own policies.
Durandir Platform
What we collect. When you request access to Durandir Platform or hold an account on it, we process the data you give us and the data the service needs to work:
- Identity and contact details: name, username, work email, organisation, role, country and, where you give them, website and tax ID.
- Account and security data: your password, kept only as a hash by our sign-in service, your second-factor settings, and the time, IP address and device of each sign-in, which we use to protect the account and alert you to new sign-ins.
- Commercial and billing data: your plan, subscriptions, licences, invoices and payment status. Card details are entered on and processed by Stripe; we never see or store them.
- Requests and correspondence: access and support requests, contracts and signatures, and the messages we exchange with you.
What we do not collect. Durandir software runs on your own device. Your investigations, files, evidence and results stay there: we do not collect them, and they are not stored on Platform. See Local processing.
Requests to Durandir Agent. When you ask Durandir Agent for something, your instruction and the parts of your case it needs to answer are processed by AI providers in the European Union, and the answer comes back to your device. These requests do not leave the European Union, and they are not kept or used to train models. One of these providers is established in the United Kingdom, which the European Union recognises as providing an adequate level of data protection.
Why, and on what basis.
- To create and run your account, provide the services you subscribe to and answer your requests: performance of a contract or steps taken at your request before one (Art. 6(1)(b) GDPR).
- To issue invoices and keep the records the law requires: legal obligation (Art. 6(1)(c) GDPR).
- To secure accounts and infrastructure and to prevent fraud and abuse: legitimate interest (Art. 6(1)(f) GDPR).
- To answer your requests to Durandir Agent: performance of a contract (Art. 6(1)(b) GDPR).
- To send commercial communications, as described below: legitimate interest (Art. 6(1)(f) GDPR) and Article 21 of Spanish Law 34/2002 (LSSI-CE).
Commercial communications. We may contact account holders, and organisations that have requested access, about their account, their request and the commercial terms of our services. We may also send customers information about Durandir products and services similar to those they have contracted, as Article 21.2 of the LSSI-CE allows. You can object at any time by writing to [email protected], and every commercial message includes a simple way to opt out. Messages about security, billing or changes to the service are part of providing it and are sent regardless.
Who else processes it. Stripe processes payments under its own privacy policy. AI providers in the European Union process the requests you send to Durandir Agent. Email is sent from our own mail server. We do not sell personal data.
How long we keep it. Account data is kept while the account exists. When it is closed, we keep invoices and other records for the periods the law requires, and delete or anonymise the rest.
Your rights
Under the GDPR you may request access to, rectification or erasure of your personal data, ask for a copy of it, and object to or restrict its processing, by writing to [email protected]. You may also file a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es.
Changes. We will update this page if our practices change.