1. Data controller
Nomad Room Sociedad Limitada, Spanish tax number B90220823 (ESB90220823), is the controller of personal data processed through this website. Its registered address is Calle Fernando IV, 22, bajo, 41011 Sevilla, España.
For privacy matters or to exercise your rights, email legal@nomad.ooo with the subject «xpixel.io». You may also write to the address above.
2. Information we receive
We process form details: name, company, professional email, country, project profile or type, preferred format and message. We also record the language, enquiry date and consent to processing. We may process additional information you provide during subsequent discussions.
The service processes technical data needed to receive the request and protect the form against abuse. Depending on the hosting environment, this may include an IP address and access or incident logs. We do not use these details to create advertising profiles.
Share only what is needed to explain your project. Do not send passwords, health data, identity documents or unnecessary personal information about third parties that you are not authorised to disclose.
3. Purposes and legal bases
We use form details to answer your enquiry, understand the project and conduct the communications needed to assess it. The legal basis is the consent you give by ticking the checkbox and submitting the form, under Article 6(1)(a) GDPR.
Submission does not subscribe you to a newsletter or authorise unrelated advertising. If you later request a proposal or enter into a contract, pre-contractual steps or the contract may provide the relevant legal basis where applicable, and further required information will be provided.
Protecting the form against abusive submissions relies on our legitimate interest in service security and availability, with technical data limited to that purpose. We also comply with applicable legal obligations and lawful requests from authorities.
4. Required details and automated decisions
Required fields let us handle the enquiry and contact you. The form cannot be submitted without those details or the requested consent. Other fields are optional.
We do not make decisions with legal or similarly significant effects based solely on automated processing, or create automated commercial profiles from form submissions. Technical controls may reject or limit invalid or abusive requests.
5. Access and service providers
Enquiries are accessed by authorised staff who need to handle them. Providers of necessary hosting, storage, maintenance or communication services may also be involved under the controller’s instructions and applicable processing arrangements. Personal data is not sold.
The local evaluation version stores enquiries in local test infrastructure. Public activation of Vercel and Supabase is pending; naming them does not mean they already receive enquiries from this version. Processing arrangements will be settled before public activation and this information updated where necessary.
We may disclose information to authorities where legally required. Any business collaboration involving sharing your enquiry with another company will be explained in advance and require an appropriate legal basis.
6. International transfers
At this stage, a production provider configuration has not been finalised that would allow us to state a geographic data location. We therefore do not claim exclusively European storage or that an international transfer arrangement has already been validated.
Before activating processing involving transfers outside the European Economic Area, destinations and the applicable mechanism will be determined — for example, an adequacy decision or standard contractual clauses with necessary supplementary measures — and the relevant information provided. You can ask the privacy contact about recipients and safeguards applicable to your enquiry.
7. Retention
We retain details while needed to handle your enquiry and requested follow-up. Once that purpose ends or you withdraw consent, the data will be deleted, except where retention is needed for legal obligations or liabilities, with restricted access where applicable.
Technical anti-abuse data is retained for the period needed for that function, depending on record type and environment. It will not become a commercial contact database or be used to continue an enquiry you have asked us to close.
8. Your rights
You may request access, correction or erasure of your data and, where the relevant conditions apply, restriction, objection and portability. You can withdraw consent at any time without affecting the lawfulness of earlier processing.
Email legal@nomad.ooo with the subject «xpixel.io», explain your request and identify the email address used for your enquiry. We will request further identity information only where needed.
You can also complain to the Spanish Data Protection Agency at www.aepd.es or to the supervisory authority applicable to you.
9. Scope and updates
This policy covers the commercial website and its enquiries. It does not govern hosting a customer’s AI workloads or processing inside a future ComputeCell, which require their own contractual scope and appropriate data processing agreements.
The website is intended for professional contacts. If purposes, services or providers change materially, we will update this information and request fresh consent when required.