1. Data controller
Nomad Room Sociedad Limitada, Spanish tax number B90220823 (ESB90220823), is the controller of personal data processed through this website. Its registered address is Calle Fernando IV, 22, bajo, 41011 Sevilla, España.
For privacy matters or to exercise your rights, email legal@nomad.ooo with the subject «xpixel.io». You may also write to the address above.
2. Information we receive
If you email us, we receive your address, sender name, message and any files you choose to include. Opening the email link does not itself send an enquiry.
If a form is enabled, we will process the details specified in it: name, company, professional email, country, project profile or type, preferred format and message. We also record the language, enquiry date and consent to processing. We may process additional information you provide during subsequent discussions.
The service processes technical data needed to receive the request and protect the form against abuse. Depending on the hosting environment, this may include an IP address and access or incident logs. We do not use these details to create advertising profiles.
Share only what is needed to explain your project. Do not send passwords, health data, identity documents or unnecessary personal information about third parties that you are not authorised to disclose.
3. Purposes and legal bases
If you use an enabled form, we will use its details to answer your enquiry, understand the project and conduct the communications needed to assess it. The legal basis is the consent you give by ticking the checkbox and submitting the form, under Article 6(1)(a) GDPR.
If you email us directly to request a proposal, we process the necessary details to take the pre-contractual steps you request (Article 6(1)(b) GDPR). If you act as a company contact, managing that professional relationship relies on our legitimate interest (Article 6(1)(f) GDPR). These contacts are not added to unsolicited advertising.
Visit and enquiry analytics and advertising measurement rely on optional consent (Article 6(1)(a) GDPR). The panel offers separate Analytics and Advertising choices. Advertising enables campaign measurement and visitor audiences for xPixel ads on Google, Meta and LinkedIn. Withdraw either permission in Cookie preferences. Rejecting them does not prevent browsing or submitting an enquiry.
Submission does not subscribe you to a newsletter or authorise unrelated advertising. If you later request a proposal or enter into a contract, pre-contractual steps or the contract may provide the relevant legal basis where applicable, and further required information will be provided.
Protecting the form against abusive submissions relies on our legitimate interest in service security and availability, with technical data limited to that purpose. We also comply with applicable legal obligations and lawful requests from authorities.
4. Required details and automated decisions
If a form is enabled, required fields let us handle the enquiry and contact you. The form cannot be submitted without those details or the requested consent. Other fields are optional.
We do not make decisions with legal or similarly significant effects based solely on automated processing, or create automated commercial profiles from form submissions. Technical controls may reject or limit invalid or abusive requests.
5. Access and service providers
Enquiries are accessed by authorised staff who need to handle them. Providers of necessary hosting, storage, maintenance or communication services may also be involved under the controller’s instructions and applicable processing arrangements. Personal data is not sold.
Vercel hosts this website and processes technical data needed to serve it. The form only confirms an enquiry after storage succeeds; if unavailable, it shows an error and an alternative contact. With Analytics consent, Google Analytics (Google Ireland Limited) measures visits and submitted enquiries. With Advertising consent, configured tags from Google Ads, Meta Platforms Ireland Limited and LinkedIn Ireland Unlimited Company may receive browsing and confirmed-enquiry events, browser identifiers and technical connection data. Platforms may associate that activity with their users for ad attribution and audiences. We do not send form fields or contact lists, or enable advanced matching. Both permissions are independent of consent to the enquiry form.
We may disclose information to authorities where legally required. Any business collaboration involving sharing your enquiry with another company will be explained in advance and require an appropriate legal basis.
6. International transfers
Vercel, Google, Meta and LinkedIn services may involve processing or access outside the European Economic Area, including the United States. We do not claim that all data remains exclusively in Europe.
Providers offer contractual transfer safeguards, including standard contractual clauses, and adequacy decisions where applicable. Their processing terms are available at vercel.com/legal/dpa and business.safety.google/adsprocessorterms/. See also facebook.com/legal/terms/businesstools and linkedin.com/legal/l/dpa. You can ask our privacy contact about the applicable safeguards.
7. Retention
We retain details while needed to handle your enquiry and requested follow-up. Once that purpose ends or you withdraw consent, the data will be deleted, except where retention is needed for legal obligations or liabilities, with restricted access where applicable.
In Google Analytics, event and user data is retained for 2 months, without resetting retention on new activity. This setting does not apply in the same way to Google’s standard aggregated reports. Cookie preferences and analytics cookies have a separate 180-day duration, described in the cookie policy.
Technical anti-abuse data is retained for the period needed for that function, depending on record type and environment. It will not become a commercial contact database or be used to continue an enquiry you have asked us to close.
8. Your rights
You may request access, correction or erasure of your data and, where the relevant conditions apply, restriction, objection and portability. You can withdraw consent at any time without affecting the lawfulness of earlier processing.
Email legal@nomad.ooo with the subject «xpixel.io», explain your request and identify the email address used for your enquiry. We will request further identity information only where needed.
You can also complain to the Spanish Data Protection Agency at www.aepd.es or to the supervisory authority applicable to you.
9. Scope and updates
This policy covers the commercial website and its enquiries. It does not govern hosting a customer’s AI workloads or processing inside a future xPixel module, which require their own contractual scope and appropriate data processing agreements.
The website is intended for professional contacts. If purposes, services or providers change materially, we will update this information and request fresh consent when required.