Privacy policy
Last updated: 24/09/2026
This policy explains how personal data is processed on this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD).
1. Data controller
| Controller | Stepan Bobrovnikov (DataFlow AI) |
| Tax ID (NIE) | Z1582740T |
| Address | Barcelona, Spain |
| hello@dataflowai.work |
2. What data we process
- Emails you send us: your name, email address, the content of your message and any information you choose to include.
- Technical data: when you visit the website, our hosting provider processes your IP address, browser type and time of request, strictly to deliver the pages and protect the site against abuse.
This website has no contact forms, no user accounts, no analytics or advertising tracking, and no profiling.
3. Purposes and legal basis
| Purpose | Legal basis |
| Answering your enquiry and preparing a quote | Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and legitimate interest in answering messages (Art. 6(1)(f) GDPR) |
| Providing contracted services, invoicing and accounting | Performance of a contract (Art. 6(1)(b) GDPR) and legal obligations (Art. 6(1)(c) GDPR) |
| Website security and delivery | Legitimate interest (Art. 6(1)(f) GDPR) |
4. Retention
Enquiries are kept for as long as needed to handle them and deleted after 12 months if no business relationship follows. Client and invoicing data are kept for the periods required by Spanish tax and commercial law (generally 4 to 6 years). Technical logs are kept by the hosting provider for short periods for security purposes.
5. Recipients and international transfers
Personal data is not sold or shared for marketing. It may be processed by service providers acting on our behalf under data processing agreements: the hosting provider (Cloudflare, Inc.) and the email service provider. Some of these providers may process data outside the European Economic Area; such transfers are covered by the EU–U.S. Data Privacy Framework and/or the European Commission's Standard Contractual Clauses. Data may also be disclosed to public authorities where required by law (for example, the Spanish Tax Agency).
6. Your rights
You may request access to, rectification or erasure of your personal data, restriction of or objection to its processing, and data portability, by writing to hello@dataflowai.work. We may ask you to verify your identity. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
7. Minors
This website is intended for businesses and professionals and is not directed at persons under 14 years of age.
8. Changes
This policy may be updated to reflect legal or technical changes. The date of the latest version is shown at the top of this page.
This text is a translation. In case of discrepancy, the Spanish version prevails.