Legal register — Privacy Policy
Privacy Policy
These documents are published in Portuguese, English, Spanish and Norwegian. In the event of any discrepancy between language versions, the Spanish version shall prevail.
Controller and scope
The data controller is AD Caldas Innotec, S.A., a Spanish company with Tax ID A66316399, registered at the Commercial Registry of Cádiz, Sheet CA-56553, with registered office at Calle Blanco, 10, Torrecera, 11595 Jerez de la Frontera, Cádiz, Spain. Where the service used is LegalNeuron, the operating entity is NEX FAN ESPAÑA, S.L. (Tax ID B56715154, Commercial Registry of Cádiz), an investee company of AD Caldas Innotec, S.A.; both entities apply this same policy.
This single group policy applies to the properties listed in the Legal Center: cinteca.es, adrianocaldas.com, nordixbios.com (NordixBIOS / Agentic AI Factory), ncsengine.com (NCS Engine), nordixsystems.com (Nordix Systems), legalneuron.es (LegalNeuron), cinte.com.br (CINTE, Brazil) and the mobile and desktop applications and APIs associated with these products. Websites created in collaboration with third parties have their own policies and fall outside this document.
Data we process
We process only the data needed for each purpose. Depending on the service, this may include:
- Identification and contact data: name, email address, company and the content of messages sent through our forms.
- Account data: credentials, preferences and settings for products that require registration.
- Billing data: the tax and payment details needed to manage the contractual relationship with customers.
- Minimal technical data: access and security logs, IP addresses and the data generated by anti-abuse verification (Cloudflare Turnstile).
- Content submitted to the services: documents and information provided by the user for processing, including content handled by artificial-intelligence features.
Purposes and legal bases
Each processing activity relies on a legal basis under Article 6 of the GDPR:
| Purpose | Legal basis |
|---|---|
| Responding to enquiries and contact requests | Pre-contractual measures and the legitimate interest in handling professional communications |
| Providing the contracted services and products | Performance of a contract |
| Security, abuse prevention and service continuity | Legitimate interest in protecting the infrastructure and its users |
| Complying with tax, commercial and other legal obligations | Legal obligation |
| Commercial communications | Express consent; not practised on the group's corporate websites |
Cookies and tracking
The group's corporate websites use no advertising or audience-analytics cookies. Only strictly necessary technical elements are used, such as the Cloudflare Turnstile anti-abuse verification on contact forms.
Products that require signing in may use functional session cookies, which are essential to maintain authentication and user preferences. We do not sell personal data and we do not share it with advertising networks.
Artificial-intelligence features
The group's products — including NordixBIOS / Agentic AI Factory and LegalNeuron — process content through artificial-intelligence systems following the customer's instructions. AI-generated results are technological assistance and may require verification; human supervision is recommended and, for decisions with legal or otherwise significant effects, required.
Customer data and content are not used to train third-party foundation models without an express agreement with the customer.
Recipients and sub-processors
To provide the services we rely on infrastructure and delivery providers — for example Amazon Web Services, Cloudflare and email providers — acting as processors or sub-processors under contracts compliant with Article 28 of the GDPR. There are no commercial transfers of personal data. Data will be disclosed to authorities only where a legal obligation exists.
International transfers
Some providers may process data outside the European Economic Area. Where this happens, the transfer is covered by adequate safeguards: adequacy decisions of the European Commission or standard contractual clauses, supplemented with additional measures where necessary.
Retention
Data is kept for as long as necessary for the purpose for which it was collected and, afterwards, blocked for the periods required to comply with legal obligations or to address potential liabilities. Content processed by the services is retained according to the customer's settings and instructions.
Your rights under the GDPR
You may exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent given, through the single contact channel: the protected form available at cinteca.es/#contacto.
If you consider that the processing does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority of your place of residence.
Data subjects in Brazil (LGPD)
For data subjects located in Brazil, this policy is supplemented by the Brazilian General Data Protection Law (Law No. 13.709/2018 — LGPD). Those data subjects may exercise the rights of Article 18 of the LGPD — confirmation of processing, access, correction, anonymisation, portability, deletion and information about disclosures — through the same contact channel, and may also address the Brazilian National Data Protection Authority (ANPD).
Users in the United States
We do not sell personal data and we do not share it for behavioural advertising. Users residing in states with their own privacy laws — for example California — may exercise the rights those laws grant them (access, deletion, correction and non-discrimination for exercising them) through the same contact channel.
Minors, security and changes
Our websites and services are not directed at children under 14 — or under the higher age, up to 16, established by local law — and we do not knowingly collect data from minors.
We apply technical and organisational measures appropriate to the risk: encryption in transit, access control, data minimisation, security logging and internal incident-response procedures.
Changes to this policy will be published on this page with an indication of the version and date. Version 1.0 · August 2026.