Legal — Privacy

Privacy policy

How InterHuge processes the personal data you provide, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPD-GDD).

Last updated: 26 October 2026

Data controller

In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), we inform you that the controller of the personal data collected on https://interhuge.com is:

  • Owner: Joan Cama Ribot

  • Trade name: InterHuge

  • Tax ID (NIF): 41531670H

  • Address: Carrer de Sant Joan, 16, 17200 Palafrugell (Girona)

  • Email: hola@interhuge.com

  • Phone: +34 694 25 22 64

Data we process and purposes

We only process the data strictly necessary for the following purposes:

  • Handling the enquiries and requests you send us by phone, email or social media.

  • Managing the data submitted through the Site's forms, for the purpose indicated on each form.

  • Producing anonymous usage statistics for the Site (only if you accept analytics cookies).

  • Counting visits and page views in aggregate, using our own cookieless analytics (Rybbit).

  • Answering the questions you ask the Site's AI virtual assistant and, if you leave us your details, passing your enquiry on to the team so they can contact you.

AI virtual assistant

The Site offers a virtual assistant (chat) that automatically answers questions about our services using artificial intelligence, based on the information published on the website. Its answers are for guidance only and are generated automatically: they may contain errors and do not replace assistance from our team.

Data we process: the text of the messages you write, the page you write from and the language; to prevent abuse, your IP address and a random browser identifier, stored hashed; and, only if you choose to leave them in the chat's contact card or type them in the conversation, your name and phone number or email address, together with a summary of your enquiry and the conversation.

Purpose and legal basis: answering the enquiries you send to the assistant and protecting the service from abuse, on the basis of legitimate interest (Art. 6(1)(f) GDPR); and handling the contact request you send us from the chat, with your consent (Art. 6(1)(a) GDPR), given when you tick the box or confirm the submission. The assistant may classify how interested you are (for example, if you ask for a quote) so the team can prioritise the enquiry; this classification has no legal effect and we will not stop assisting you because of it.

Processors: to generate the answers, messages are sent to Google (Gemini API) and, if it does not respond, to Anthropic (Claude API), which act as processors (Art. 28 GDPR) and may retain them for a limited time to prevent abuse, under their own terms. Hosting and abuse logging are provided by Netlify.

International transfers: these providers may process data in the United States. Transfers rely on the EU-US Data Privacy Framework and the Standard Contractual Clauses approved by the European Commission.

Retention: the conversation is stored only in your browser for 7 days (you can delete it with “New conversation”) and we do not keep it on our servers, unless you send us your contact details: it then goes with your request and is kept like any other enquiry. Anti-abuse counters are used for 24 hours at most.

Do not enter sensitive data in the chat (health, bank details, beliefs, etc.) or data about other people: we do not need it to answer you. If you prefer, you can contact us directly by phone or email.

Legal basis

The legal basis for processing is the data subject's consent (Art. 6.1.a GDPR) when you contact us or accept non-essential cookies, and our legitimate interest (Art. 6.1.f GDPR) in responding to the communications you send us. We do not make automated decisions or build profiles.

Cookieless audience measurement is based on our legitimate interest (Art. 6.1.f GDPR) in knowing how the Site is used so that we can improve it. You may object to it at any time by writing to hola@interhuge.com.

Data retention

We keep data only for as long as necessary for the purpose for which it was collected and, afterwards, for the periods required to comply with legal obligations. Contact data is kept while the relationship lasts or until you request its deletion.

Recipients

We do not disclose personal data to third parties, except where legally required. The technical providers that serve us (web hosting and, where applicable, analytics) act as data processors with the guarantees of Art. 28 GDPR. If you accept analytics cookies, Google Ireland Ltd. processes usage data in aggregate form under its own privacy policy; international transfers may occur under the Standard Contractual Clauses and the EU-US Data Privacy Framework. Cookieless analytics (Rybbit) runs on the owner's own server: it infers your country and city from your IP address and, together with your browser, creates an encrypted identifier that does not identify you. It stores nothing on your device and does not share data with third parties.

Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to hola@interhuge.com, indicating the right you wish to exercise and attaching a copy of an identity document if identity verification is required.

If you consider that the processing does not comply with the regulations, you may lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan 6, 28001 Madrid) or the Catalan Data Protection Authority.

Security

We apply appropriate technical and organisational measures to guarantee the confidentiality, integrity and availability of the data, taking into account the state of the art and the nature of the data processed.

Updates to this policy

We may update this policy to adapt it to regulatory or Site changes. The current version will always be the one published on this page, with the revision date indicated in the heading.