01. Who is responsible
Workbetter is the trading name used to provide applied AI consultancy, web design, branding, agents, automation and training services.
- Data controller
- Victor Hermoso Colomina
- Address
- Diseminado Varis 206, Montuiri, 07230, Balearic Islands, Spain.
- Privacy contact
- vhermoso@icloud.com
- Scope of this policy
- The workbetter.tech website, its contact form and the Workbetter Assessment. A contracted project may require additional data processing terms.
02. What data we process
- Contact: name, email, service of interest and the description of your business or project that you send us.
- Assessment: company, website, sector, location, team size, goals, processes, tools, AI use, context of available information, priority, indicative investment and meeting preferences. Also your name, role, email, phone number if provided and consent choices.
- Enquiry source: contact or case identifiers and campaign parameters included in the link, where present. These help associate your response with the conversation and its source.
- Technical data: the infrastructure may process IP addresses, request information and security logs needed to serve the website and receive forms.
Data comes from what you provide, the link used and browsing. To prepare the context, we may also consult public professional information about your company, such as its website.
Do not include passwords, health data, banking information or unnecessary personal data about customers or employees. The assessment does not request files; if a confidential example is needed, we’ll first agree how to share it.
Required fields allow us to handle your request. Without them, we cannot process it. Optional fields and subscribing to updates are not necessary to contact us.
03. Purposes and legal bases
- Responding and assessing a proposal: handling your request and preparing a possible professional relationship, as pre-contractual steps requested by you (Art. 6(1)(b) GDPR). When you act as a company representative, maintaining that professional communication is based on legitimate interests (Art. 6(1)(f)).
- Preparing the assessment and analysis: understanding your situation and preparing an initial internal assessment, with the consent you give in the form (Art. 6(1)(a)). You may withdraw it without affecting prior processing.
- Sending ideas and updates: only if you tick the optional box, based on your consent (Art. 6(1)(a)). This is not a condition of your enquiry or proposal.
- Maintaining security and meeting obligations: preventing abuse and protecting the service based on legitimate interests (Art. 6(1)(f)), and meeting applicable legal obligations (Art. 6(1)(c)).
We do not sell your data. We do not treat the assessment consent box as permission to subscribe you to marketing communications.
04. How AI is involved
Workbetter may use Anthropic and OpenAI to summarise responses, identify needs and prepare meeting ideas. This may involve sharing the case information needed for analysis with those providers.
The purpose is to prepare your enquiry, not to train our own models with your data. Provider processing and retention conditions depend on the service and configuration used; you can request information about the processing of your specific case.
AI results may contain errors and must be reviewed before preparing the proposal. We do not make decisions with legal or similar effects on you based solely on automated processing. The dossier is for internal use and is not published as a client case study.
05. Who may access the data
In addition to the controller and people authorised to handle the enquiry, technology providers may be involved as needed to deliver the service:
- Netlify: website hosting and technical receipt of forms.
- n8n Cloud: receipt, workflow coordination and execution logging.
- Anthropic and OpenAI: AI-assisted analysis.
- Management, documentation and email tools: contact organisation, follow-up and dossier preparation. HubSpot and Notion may be involved when they are added to the workflow.
Data is not shared with other third parties for their own marketing campaigns. Disclosures to competent authorities or bodies may be required by law.
Some providers or their subprocessors may process data outside the European Economic Area, including in the United States. Such transfers must rely on an applicable adequacy decision or safeguards such as the European Commission’s standard contractual clauses, together with any required additional measures. You can request information about the recipients and safeguards applicable to your case by writing to the privacy contact.
06. How long we retain data
We retain the enquiry and assessment for as long as needed to handle the request, prepare and assess the proposal, and follow up. Once the enquiry is closed without a professional relationship or another ongoing purpose, data that is no longer needed will be deleted.
If a service is contracted, necessary information will be retained during the relationship and afterwards for the periods required by legal obligations or potential liabilities, with restricted access where appropriate.
Data for updates is retained while your consent remains active. If you withdraw it, we stop using it for that purpose and retain only what is necessary to document and honour the withdrawal. Technical and execution logs are retained according to operational and security needs, applicable obligations and each provider’s configuration.
07. What you can decide
You may request access to your data, rectification, erasure, restriction of processing and portability where applicable, and object to processing based on legitimate interests. You may also withdraw any consent without affecting the lawfulness of prior processing.
Write to us stating which right you wish to exercise and the information needed to locate your enquiry.
vhermoso@icloud.com ↗We generally respond within one month. In complex cases, the period may be extended under the GDPR and we will inform you. We will only request additional identity information when necessary.
If you believe we have not properly addressed your rights, you may lodge a complaint with the Spanish Data Protection Agency.
08. Browsing and updates
The current code does not include advertising cookies or advertising tracking tools. This website stores your language preference in the browser. Form drafts remain in memory while the page is open; they are not saved in the browser’s local storage. When submitted, they pass to the reception and management services described above.
The hosting infrastructure may log requests for technical and security reasons. The home and plans pages use a scrolling library from an external CDN; logos, images and fonts are embedded in the website itself.
We will update this policy when processing activities or services change. The date and version identify the current text. Any change of purpose requiring consent will be communicated and will not be deemed accepted merely by continued browsing.