Privacy Policy
How FRAI processes personal data through its website and project-enquiry channels.
Last updated: 26 July 2026 · Version 2026-07
1. Data Controller
The controller for personal data processed through this website is:
- Controller: Francesco Fuso, operating under the commercial name FRAI
- NIF/NIE: Y9701043W
- Address: Carrer d'Aarón Vidal López, 6, Quatre Carreres, 46026 València, Spain
- Privacy contact: privacy@frai.es
2. Data We Process
Project enquiries
When you submit the guided project brief, FRAI may process the project category, desired outcome, timeframe, whether you requested an NDA before sharing confidential details, preferred contact method, name, work email or telephone number, company name, language, referring page, submission source and timestamps.
The browser temporarily stores limited brief-progress information in session storage so that an unfinished flow can be restored in the same tab. Contact details and the free-text project outcome are not stored in that session entry.
Direct communications
If you contact FRAI by email, telephone or another agreed channel, FRAI processes the contact details, message content and information needed to respond and manage the relationship.
Website operation and security
The website and its infrastructure may generate technical records such as IP address, date and time, requested URL, browser information, response status and security events. These records are used to deliver, protect and troubleshoot the service.
Consent-based analytics
If you enable analytics cookies, FRAI uses Google Analytics 4 through Google Tag Manager and a self-hosted Umami installation to measure page use and website interactions. Analytics is disabled by default. FRAI does not use advertising or social-media tracking pixels on this website.
3. Purposes and Legal Bases
- Responding to enquiries and preparing a possible engagement: steps requested before entering a contract and, where appropriate, legitimate interests in managing business communications.
- Delivering contracted services: performance of a contract.
- Operating, securing and troubleshooting the website: legitimate interests in providing a reliable and secure service and compliance with legal obligations.
- Website analytics: consent. You may withdraw consent at any time through Cookie settings.
- Accounting, tax, dispute and regulatory records: compliance with legal obligations and the establishment, exercise or defence of legal claims.
4. Recipients and Service Providers
FRAI uses service providers needed to operate the website and respond to enquiries, including hosting and infrastructure providers, email services, security and operational tooling, FRAI-managed n8n automation infrastructure, Google Analytics and the self-hosted Umami service.
Providers receive only the information needed for their role and are subject to applicable contractual and data-protection obligations. Data may also be disclosed when required by law or necessary to protect legal rights. FRAI does not sell personal data.
5. International Transfers
Some technology providers, including Google, may process data outside the European Economic Area. Where applicable, FRAI relies on a valid adequacy decision, approved contractual safeguards or another lawful transfer mechanism. Analytics remains optional and is not loaded until consent is given.
6. Retention
- Unsuccessful or preliminary enquiries are normally retained for no longer than 24 months after the last meaningful contact.
- Client and transaction records are retained for the relationship and applicable statutory limitation, tax and accounting periods.
- Security and operational logs are retained only for the period reasonably needed to investigate incidents and maintain the service, subject to provider settings and legal requirements.
- Analytics data follows the configured retention periods of the relevant tool.
- Browser session storage ends when the tab or browser session ends; the consent cookie is renewed for up to six months.
Data may be retained longer where necessary for a legal obligation or legal claim.
7. Your Rights
Subject to applicable conditions, you may request access, rectification, erasure, restriction, portability or objection to processing. You may withdraw consent without affecting processing already carried out lawfully.
Send requests to privacy@frai.es. FRAI may request proportionate information to verify identity. You may also lodge a complaint with the Spanish Data Protection Agency.
8. Required Information
Fields marked as required in the project brief are necessary to route and respond to the enquiry. If they are not provided, FRAI may be unable to respond. Do not provide sensitive personal information unless it is strictly necessary and an appropriate channel has been agreed.
9. Automated Decisions
FRAI does not use website data to make decisions producing legal or similarly significant effects solely by automated means.
10. Updates
This Policy may be updated when processing activities, providers or legal requirements change. The current version and update date will remain available on this page.