1. Data controller
- <strong>Controller:</strong> Black Mamba System S.L.
- <strong>Service brand:</strong> AITarea (Black Mamba System)
- <strong>Registered address:</strong> España
- Contact email / DPO (if applicable): info@blackmambasystem.com
- Website: aitarea.com
2. Data we process
Depending on use of the site and the purchase process, we may process:
- Identification and contact: contact person name, email and phone.
- Company billing data: legal name, tax ID (NIF/CIF), billing address, postal code, city, province and country.
- Purchase: acceptance of legal terms, email verification, amount, VAT, order identifiers and payment status.
- Payments: transaction data handled by Mollie (Black Mamba System S.L. does not store full card numbers).
- Communications: messages sent through the contact form.
- Technical: IP address, access logs, cookies or session storage required for security (captcha) and site operation.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Handle contact requests and pre-sales information | Legitimate interest and/or pre-contractual measures (Art. 6.1.f / 6.1.b GDPR) |
| Verify email and manage license purchase | Performance of pre-contractual measures and the contract (Art. 6.1.b) |
| Issue invoice, collect payment and meet accounting/tax obligations | Performance of the contract and legal obligation (Art. 6.1.b and 6.1.c) |
| Deliver access, instructions and support associated with the license | Performance of the contract (Art. 6.1.b) |
| Abuse prevention and form security (captcha) | Legitimate interest (Art. 6.1.f GDPR) |
4. Recipients
We do not sell personal data. The following may access it only when necessary:
- Mollie B.V., as the payment gateway provider.
- Web hosting, email and technical maintenance providers acting as processors.
- Competent public authorities when there is a legal obligation.
5. International transfers
If any provider processes data outside the European Economic Area, appropriate safeguards under the GDPR will apply (e.g. standard contractual clauses or equivalent measures).
6. Retention periods
- Contact: as long as needed to handle the inquiry and, where applicable, up to 12 months.
- Email verification codes: expire in 30 minutes.
- Purchase and billing data: for the duration of the contractual relationship and legal commercial and tax retention periods (generally up to 6 years).
- Security technical logs: the minimum time needed to prevent abuse.
7. Rights of data subjects
You may exercise rights of access, rectification, erasure, objection, restriction of processing and portability by writing to info@blackmambasystem.com, providing a copy of an ID document when necessary to verify your identity.
You may also file a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security
We apply technical and organizational measures appropriate to the risk, including encrypted transmission (HTTPS), access control, email verification before payment and antispam measures (captcha) on forms.
9. Minors
The site and license purchase are not directed at anyone under 18. If we detect a minor's data processed improperly, we will delete it.
10. Updates
We may update this policy to reflect legal or service changes. The current version will be the one published on this page, with the last updated date.