Privacy policy

Last updated 9 October 2026

This policy explains what personal data we process when you visit theoven.ai or write to us, why, for how long, and what rights you have under the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

Who is responsible for your data

Controller

THE OVEN AI SL

Tax ID (NIF)

B93842847

Address

Calle Miguel Delibes 7, 2º B, 28806 Alcalá de Henares (Madrid), Spain

Email

silviu@theoven.ai, chris@theoven.ai

What we process and why

• Emails you send us. Your name, email address and whatever you choose to tell us, so we can reply and, if you ask, prepare a proposal. Legal basis: taking steps at your request before a contract, and our legitimate interest in answering messages. We keep them while we handle your request and, if we end up working together, for as long as the relationship lasts and the law requires afterwards.
• Technical logs. When you load a page, our hosting provider records your IP address, browser, the page requested and the time. Legal basis: our legitimate interest in delivering the site and keeping it secure. Kept for 30 days.
• Analytics and advertising, only if you accept cookies. Google Analytics and Google Ads record how the site is used and which visits come from our ads. Legal basis: your consent, which you can withdraw at any time. Analytics data is kept for up to 14 months. Details are in the cookie policy.

The site has no forms or accounts, we don't sell personal data and we don't make automated decisions about you.

Who receives your data

We use Google as our provider for hosting (Google Cloud, in Belgium), email (Google Workspace) and, with your consent, analytics and advertising. Google processes the data on our behalf, except for the advertising cookies it sets on its own domains, which it controls. We don't share your data with anyone else unless the law requires it.

Transfers outside the EU

Google may process data in the United States. Those transfers are covered by the EU-US Data Privacy Framework, under which Google is certified, and by the European Commission's standard contractual clauses.

Your rights

You can ask us to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time without affecting what was done before. Write to any of the addresses above; we reply within one month.

If you think we haven't handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es).