ArtificialSeed
Legal

Privacy Policy

Last updated: July 1, 2026

ARTIFICIAL SEED S.L. ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR) and applicable Spanish data protection law.

1. Data controller

The data controller responsible for your personal data is:

ARTIFICIAL SEED S.L. Parque Tecnológico de Bizkaia, Bilbao, Spain careers@artificialseed.ai

2. What data we collect

We only collect personal data that you voluntarily submit through one of our forms.

Contact form:

  • Name;
  • Company name;
  • Email address.

Job application form:

  • Name;
  • Email address;
  • Additional contact details (phone or other, as provided);
  • Position applied for;
  • Cover letter (optional, free text);
  • Resume / CV (file upload, max 8 MB).

We do not use cookies, tracking pixels, or analytics tools that collect personal data of site visitors. The only technical cookie used on this site is an internal session cookie required for our recruitment team to access the admin panel — it is never set for visitors browsing the public site.

3. How we use your data

Contact form submissions are used solely to respond to your inquiry. The legal basis for this processing is your freely given consent (GDPR Art. 6(1)(a)), which you provide by ticking the consent checkbox before submitting the form.

Job application submissions are processed for the purpose of evaluating your candidacy and conducting our hiring process. The legal basis is the steps taken prior to entering into a potential employment contract at your request (GDPR Art. 6(1)(b)).

4. How your data is processed and stored

When you submit a form, your data is transmitted by email through Resend (our transactional email provider) to our HR inbox at careers@artificialseed.ai. A confirmation email is also sent to the address you provide.

Submitted application data — including any resume file you attach — travels via Resend and arrives in our HR email inbox. We do not store applications in a separate database. Correspondence in the HR inbox is retained for as long as necessary for the purposes described above (see Section 6 for retention periods).

This site is hosted on Vercel. Standard server request logs (IP address, request path, timestamp) may be retained by Vercel for a limited period for operational and security purposes.

5. Data processors and third parties

We work with the following third-party service providers who process personal data on our behalf:

  • Resend (Resend Inc., United States) — transactional email delivery;
  • Vercel (Vercel Inc., United States) — website hosting and serverless infrastructure;
  • Neon (Neon Inc., United States) — database hosting for vacancy listing content (does not store applicant or contact-form personal data).

All three providers are US-based. Where personal data is transferred to the United States, such transfers are carried out on the basis of Standard Contractual Clauses adopted by the European Commission, or another valid transfer mechanism under GDPR Chapter V.

We do not sell your personal data to third parties and we do not share it for marketing or advertising purposes.

6. Retention

We retain your data for no longer than necessary for the purposes for which it was collected:

  • Contact form inquiries — up to 12 months from the date of submission, or until the inquiry is resolved, whichever comes first;
  • Unsuccessful job applications — up to 6 months from the date of submission. After this period, application data held in our HR inbox is permanently deleted;
  • Successful applications — retained as part of the employment record for the duration of employment and thereafter in accordance with applicable labour and tax law.

7. Your rights

Under GDPR, you have the following rights regarding your personal data:

  • Access — the right to obtain a copy of the personal data we hold about you;
  • Rectification — the right to have inaccurate data corrected;
  • Erasure — the right to request deletion of your personal data;
  • Restriction — the right to restrict processing in certain circumstances;
  • Portability — the right to receive your data in a structured, machine-readable format;
  • Objection — the right to object to processing based on legitimate interests;
  • Withdrawal of consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at careers@artificialseed.ai. We will respond within one month.

You also have the right to lodge a complaint with the Spanish data protection authority: Agencia Española de Protección de Datos (AEPD), www.aepd.es.

8. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page reflects the most recent revision. We encourage you to review this policy periodically.