This policy explains what personal data we process when you visit reonoa.com or write to us, and what our role is when a business uses Reonoa to answer its calls.
Data controller
| Item | Details |
|---|---|
| Company | BAUBER.XYZ SL |
| CIF (tax ID) | B93944700 |
| Registry data | Tomo / Sección 8, Hoja Registral B-662478, Inscripción 1 |
| Address | Rambla Poblenou 38, 08005 Barcelona, Spain |
| Privacy contact | victor@bauber.xyz |
Visiting the website
Cookies and local storage
This site only uses the cookies and local storage it strictly needs to work; it uses no analytics, advertising or social media cookies, and loads no third-party scripts or fonts.
The necessary cookies are first-party and technical, and are exempt from consent (art. 22.2 LSSI). That is why they cannot be switched off and always show as active in the cookie panel. Each one is only set when you do what it is for:
| Cookie | What it is for | How long it lasts |
|---|---|---|
__Host-sap13ns (session) |
Keeps the session of whoever runs the site open. Visitors do not get it. | Until the session ends, and 14 days at most. |
sap13ns_flash (notice) |
Carries a short message, such as "Saved", from one admin page to the next. | 2 minutes at most. |
sap_pform (form result) |
After you send a form, shows you the result and, if something went wrong, fills in what you wrote again. Its content is encrypted. | 5 minutes at most. |
sap13ns-lang (language) |
Remembers the language you choose in the language menu. Only set when you choose one. | 1 year. |
sap13ns-theme (light or dark mode) |
Remembers the mode you choose with the button. Only set when you press it. | 1 year. |
In your browser's local storage we keep the light or dark mode you choose (themeMode) and your cookie choice (sap13ns-consent, for 6 months). None of it reaches us. You can review your choice at any time from the "Cookies" link at the foot of every page.
Cookie-less analytics
We count visits in aggregate, by day (page views, unique visitors, referring site, browser, operating system, device type, language and country), without cookies and without building a profile of you. To count unique visitors, your IP address and browser are combined with a random value that only lives in memory and changes every day, so visits cannot be linked from one day to the next. IP addresses and visitor identifiers are never stored. The daily totals contain no personal data and are deleted after two years.
Server logs
Our server logs technical information about requests (IP address, date and time, page requested and browser) to keep the service secure and investigate abuse. These logs are kept for a short period and then deleted.
Writing to us
If you write to ask for a demo or with a question, we process your name, your e-mail address, the name of your business and what you tell us in your message, to reply and, if you are interested, to prepare the demo. We use this data for nothing else and do not send you advertising without your consent.
When a business uses Reonoa
When a business contracts Reonoa to answer its calls, that business is the controller of the data of the people who call, and BAUBER.XYZ SL acts as its processor: we process that data on its behalf, only to provide the service, under the data processing agreement we sign with each customer. If you called a business answered by Reonoa, contact that business to exercise your rights; if you write to us, we will pass your request on to it.
This is how Reonoa looks after that data:
- Call audio is not recorded. The transcript of the conversation is kept, encrypted, so the business can see what was said and what changed in its diary.
- Records are not copied. The person's record stays in the business's diary. Reonoa only keeps a reference; the ID number and name given by the caller are kept in an encrypted session that expires.
- What it keeps is encrypted. Conversations, settings and credentials are stored encrypted (AES-256-GCM).
- Each business sees only its own data. Every portal user can only reach the data of their own business.
- Outgoing calls with consent. Only people who have given the business their consent are called, between 09:00 and 20:00, and every opt-out is respected.
The terms of that processing, including the providers involved as sub-processors, are set out in the data processing agreement.
Legal bases
- Legitimate interest: to keep the website secure, prevent abuse and produce aggregate statistics without personal data.
- Steps taken at your request before a contract: to answer your demo request or question.
- Performance of a contract and legal obligation: to provide the service to our customers, invoice it and keep the records the law requires.
- Consent: when we ask for it. You can withdraw it at any time.
How long we keep data
- Messages and demo requests: as long as needed to deal with them and, if we do not go on to sign a contract, one year at most.
- Analytics: daily totals without personal data, for two years.
- Server logs: a short period, after which they are deleted.
- Data processed on behalf of a business customer: as set in the data processing agreement; when the service ends it is returned or deleted.
Who else receives data
We do not sell personal data or share it for advertising. We only share it with the providers that help us run the service, such as our hosting and e-mail providers, under the corresponding data processing agreements, and with the authorities when the law requires it.
Your rights
Under the General Data Protection Regulation (GDPR) you have the right to access your data, rectify it, erase it, restrict its processing, to data portability, to object to processing based on legitimate interest and to withdraw your consent at any time, without affecting earlier processing.
To exercise any of them, write to victor@bauber.xyz. We will reply within one month. If you think we have not handled your data properly, you can also complain to the Spanish Data Protection Agency (aepd.es).
Changes
If we change this policy, we will publish the new version on this page.
Last updated: 12 November 2026.