1. Data Controller
Montevive Artificial Intelligence S.L. (trading as: Montevive AI) Tax ID (CIF): B25955527 Address: Calle Maria Zambrano 1, Esc 6 2A, 18620 Alhendín, Granada, Spain DPO contact email: rgpd@montevive.ai
Moviwa is a service of Montevive Artificial Intelligence S.L. (hereinafter, "the Company").
2. Data We Collect
We collect the following personal data:
- Contact data: name, surname, corporate email, company and number of employees provided through our forms.
- Browsing data: IP address, browser type, pages visited and time spent.
- Cookie data: we use technical cookies and, with your consent, first-party analytics cookies and Google Analytics 4 cookies (see section 10).
- Analytics data: with your consent, we collect anonymized usage data such as click heatmaps, scroll depth, session recordings (without text content), and web performance metrics, and we measure audience with Google Analytics 4.
3. Purpose of Processing
Your personal data will be processed for the following purposes:
- Managing your free diagnosis request.
- Sending you information about our enterprise AI protection services (only if you have given your express consent).
- Improving the user experience on our website.
- Complying with our legal obligations.
4. Legal Basis for Processing
- Consent: for sending commercial communications (Art. 6.1.a GDPR).
- Legitimate interest: for managing requests and improving the service (Art. 6.1.f GDPR).
- Legal obligation: for compliance with applicable regulations (Art. 6.1.c GDPR).
5. Data Recipients
Your data may be shared with:
- Cloudflare, Inc.: for spam protection through Turnstile (minimal processing, no user tracking).
- ip-api.com: for country-level geolocation based on your IP address (country only, no personal data stored).
- Google Ireland Ltd.: for audience measurement with Google Analytics 4, only if you accept analytics cookies. It acts as a data processor and may transfer data to Google LLC (United States).
- Hosting providers: for platform hosting.
We do not sell or share your data with third parties for commercial purposes. Our first-party analytics data is stored entirely on our own servers; Google Analytics 4 data is processed on Google's infrastructure.
6. International Transfers
Some of our providers may be located outside the European Economic Area. In such cases, we ensure that adequate safeguards exist in accordance with the GDPR, such as standard contractual clauses approved by the European Commission.
In particular, Google Analytics 4 is provided by Google Ireland Ltd. (Ireland), which may transfer data to Google LLC (United States) under those standard contractual clauses and the EU-US Data Privacy Framework, to which Google LLC is certified. More information at https://policies.google.com/privacy.
7. Data Retention Period
- Request data: will be kept for the time necessary to manage your request and, subsequently, for the applicable legal periods.
- Browsing data: will be kept for a maximum of 13 months.
- Google Analytics 4 cookies: the
_gaand_ga_<ID>cookies expire after 2 years; user and event data retention in the GA4 property is set to 14 months. - Commercial communications: until you revoke your consent.
8. Data Subject Rights
You have the right to:
- Access: know what personal data we process about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request the deletion of your data.
- Objection: object to the processing of your data.
- Restriction: request the restriction of processing.
- Portability: receive your data in a structured format.
To exercise these rights, you can contact us at rgpd@montevive.ai.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
9. Security Measures
We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure or destruction, including encryption in transit (TLS), role-based access control, and periodic audits.
10. Cookies and Tracking Technologies
We use cookies and similar technologies on our site. You can manage your preferences at any time by clicking "Cookies" in the footer.
Essential cookies (always active)
These cookies are necessary for the site to function and cannot be disabled:
| Cookie | Purpose | Duration |
|---|---|---|
NEXT_LOCALE | Save your language preference (es/en) | Session |
mw_cookie | Record your cookie consent choice | 1 year |
no_track | Respect your decision not to be tracked | 1 year |
Analytics cookies (require consent)
These cookies are only activated if you accept analytics cookies:
| Cookie | Purpose | Duration |
|---|---|---|
moviwa_vid | Anonymous visitor identifier (UUID) for our own analytics | 1 year |
_ga | Google Analytics 4: distinguishes visitors (first-party cookie set by Google) | 2 years |
_ga_<ID> | Google Analytics 4: keeps the measurement property's session state | 2 years |
Additionally, with your consent, we use sessionStorage to store a temporary session identifier (moviwa_sid) and UTM parameters from the URL.
Analytics data collected
When you accept analytics cookies, we collect:
- Pages visited: path, referrer, language, viewport dimensions.
- Click heatmaps: areas of the page where clicks occur (grid coordinates, not content).
- Scroll depth: how far you scroll in each section.
- Session recording: scroll positions and clicks (no text capture or form content).
- Performance metrics: LCP, INP, and CLS (Core Web Vitals).
- IP address: hashed with SHA-256 before storage. We do not store the plain-text IP.
- Device type and browser: detected from the User-Agent.
- Country: obtained via IP geolocation (country code only).
- Google Analytics 4: with your consent we load gtag.js from googletagmanager.com and send Google page views and a small set of interaction events (demo form opens and submissions, call-to-action clicks, anonymizer usage, shares and feedback ratings). We never send Google the contents of forms or of the documents processed in the anonymizer. Google also receives your IP address, which it uses to derive approximate location.
Our first-party analytics data is stored exclusively on our own servers. Google Analytics 4 data is processed on Google's infrastructure and is only collected if you accept analytics cookies. We do not use advertising cookies, remarketing or Google Signals, and we do not share this data with advertising platforms. You can withdraw your consent at any time from the “Cookies” link in the footer.
11. Spam Protection
We use Cloudflare Turnstile as a verification system in our forms. This service:
- Does not use tracking cookies.
- Does not collect personal data for advertising.
- Complies with the GDPR and the ePrivacy Directive.
- Operates invisibly to the user in most cases.
12. Modifications
We reserve the right to modify this privacy policy at any time. Modifications will be published on this page with the date of the last update.