Privacy policy

I.- WHO WE ARE?

DEZZAI was born within MMG,

a factory of ideas that improve access, creation and exchange of knowledge through artificial intelligence (AI) solutions. DEZZAI’s services include QUERIX, a platform for the creation of business virtual assistants with various functionalities and powered by AI. 

It operates reactively to respond to queries about products, services, and information, as well as proactively to send relevant recommendations and updates.

It integrates with different systems, offering an easy-to-use interface and a dynamic chat widget. It supports multiple data sources, including records and knowledge bases, and integrates with CRM and CMS platforms to personalize interactions based on user history and preferences. 

II.- WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?

The personal data provided by you will be processed by DEZZAI S.L, with B19425446, registered office located at Calle Chile 10, office 123, 28290 Las Rozas (Madrid) and email info@querix.chat, through the services provided through QUERIX. 

You can contact our Data Protection Officer (PROFESSIONAL GROUP CONVERSIA, S.L.U), by email: dpd.cliente@conversia.es.

III.- SCOPE OF APPLICATION.

The purpose of this Privacy Policy is to regulate the data processing carried out on the data of Users of the QUERIX platform. Therefore, it will apply to any User who browses and uses the website and the services offered by QUERIX, requests information through any channel enabled for this purpose (email, form, telephone….), registers and subscribes to the newsletter and/or interacts with us.

It is also applicable to customers, suppliers and other related figures in their relations with the services offered by QUERIX.

The Data Subject declares to have previously read and understood this Privacy Policy, and voluntarily accepts them, without any reservation whatsoever, and exempts DEZZAI from the misuse that may be made of the information sent through it.

IV.- WHERE DO WE GET YOUR PERSONAL DATA?

We collect your data through different channels:

1. 1. Information Provided by You
      

      We process personal information provided by you through the channels created for this purpose, such as the contact form provided on the website, email, telephone, WhatsApp, or interact with us through social networks or share our content. We also collect information when you participate in marketing campaigns, newsletter subscriptions, QUERIX demo requests or satisfaction surveys.
      We also process your data for when you want to be part of our DEZZAI team by sending us your application through the channel provided for this purpose.

   2. Information collected by QUERIX
      

      We and our third-party service providers, such as analytics, social media and advertising partners, may use technologies that automatically (or passively) collect certain information when a User interacts online on the QUERIX platform. We also use cookies, but to do so, please review our “Cookie Policy”.

V.- ¿ WHAT KIND OF INFORMATION DO WE PROCESS?

We process the following information from you:

• Identification and contact information such as name, username, email address, address and zip code, telephone number, and other data voluntarily provided through interactions with the virtual assistant or, necessary for the user profile.
• User management to provide services in QUERIX.
• Any content produced and shared by the user on our websites, apps, or social media pages. 
• Information about your use and browsing in QUERIX. We automatically record data about the user’s interaction with our virtual agent, such as talk times, queries, and IP address.
• Contact details and personal and professional information for when you submit your application for a vacant position.
• Chatbox. Conversations with the virtual assistant can be stored to improve the quality of service and adjust responses to the user’s needs. This information will be pseudonymised prior to its processing.
• Datasets Content. When you use the QUERIX services, we collect Information that you have included in the Datasets, as well as the input you input.  You are required to anonymize all information you share through QUERIX. However, we may use this anonymized data to improve the performance and functionality of AI performance.

VI.- FOR WHAT PURPOSE AND LEGAL BASIS DO WE PROCESS YOUR PERSONAL DATA?

At DEZZAI, we are committed to processing your personal data in accordance with the provisions of applicable regulations and, in particular, for the following purposes:

• Manage queries, complaints, incidents and/or suggestions. We will process your data for the purpose of administratively managing queries, complaints, incidents and/or suggestions sent through the corresponding channel (email, telephone, chat, WhatsApp, etc.). 
• Request a QUERIX demo. Capture and registration of the User’s request in QUERIX in order to give them access to the requested demo.
• Newsletter. Your personal data will be processed for the purpose of providing you with information of interest about QUERIX’s services. 
• Commercial communications. Your personal data will be processed for the purpose of sending you, both through print, electronic and telephone means, advertising related to DEZZAI products.  Therefore, those offers and news that may be most interesting to you will be determined.
• Data collected through the website. The purpose of collecting this type of data is to provide you with a better experience in the use of the website.
• Candidate management. We collect personal and professional information, which you provide to us through the appropriate channel, in order to deal with potential candidates. 

The legal basis for the processing of your data for the aforementioned purposes is the consent you have given us for the specific purposes and in accordance with the provisions of Article 6.1 a) of the GDPR. Your personal data will be kept for this purpose until you revoke your consent.

• QUERIX customer data management. Personal data will be processed in order to provide you with the service and/or product contracted or offered, I feel certain personal information is necessary for this. 
• Service provider management. QUERIX will process personal data of its suppliers for the purpose strictly of the execution of the contract. 

The legal basis for the purposes mentioned above is for the performance of a contract to which the data subject is a party pursuant to the provisions of Art. 6.1 b) of the General Data Protection Regulation (hereinafter “GDPR”). 

• Data management for compliance with legal and regulatory obligations. All data controllers are subject to and obliged to comply with the laws of the countries in which they operate. These obligations include the delivery, in certain circumstances, of personal data to judicial bodies, regulatory or supervisory bodies and state security forces and bodies. 

The legal basis for the processing of your data for the aforementioned purposes is compliance with legal obligations applicable to the data controller, pursuant to the provisions of art. 6.1 c) of the GDPR. 

• Satisfaction surveys. We inform you that we may process your data to carry out surveys in order to know your interests and obtain information through Social Networks about the perception of our brand or our products.
• Quality control management. Please note that we record interactions with us for quality control. 

The legal basis for the processing of your data for the aforementioned purposes is the legitimate interest applicable to the data controller, pursuant to the provisions of art. 6.1 d) of the GDPR. 

VII.- HOW LONG WILL WE KEEP YOUR DATA? 

Your personal data will be kept for the time necessary to fulfil the aforementioned purposes.  In any case, we limit access to your data only to those people who need to use it for the performance of their functions.

The period of conservation of the information processed is based on the needs of the business, so when they are unnecessary, they will be kept duly blocked for the sole purpose of attending to any liabilities of any kind that may arise. 

• Purposes related to the consent given.  The data will be kept until the consent of the interested party is revoked and, at most, until a maximum period of four years from the time the express consent was obtained.  
• Purposes related to the execution of a contract. For the management of any contractual obligation we have with you, we will keep this data for the period of validity of the contract and for the following ten years, in order to be able to respond to possible subsequent queries or complaints.
• Purposes related to compliance with legal obligations. Certain information must be kept for the periods required by the specific regulations that are applicable (tax, commercial, responsibilities, etc.).
• Purposes related to legitimate interest. Certain information must be kept for the periods necessary in fulfilment of DEZZAI’s interest in the use of QUERIX.

VIII.- TO WHOM WILL YOUR PERSONAL DATA BE DISCLOSED?

Your data will not be communicated to third parties, unless expressly authorised or, in legally admissible cases, information will be provided to the Public Authorities such as: the Tax Authorities, for compliance with tax obligations; to the competent Administrations, State Security Forces and Bodies, Judges and Courts and to the Spanish Data Protection Agency, in compliance with the legal obligations of the Data Controllers or in the event of conflicts related to consumer rights, data protection rights, intellectual or industrial property rights,  or with any other protected assets and/or rights.  As well as financial institutions for the management of collections and payments.

Similarly, some entities subcontracted by DEZZAI may access personal data and information as processors or subprocessors to provide us with the necessary service at QUERIX. These service providers enter into a contract that obliges them to use your personal information only for the provision of the services disclosed in this policy.

IX.- WHAT INFORMATION SECURITY MEASURES DO WE APPLY?

At QUERIX we guarantee the proper use of the information, and in particular, the full confidentiality of the personal data contained in our system, as well as full compliance with the obligations regarding the protection of personal data.

We have the necessary technical and organisational security measures in place to guarantee the security of your personal data and prevent its alteration, loss and unauthorised processing and/or access, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed.  whether they come from human action or from the physical or natural environment. As well as the division of environments into physical and isolated segments to limit the scope of an attack and contain possible security gaps, thus improving the overall security of the system.

In addition, we have processes for assessing the security of a computer system or network by simulating attacks to identify and remediate vulnerabilities before they can be exploited by malicious attackers.

We have cloud providers certified in Information Quality and Security (SOC-2, 27001, ENS), with compliance with high standards of quality and information security in their operations and services.

X.- WHAT ARE YOUR DATA PROTECTION RIGHTS?

DEZZAI informs QUERIX Users that they may exercise their rights of access, rectification, limitation, deletion, portability and opposition to the processing of their personal data before the Data Controller, as well as the withdrawal of the consent given.

10.1. What are your rights as a Data Subject?

• Right of Access: This is the right of the user to obtain information about their specific personal data and the processing that has been carried out or is being carried out, as well as the information available on the origin of said data and the communications made or planned to be made of them.
• Right of Rectification: It is the right of the affected party to have the data that turns out to be inaccurate or incomplete modified. 
• Right to Restriction of Processing: This is the right to have the purposes of the processing originally foreseen by the data controller limited.
• Right to Erasure: This is the right to delete the user’s personal data, except as provided for in the GDPR itself or in other applicable regulations that determine the obligation to keep them, in a timely manner.
• Right to portability: The right to receive the personal data that the user has provided, in a structured, commonly used and machine-readable format, and to transmit them to another controller.
• Right of Opposition: It is the right of the user not to carry out the processing of their personal data or to cease the processing of the same by the platform.

10.2. How to exercise your rights

Depending on the type of information we process about you, you may contact DEZZAI via email: info@querix.chat. The exercise of their rights will be completely free of charge.

Opposition to a certain purpose or the revocation of the consents granted will not affect the use you may make of the website, nor the lawfulness of the processing prior to the opposition or revocation of consent.

The consents granted may be revoked by sending an email to: info@querix.chat.

Finally, if you consider that you have not obtained satisfaction in the exercise of your rights or are not satisfied with the processing carried out of your personal data, you can file a complaint with the Competent Authority in terms of data protection. 

XI.- INFORMATION ABOUT THE USE OF AI

11.1. Information of interest

As a QUERIX user or customer, you know that the implementation of the AI-powered virtual agent will improve the efficiency and experience of your customers and employees, as it satisfies the requirements of scalability, integration, customization and support services through QUERIX natural language processing (NLP).

QUERIX provides integration with existing systems in your company such as CRM, ERP and human resources databases, using robust security measures.

In addition, you should know that the implementation of the QUERIX virtual agent will require the need to properly train your team, in order for employees to compose how to interact with the virtual agent.

QUERIX has been developed under the RAG technological architecture (owned by DEZZAI), which guarantees that each response is based on verified and factual information, reducing hallucination levels, i.e. answers based on assumption or incomplete data.

In addition, QUERIX uses controlled information sources, as we integrate with your company’s existing systems, such as CRM or database.

11.2. Purpose of AI processing.

The information entered in QUERIX and, specifically, in the virtual assistant will not be shared with third parties and it will be the client who trains their virtual assistant using the information they upload in the “datasets” section.  

The objective of data processing through AI is to develop a virtual assistant to meet the needs required by the QUERIX customer, such as:

• Enable businesses to offer 24/7 automated customer service, improving response speed and overall satisfaction.
• Technical support. Respond in an automated way to frequent technical queries, providing effective support without the need for human intervention, with the possibility of escalating to human agents in complex cases.
• Marketing. QUERIX helps customers quickly find the products or services they need, improving conversion and generating new sales opportunities.
• Human resources assistant. It automates processes such as personnel selection, management of internal FAQs or consultations on company policies, improving efficiency in human resources management.
• Sales Assistant

11.3. AI Code of Ethics

You as the user/client of the processing in QUERIX and, as the creator of your virtual assistant, expressly agree at this time to comply with the following measures: 

• Remove personal data in documents: Replace or remove names, email addresses, phone numbers, and other personal data from documents that are shared through the datasets.
• Prohibition of sharing sensitive information.
• Use AI exclusively for lawful purposes that respect the dignity of users.
• It is also committed to using AI in a transparent and ethical manner, ensuring that all automated decisions are made in accordance with the principles of fairness and non-discrimination. Although AI can provide recommendations or automatic responses within your organization, DEZZAI is not responsible for the results derived from its use when users do not follow the indications provided or make improper use of the system.
• In case of using the virtual assistant for profile evaluation, the user undertakes to carry out a review of the result generated.

LAST UPDATE:  November 2024