1. Data Controller
The controller of your personal data is Ruben Main, operating under the trading name Primigenum as a natural person established in Spain.
Contact: primigenum@primigenum.com.
2. What data we collect
We only collect the minimum data required to operate our services and to authenticate you when you sign in.
- Account data — name, email address and profile picture provided by your identity provider (e.g. Google, when you use Google Sign-In).
- Authentication data — session identifiers and security tokens stored as cookies or server-side records.
- Usage data — basic request metadata (IP address, user-agent) processed at the server for security, abuse prevention and troubleshooting.
- Content you submit — information you enter directly into Primigenum products (e.g. bookings and organization memberships in Nexum).
We do not run third-party analytics, advertising or behavioural tracking on this landing site.
3. Why we process your data
- To authenticate you and keep you signed in across Primigenum products.
- To provide the features of the product you are using (bookings, organization management, messaging, etc.).
- To secure our services, detect abuse and comply with legal obligations.
- To contact you back when you write to us directly.
4. Legal basis
Under the EU General Data Protection Regulation (GDPR) we rely on:
- Performance of a contract (Art. 6.1.b) — to deliver the service you have signed up for.
- Legitimate interest (Art. 6.1.f) — for security, fraud prevention and essential operations.
- Consent (Art. 6.1.a) — when you actively authorize Google Sign-In or similar third-party sign-in flows.
- Legal obligation (Art. 6.1.c) — where applicable.
5. Sign-in with Google
When you use Google Sign-In, Google shares your name, email address and profile picture with us. We use this information solely to create or match your Primigenum account. We do not access your Gmail, Drive, Contacts or any other Google service beyond basic profile information. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
6. Data retention
We keep your account data for as long as your account remains active. After deletion, residual backups are rotated out within 30 days. Security logs are kept for up to 12 months.
7. Who we share your data with
- Infrastructure providers that host the service (e.g. Cloudflare, Railway, object storage providers). They process data strictly on our instructions.
- Identity providers when you use third-party sign-in (e.g. Google).
- Authorities, only if legally required.
We do not sell your personal data. Ever.
8. International transfers
Some of our providers operate outside the European Economic Area. In those cases, transfers are covered by Standard Contractual Clauses or equivalent safeguards approved by the European Commission.
9. Your rights
Under GDPR you have the right to:
- Access your personal data.
- Rectify inaccurate data.
- Request deletion ("right to be forgotten").
- Restrict or object to specific processing.
- Request data portability.
- Withdraw consent at any time, without affecting prior lawful processing.
- Lodge a complaint with the Spanish Data Protection Agency (AEPD) or your local supervisory authority.
To exercise any of these rights, write to primigenum@primigenum.com. We respond within 30 days.
10. Cookies
This landing site does not set any tracking, analytics or advertising cookies. Primigenum products set strictly necessary cookies for authentication and security; their use is described in each product's own policy.
11. Security
We use industry-standard safeguards: TLS everywhere, password hashing with modern algorithms, secret rotation, principle of least privilege, and regular reviews of our authentication and session flows.
12. Changes to this policy
We may update this policy to reflect legal, operational or technical changes. Significant changes will be announced on this page with a new "last updated" date.
13. Contact
Questions or concerns about privacy? Email primigenum@primigenum.com.