Privacy policy

Last updated: 19 August 2026

Who is responsible for your data

The data controller for this website is NOTLINEAR, S.L.U., NIF B88656731, Calle Valencia 184, 4º 1ª, 08011 Barcelona, Spain. For anything related to your personal data, write to pietro@notlinear.ai. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and Spanish data protection law (LOPDGDD).

The short version

This website has no user accounts and asks for nothing you don't choose to give. We handle personal data when you interact with us — subscribing to the newsletter, booking a call, or emailing us — and in each case we collect only what that interaction needs. The one thing that happens in the background is website analytics, and it runs only if you accept it in the cookie banner. Decline and nothing is stored or sent; see our cookie policy for the detail.

When we process data, and why

• Newsletter. When you enter your email in the subscribe form, it is passed directly to Substack (Substack Inc., USA), which manages our newsletter and completes your signup on its own pages. We do not store your email on this website. Substack processes it under its own privacy policy. Legal basis: your consent, which you can withdraw at any time via the unsubscribe link in every email.
• Booking a call. When you book through Cal.com (Cal.com, Inc., USA), you provide your name, email, and any details you choose to share. We use them to prepare for and hold the meeting, and to follow up on your request. Legal basis: taking steps at your request prior to a possible contract. Cal.com's privacy policy also applies.
• Email. If you write to us, we keep the correspondence for as long as needed to handle your request and any follow-up. Legal basis: our legitimate interest in responding, or pre-contractual steps if you ask about our services.
• Website analytics. If — and only if — you press Accept in the cookie banner, we use Google Analytics 4 (Google Ireland Limited, Ireland) to measure how the site is used: pages viewed, how you arrived, approximate location by country, device type, and clicks on the main buttons (booking a call, opening a course, signing up for a workshop or the newsletter). Google acts as our data processor and Google Analytics 4 does not store full IP addresses. Advertising features are disabled permanently: ad storage, ad user data and ad personalization are set to "denied" through Google Consent Mode regardless of your choice, and we do not run ads or share this data for advertising. Until you accept, the Google script is not loaded at all. Legal basis: your consent, which you can withdraw at any time by reopening the cookie choice. Google's privacy information also applies.
• Hosting. The site is served by Netlify (Netlify, Inc., USA), which processes visitors' IP addresses and standard technical request logs transiently, as any web host does, for delivery and security. Legal basis: our legitimate interest in operating a secure website.

International transfers

The providers above are based in the United States, or (in Google's case) contract through an EU entity that may transfer data to the United States. Where personal data is transferred outside the European Economic Area, the transfer relies on the safeguards provided for by the GDPR, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses, as applicable to each provider.

How long we keep data

We do not maintain databases of visitor data ourselves. Analytics data is retained by Google for the shortest period Google's settings allow (2 months for user- and event-level data); aggregate reports remain available afterwards. Newsletter data is held by Substack until you unsubscribe. Correspondence and booking information is kept for as long as needed to handle the relationship, and afterwards only as required to meet legal obligations or defend against claims.

Your rights

You have the right to access, rectify, and erase your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. To exercise any of these rights, email pietro@notlinear.ai. If you believe your rights have not been respected, you can lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (aepd.es).

What we don't do

We do not sell personal data, we do not use it for automated decision-making, we do not build advertising or behavioural profiles of individuals, we run no advertising or remarketing tags, and this website is not directed at children under 14.

Changes to this policy

If we change how the website handles personal data we will update this policy and, where required, ask for your consent again. The date at the top reflects the latest revision.