Privacy policy

At Nova Factory we are committed to protecting users' privacy and processing their personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), Spanish Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights (LOPDGDD), and other applicable regulations. This Policy explains what data we collect, for what purpose, the legal basis for processing, how long we keep it, and how you can exercise your rights.

1. Data controller

• Controller: Nova Factory
• Address: Viladecavalls, Barcelona (Spain)
• Email: novafactory.lab@gmail.com
• Phone: +34 658 091 705

2. Data we process

We process only the data strictly necessary for each purpose, specifically:

• Identification and contact data: name, surname, email and phone number.
• Professional data: company or organization, position (if provided).
• Project data: description, files, references and information you provide to prepare the quote.
• Browsing data: IP address, device type, browser, language and pages visited, collected through cookies as detailed in the Cookie Policy.

3. Purposes of processing

• Handling inquiries, information requests and quotes sent through forms or email.
• Managing bookings, appointments and the provision of contracted services.
• Maintaining the business relationship, issuing invoices and complying with accounting, tax and administrative obligations.
• Sending operational communications related to your project.
• Analyzing use of the Website to improve our services, always with your prior consent when required.

4. Legal basis

• Consent of the data subject (Art. 6.1.a GDPR) when filling out and submitting the forms.
• Performance of a contract or application of pre-contractual measures (Art. 6.1.b GDPR).
• Compliance with legal obligations applicable to the controller (Art. 6.1.c GDPR), especially tax and accounting matters.
• Legitimate interest (Art. 6.1.f GDPR) to ensure the Website's security and prevent fraud.

5. Retention period

Data will be kept for as long as necessary to fulfill the purpose for which it was collected and, where applicable, for the legally required periods (for example, up to 6 years for commercial documentation under the Commercial Code, and up to 4 years for tax matters). It will then be securely deleted or anonymized.

6. Recipients and data processors

We do not disclose your data to third parties except when legally required. To provide our services we use technology providers who act as data processors under a contract signed in accordance with Art. 28 GDPR, including:

• Web hosting and cloud infrastructure providers.
• Email and messaging providers.
• Appointment management, CRM and invoicing tools.
• Map services (Google Maps) and external messaging (WhatsApp), when activated by the user.

7. International transfers

Some of our providers may process data outside the European Economic Area. In these cases we ensure that the transfer takes place with the appropriate safeguards provided for in Articles 44 et seq. of the GDPR (European Commission Standard Contractual Clauses or adequacy decisions).

8. Data subject rights

You can exercise the following rights at any time:

• Access to your personal data.
• Rectification of inaccurate or incomplete data.
• Erasure when it is no longer necessary.
• Restriction of processing in the cases provided by law.
• Objection to processing for reasons related to your particular situation.
• Portability of data in a structured, commonly used format.
• Withdrawal of consent given, without affecting the lawfulness of prior processing.

To exercise them, send an email to novafactory.lab@gmail.com stating the right you wish to exercise and attaching a copy of an identification document. If you believe that the processing does not comply with current regulations, you have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es).

9. Security measures

Nova Factory has adopted the necessary technical and organizational measures to guarantee the security, confidentiality and integrity of personal data, preventing its alteration, loss, unauthorized processing or access, in accordance with the state of the art.

10. Changes to the policy

This Policy may be updated at any time to adapt it to legislative developments or changes in our services. We recommend reviewing it periodically.