Privacy Policy

This Privacy Policy explains how Novamar Tech SL ("Novamar Tech", "we", "us") collects and uses personal data when you visit this website or contact us through it. It is written to meet the EU General Data Protection Regulation (GDPR) and the Spanish Organic Law 3/2018 on data protection (LOPDGDD).

1. Who we are

The controller of your personal data is:

Company: Novamar Tech SL
NIF: B56288087
Registered office: Av. República Argentina, 6, 74, 03502 Benidorm (Alicante), Spain
Email: info@novamar.tech

We have not appointed a data protection officer, as we are not required to. For any question about your data, write to the email address above.

2. Information we collect

When you contact us. If you use the contact form or write to us by email, we receive your first and last name, your email address and, if you choose to give them, your company name, your position, and anything you write in your message. First name, last name, email address, and your agreement to this policy are required to send the form; without them we cannot reply. When you send the contact form, the website passes your message through our AWS service in the European Union (Frankfurt) to our mailbox as an email; the website itself does not keep a copy.

When you visit the website. Like any website, our hosting provider automatically processes technical data needed to deliver the pages to you: your IP address, the date and time of the request, the page requested, the referring page, and your browser and device type.

Your cookie choices. When you choose which cookies to allow, the choice is stored in your browser in the nt_consent cookie, together with a random identifier, the date, and the version of our Cookie Policy. We also keep a record of each choice on our servers: the same random identifier, your choices, the date and time, the policy version, the page, your browser type, and a shortened IP address. This record does not include your name or email address.

We do not use analytics, advertising, or social media tracking tools on this website at present, and we do not buy personal data from other sources.

3. Why we use it and on what legal basis

To answer your enquiry and, if you ask, prepare a proposal. Legal basis: your consent, given with the checkbox on the contact form (Article 6(1)(a) GDPR), and the steps you ask us to take before a possible contract (Article 6(1)(b) GDPR). If you write to us by email, the legal basis is our legitimate interest in answering messages sent to us (Article 6(1)(f) GDPR) and, where relevant, Article 6(1)(b).
To deliver the website and keep it secure. Legal basis: our legitimate interest in running a secure and available website and preventing abuse (Article 6(1)(f) GDPR).
To record and be able to demonstrate your cookie choices. Legal basis: our legal obligation to obtain and demonstrate consent for non-essential cookies (Article 6(1)(c) and Article 7(1) GDPR, and Article 22.2 of the Spanish Law 34/2002 on information society services, LSSI-CE).
To meet legal obligations such as accounting and tax rules, if an enquiry leads to a contract. Legal basis: legal obligation (Article 6(1)(c) GDPR).

We will not send you marketing emails unless you have separately agreed to receive them. We do not make decisions about you based solely on automated processing, and we do not create profiles of visitors.

4. Who processes your data

We do not sell your personal data. We share it only with the service providers we need to run the website and our communications, who act on our instructions under data processing agreements:

Amazon Web Services EMEA SARL (AWS): website hosting and delivery, delivery of contact form messages to our mailbox (Amazon SES), and storage of cookie consent records. Our AWS services run in the European Union (Frankfurt, Germany).
Google (Google Workspace): our email service. Messages you send to info@novamar.tech, through the contact form or directly, are received and stored in our Google Workspace mailbox.

We may also disclose data to public authorities, courts, or our professional advisers where the law requires it or where it is needed to establish, exercise, or defend legal claims.

5. International transfers

AWS and Google belong to groups based in the United States, and some processing, such as technical support or the delivery of pages through servers close to you, may take place outside the European Economic Area. Where personal data is transferred outside the European Economic Area, the transfer is covered by the European Commission's adequacy decision for the EU-US Data Privacy Framework or by Standard Contractual Clauses approved by the European Commission. You can ask us for more information about these safeguards.

6. How long we keep it

Enquiries: as long as needed to answer and follow up, and no longer than two years after our last contact. If the enquiry leads to a contract, we keep the related data for the duration of the contract and then for the periods required by law, for example six years for commercial and accounting records under the Spanish Commercial Code.
Technical logs: for a limited period set by our hosting provider, normally no longer than 90 days, unless they are needed to investigate a security incident.
Cookie choices: the nt_consent cookie expires after 12 months. Consent records on our servers are deleted automatically after three years.

When data is no longer needed, we delete it or make it anonymous.

7. Your rights

You can, at any time and free of charge:

ask for access to the personal data we hold about you;
ask us to correct inaccurate data or complete incomplete data;
ask us to delete your data;
ask us to restrict how we use your data;
object to processing based on our legitimate interest;
receive the data you gave us in a structured, commonly used format, or have it sent to another organization (data portability);
withdraw your consent at any time, without affecting the lawfulness of processing carried out before you withdrew it. For cookies, use Cookie settings.

To exercise these rights, email info@novamar.tech with the subject "Data protection". We may ask you to confirm your identity. We will reply within one month; for complex or numerous requests this may be extended by two further months, and we will tell you if so.

If you believe we have not handled your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es) or with the data protection authority of the country where you live or work. We would appreciate the chance to resolve your concern first, so please contact us.

8. Cookies

This website uses only an essential cookie to remember your cookie choices. Optional cookies are off unless you switch them on. Our Cookie Policy lists the cookies we use and explains how to change your choices.

9. Security

We protect personal data with appropriate technical and organizational measures, including encrypted connections (HTTPS) for the whole website, access to systems and mailboxes limited to the people who need it, and the security controls of our service providers. No method of transmission or storage is completely secure, but we work to protect your data and to act quickly if an incident occurs.

10. Children

This website is intended for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 14 years of age.

11. Other websites

This website links to other websites, such as LinkedIn and Clutch. When you visit them, their own privacy policies apply.

12. Changes to this Privacy Policy

We will update this policy when the way we process personal data changes, and change the effective date at the top of this page. If a change is significant, we will make it clear on the website.

13. Contact us

If you have any questions about this Privacy Policy or your personal data, contact us at info@novamar.tech or write to Novamar Tech SL, Av. República Argentina, 6, 74, 03502 Benidorm (Alicante), Spain.