Privacy Policy
How we handle your personal data in accordance with the GDPR and Spanish data protection law.
Last updated:
1. Data Controller
- Company
- Nova Remont S.L.
- Tax ID (CIF)
- B-93581411
- Registered office
- Calle Carril Del Conde, 6, 29004 Málaga, Spain
- [email protected]
- Phone
- +34 678 82 24 54
2. What personal data do we collect?
Through the contact form on our website:
- Name
- Phone number
- Message (optional)
Technical data collected automatically:
- IP address
- Browser type (user-agent)
- Date and time of submission
Cookies and tracking technologies (subject to your consent):
- Google Analytics 4 (cookies
_ga,_ga_*,_gid): navigation behaviour analysis, page views, traffic source. - Plausible / Umami: anonymous aggregate traffic analysis, without persistent cookies.
- Google Ads (cookie
_gcl_au): conversion measurement and remarketing. - Meta Pixel (Facebook/Instagram) (cookies
_fbp,_fbc): conversion measurement and personalised advertising. - TikTok Pixel (cookie
_ttp): conversion measurement and personalised advertising.
You can withdraw your consent at any time through your browser's cookie settings.
3. Why do we process your data?
- To respond to your enquiry about renovation services.
- To contact you by phone or WhatsApp within 15 minutes during working hours.
- To prepare and send quotes or service proposals.
- To follow up commercially during your decision-making process.
4. What is the legal basis for processing?
- Explicit consent of the data subject, given by ticking the acceptance box before submitting the form.
- Where a contractual relationship is subsequently established, the legal basis is the performance of the contract and compliance with legal obligations (tax, commercial, warranty).
5. Who do we share your data with?
Your personal data may be disclosed to the following categories of recipients:
- Web3Forms (web3forms.com) — our contact form provider, acting as data processor. It processes data on servers located in the United States and forwards submissions to our corporate email.
- Google LLC (Google Analytics 4, Google Ads) — a US company acting as data processor. Data on Google servers.
- Meta Platforms, Inc. (Facebook, Instagram) — a US company acting as data processor. Data on Meta servers.
- ByteDance Ltd. (TikTok) — a Singapore/US company acting as data processor. Data on TikTok servers.
- Public administrations and judicial authorities — only where required by law.
We do not sell, rent or share your personal data with third parties for commercial or advertising purposes without your consent.
6. International transfers
Your data is transferred to servers located outside the European Economic Area, mainly in the United States, through the following providers:
- Web3Forms (United States) — contact form provision.
- Google LLC (United States) — Google Analytics 4 and Google Ads.
- Meta Platforms, Inc. (United States) — Meta Pixel for Facebook and Instagram.
- ByteDance Ltd. (Singapore / United States) — TikTok Pixel.
All these international transfers are covered by the Standard Contractual Clauses adopted by the European Commission, which guarantee an adequate level of protection under the GDPR.
7. How long do we keep your data?
| Situation | Retention period |
|---|---|
| Enquiries that do not result in a signed contract | 2 years from the date of submission |
| Customers with a signed contract | 6 years from the end of the contract |
Once these periods have elapsed, data is permanently deleted from all our systems: form, email inbox, and internal database.
Note: our form provider (Web3Forms) retains data for a maximum of 12 months under its own terms of service. This period is shorter than the retention periods stated above.
8. Your rights
You have the following rights regarding the processing of your personal data:
- Access: to know what data we process about you.
- Rectification: to correct inaccurate or incomplete data.
- Erasure: to request deletion of your data when it is no longer necessary for the purposes for which it was collected.
- Restriction: to request that we restrict processing in certain circumstances.
- Portability: to receive your data in a structured, commonly used and machine-readable format.
- Objection: to object to processing in certain circumstances.
To exercise any of these rights, send a request to [email protected] indicating which right you wish to exercise. We will respond within 30 days.
Additionally, to withdraw your consent from specific cookies or all tracking tools, you can use the following links:
- Google Analytics: Browser opt-out add-on
- Meta (Facebook/Instagram): Meta ad settings
- Your browser: Settings → Privacy and security → Cookies
9. Right to lodge a complaint
If you believe that the processing of your personal data infringes applicable law, you may lodge a complaint with the supervisory authority:
In Spain: Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan, 6, 28001 Madrid, www.aepd.es.
10. Data security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss or destruction:
- HTTPS/SSL encryption for all website traffic.
- Access to data restricted to authorised personnel.
- Our data processor (Web3Forms) maintains security measures compliant with the GDPR.
11. Changes to this policy
We reserve the right to modify this policy to adapt it to legislative or judicial developments. In the event of significant changes, we will notify you via our website. The date of the last update is indicated at the top of this document.