Privacy policy
Last updated: 6 November 2026
Data controller
- Controller: Nuvoling
- Privacy contact email: contact@nuvoling.com
What data we process
- Contact form: name, email, phone and company (optional), the services you’re interested in, an approximate budget and the message you write to us.
- Call booking: the details you provide when booking through Google’s appointment calendar (name, email and any other contact details you choose to add).
- Browsing: technical server data (such as IP address and browser) for security purposes and, only if you accept, statistical data on how the website is used.
Why we use it and on what legal basis
We do not make automated decisions or build profiles with your data.
- To answer your enquiry, prepare a proposal or quote and manage the call: your consent and steps taken at your request before entering into a contract (art. 6.1.a and 6.1.b GDPR).
- If you become a client, to manage the contractual relationship and meet legal obligations such as tax requirements (art. 6.1.b and 6.1.c GDPR).
- To measure website usage with Google Analytics: your consent, which you can withdraw at any time (art. 6.1.a GDPR).
- To protect the website against abuse and automated submissions: our legitimate interest (art. 6.1.f GDPR).
How long we keep it
Contact details are kept for as long as needed to handle your request and for no more than one year if we don’t end up working together. If you become a client, for the duration of the relationship and the periods required by law. Analytics data is kept for the period configured in Google Analytics, up to 14 months.
Who we share it with
We do not sell or transfer your data. To provide the service we use providers acting as data processors:
- Vercel Inc. — website hosting.
- Resend — delivery of contact form messages to our inbox.
- Google — Google Analytics (only if you accept) and the appointment calendar (if you book a call).
- Cloudflare, Inc. — Cloudflare Turnstile, the anti-bot check on the contact form (processes your IP address and technical browser data).
- Our email provider, so we can reply to you.
International transfers
Some of these providers are based in the United States or may access data from there. These transfers rely on the EU-U.S. Data Privacy Framework or on standard contractual clauses approved by the European Commission.
Your rights
You can access, rectify or erase your data, object to or restrict its processing, request its portability and withdraw your consent at any time by writing to contact@nuvoling.com. If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).
Security
The website always runs over an encrypted connection (HTTPS) and we apply reasonable technical and organisational measures to protect your data.
Children
This website is not aimed at children under 14. If you are under 14, please do not send us personal data.
Changes to this policy
We may update this policy to reflect legal or website changes. The date of the last update appears at the top of the page.