Privacy notice

This notice explains how Netta Tech processes personal data in connection with this website and our commercial relationship with prospects and clients. It is written in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD).

1. Data controller

Controller

Netta Nexus Digital S.L. (in formation), trading as Netta Tech

Tax ID (NIF)

[NIF pending — company in formation]

Address

Barcelona, Catalonia, Spain

Contact

hola@netta-tech.com

We have not appointed a Data Protection Officer (DPO). The controller handles all privacy matters directly at the address above.

2. What data we collect

• Contact form: name, email, company, message, and the timestamp and IP address of the submission.
• Email correspondence: anything you send us when you write to hola@netta-tech.com or reply to our messages.
• Technical logs: edge access logs (IP, user agent, URL, status code) kept briefly by our hosting provider for security and abuse prevention.

We do not set analytics, advertising or tracking cookies. The only cookies on this site are strictly necessary ones set by our infrastructure provider (Cloudflare) for security and bot protection. These are exempt from consent under the ePrivacy Directive. No cookie consent banner is required and none is shown.

3. Why we process it and on what basis

• Answering your enquiry — legal basis: your consent (Art. 6(1)(a) GDPR), given when you submit the contact form, and, where relevant, steps taken at your request before entering a contract (Art. 6(1)(b)).
• Managing a commercial relationship — legal basis: performance of a contract (Art. 6(1)(b)).
• Abuse prevention and site security — legal basis: our legitimate interest in keeping the site available and free from fraud (Art. 6(1)(f)).
• Legal obligations — legal basis: compliance with accounting, tax and other laws we are subject to (Art. 6(1)(c)).

4. How long we keep it

• Unanswered enquiries: up to 12 months, then deleted.
• Active commercial relationships: for the duration of the engagement plus the statutory retention periods after it ends (generally up to 6 years for accounting records).
• Edge access logs: as defined by our hosting providers, typically under 30 days.

5. Who we share it with

We rely on a small number of processors, each bound by a written agreement and appropriate safeguards:

• Cloudflare, Inc. (USA) — website hosting, DNS, bot protection (Turnstile). International transfers under the EU–US Data Privacy Framework and Standard Contractual Clauses.
• Hetzner Online GmbH (Germany, EU) — hosting for our application workloads, including the database that stores contact-form submissions. No international transfer — data remains within the EU.
• Resend (Second Rodeo, Inc.) (USA) — transactional email delivery for contact-form notifications. International transfers under the EU–US Data Privacy Framework and Standard Contractual Clauses.

We do not sell personal data. We do not share it with third parties for their own marketing.

6. Your rights

Under the GDPR you may, at any time, ask us to:

• confirm whether we hold data about you and give you a copy (access);
• correct data that is inaccurate or incomplete (rectification);
• delete data we no longer need (erasure);
• restrict or object to certain processing;
• receive your data in a portable, machine-readable format;
• withdraw any consent you previously gave, without affecting the lawfulness of processing based on it before withdrawal.

To exercise any of these rights, write to hola@netta-tech.com. If you believe we have mishandled your data, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es).

7. Changes to this notice

We may update this notice as our services, processors or legal obligations evolve. The date at the top of the page reflects the most recent change. Material changes will be flagged on the site.