Privacy policy
How Nerva Technologies processes the personal data you provide through this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the protection of personal data and the guarantee of digital rights (LOPDGDD).
Last updated
Data controller
- Controller
- NERVA TECHNOLOGIES, S.L.
- Tax ID (NIF)
- B56308158
- Registered office
- StartUPV · Universitat Politècnica de València, Edificio 9B, 46022 Valencia (Spain)
- [email protected]
- Website
- www.nervatech.es
- Data protection contact
- Francesc Coello
Nerva Technologies is not required to appoint a data protection officer under article 37 GDPR and article 34 LOPDGDD. For any question concerning the processing of your data, please write to the email address above.
Data we process
We process only the data you provide voluntarily and the strictly technical data generated by the connection itself:
- Identification and contact data provided in the form: full name, organisation and email address.
- Content of your message: subject and body, together with any data you choose to include in them.
- Correspondence data: whatever appears in the messages you send to our email addresses.
- Technical connection data: IP address and submission timestamp, recorded for the sole purpose of preventing automated and abusive form submissions.
Fields marked as required are necessary to handle your enquiry; if you do not provide them, we will not be able to process it.
Purposes of the processing
- Handling, managing and answering the enquiries and requests you send us.
- Managing any pre-contractual relationship or institutional, industrial or investment collaboration arising from your enquiry.
- Keeping an internal record of the communications received and of our response.
- Ensuring the security of the site and preventing fraudulent or abusive use of its forms.
We do not carry out profiling and we make no automated decisions producing legal effects concerning you or similarly significantly affecting you. Nor do we use your data to send you unsolicited commercial communications.
Legal basis
- Consent · art. 6(1)(a) GDPR
- Submission of the contact form, which requires express acceptance of this policy.
- Pre-contractual steps · art. 6(1)(b) GDPR
- Handling requests aimed at entering into a contractual or collaboration relationship.
- Legitimate interest · art. 6(1)(f) GDPR
- Site security and prevention of abuse of its forms.
- Legal obligation · art. 6(1)(c) GDPR
- Retention of documentation where required by law.
You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out beforehand.
How long we keep your data
We keep your data for as long as necessary to handle your enquiry and, where applicable, throughout any relationship arising from it.
Once that relationship ends, the data is kept blocked during the limitation periods for any legal action that may arise —generally six years under article 30 of the Spanish Commercial Code, plus the applicable tax periods— after which it is deleted.
Technical anti-spam data is kept for minutes only, strictly as long as needed to apply the submission rate limit, and is discarded thereafter.
Recipients
We do not sell your data and we do not disclose it to third parties for commercial purposes. It is accessed only by the providers that render services to us and act as processors, under a contract concluded pursuant to article 28 GDPR:
- Web hosting provider, which hosts the site and processes the form submission.
- Email provider, through which we receive and manage your enquiry.
Our providers process data within the European Economic Area. Where a provider processes it outside the EEA, the transfer is based on a European Commission adequacy decision or on standard contractual clauses with any additional safeguards required.
Data may be disclosed to courts, tribunals, public administrations and competent public bodies where there is a legal obligation to do so.
Your rights
You may exercise the rights granted to you by data protection law by writing to our email address or to our registered office, stating the right you are exercising and enclosing a copy of a document proving your identity:
- Access: to know what data of yours we process and for what purpose.
- Rectification: to correct inaccurate or incomplete data.
- Erasure: to request deletion of your data when it is no longer necessary.
- Objection: to object to the processing on grounds relating to your particular situation.
- Restriction: to request that we suspend the processing while a claim is verified.
- Portability: to receive your data in a structured, commonly used format.
- Withdrawal of the consent given, at any time.
We will respond within one month of receipt, extendable by a further two months where the complexity or number of requests so justifies, in which case we will inform you of the extension.
If you believe the processing of your data does not comply with the applicable rules, or if you are not satisfied with the outcome of your request, you may lodge a complaint with the supervisory authority:
- Supervisory authority
- Spanish Data Protection Agency (AEPD)
- Address
- C/ Jorge Juan, 6 · 28001 Madrid · Spain
- Website
- www.aepd.es
Security and confidentiality
We apply appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with article 32 GDPR: encryption of the communication channel (HTTPS), access control to our mailboxes, minimisation of the data collected and measures to prevent abuse of the forms.
All communications we receive are treated as confidential and shared internally only with those who need to take part in the response.
Accuracy of the data
You warrant that the data provided is true, accurate and up to date, and undertake to notify us of any change. Where you provide third-party data —for example, contact details of people in your organisation— you warrant that you are entitled to do so and have informed them beforehand of this processing.
Minors
This site and its forms are aimed at professionals, companies and institutions. They are not intended for children under fourteen and we do not knowingly collect their data. If we detect that we have received a minor's data without the corresponding authorisation, we will delete it.
Changes to this policy
We may update this policy to adapt it to legislative changes, new processing activities or modifications to the site. The version in force is the one published on this page, with the update date shown at the top of the document.