Privacy policy
Last reviewed:
Data controller
Nexon Webs. Contact email: nexonwebs151@gmail.com. The full registration details of the owner (legal name, tax number and address) are pending publication on this page. In the meantime they are provided in writing on request at nexonwebs151@gmail.com.
Write to that address about anything to do with your personal data, including exercising your rights.
What is collected, and how
This site has no database and stores no form submissions. The contact form sends nothing to a server of ours: it assembles a message from what you typed and opens it in your own WhatsApp or email app, for you to read and send yourself. Until you press send in your own app, the data never leaves your device.
When you send that message, we receive whatever you chose to include: usually your business name, what you need, and a phone number or email so we can reply. No special category data is requested, and none should be included in the message.
If you arrived from an advert, the message may include one line with the campaign parameters (utm_source, gclid and similar). It tells us which advert works; on its own it identifies nobody.
Why it is used, and on what legal basis
To answer your enquiry and, where relevant, prepare a quote. The legal basis is your consent in sending the message and the pre-contractual steps taken at your request (GDPR articles 6.1.a and 6.1.b).
If we end up working together, billing data is also processed to meet tax and accounting obligations (GDPR article 6.1.c).
Your data is not used to send you advertising or newsletters, and no automated decision-making or profiling is carried out with it.
How long it is kept
Enquiries that do not lead to work are kept while the conversation is live and deleted once they no longer serve a purpose, for a maximum of one year.
Where there is a contract, data is kept for the duration of the relationship and then blocked for the statutory limitation periods, in particular the six years required by Spanish commercial rules and the four required by tax rules.
Who else receives your data
Data is neither sold nor shared with third parties. The providers needed to make the site and the contact channels work do take part, each under its own policy:
Vercel Inc. (United States): website hosting and aggregated visit analytics. Covered by the EU-US Data Privacy Framework.
WhatsApp Ireland Limited (Meta group): only if you choose to write via WhatsApp. The message is sent from your own account and is governed by WhatsApp’s terms.
Google Ireland Limited: our email is received through Gmail, so any email you send us is stored in that service.
Data will also be disclosed to public authorities where the law requires it.
International transfers
Hosting involves a transfer to the United States covered by the EU-US Data Privacy Framework, to which Vercel Inc. is certified, and by the standard contractual clauses approved by the European Commission.
Cookies and analytics
This site sets no advertising or tracking cookies, which is why you will not see a cookie banner asking permission for something that does not happen.
It uses Vercel Web Analytics, which measures visits and page views in aggregate and without cookies: it creates no persistent identifier and follows nobody across websites.
Your browser keeps one technical value in your own device’s session storage (where the visit came from, so it can be included in the message if you write). It is cleared when you close the tab and does not travel to any server on its own.
Your rights
You can request access to your data, its rectification or erasure, restriction of or objection to processing, and portability, and you can withdraw your consent at any time. An email to nexonwebs151@gmail.com stating which right you are exercising is enough.
Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.
If you believe your data has not been handled properly, you can complain to the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid.
Security and changes
Reasonable technical and organisational measures protect the data: the site is always served encrypted over HTTPS and email access is protected with two-step verification.
This policy may be updated if the services or the rules change. The date of the last revision appears at the top of this page.