Legal notice

PRIVACY POLICY OF THE WEBSITE

https://noelova.com/

I. PRIVACY AND DATA PROTECTION POLICY

In accordance with current legislation, Noelova (hereinafter, also “the Website”) undertakes to adopt the technical and organizational measures necessary and appropriate to the level of risk of the collected data.

Legislation incorporated into this privacy policy

This privacy policy is adapted to current Spanish and European regulations on the protection of personal data on the internet. Specifically, it complies with:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 (GDPR).

  • Organic Law 3/2018, of 5 December, on Personal Data Protection and Digital Rights Guarantee (LOPD-GDD).

  • Royal Decree 1720/2007, of 21 December, which approves the implementing regulation of Organic Law 15/1999 (RDLOPD).

  • Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the data controller

The controller of the personal data collected on Noelova is:
Noelia Sánchez Aimar, NIF: 36130959 (hereinafter, “Data Controller”).
Contact details:

Personal Data Registry

In compliance with the GDPR and the LOPD-GDD, you are informed that the personal data collected through forms on this website will be stored and processed in our database with the purpose of facilitating, streamlining, and fulfilling the commitments established between Noelova and the User, or maintaining the relationship established through the forms completed by the User, or responding to requests or inquiries.

Likewise, unless the exception of Article 30.5 of the GDPR applies, a record of processing activities is maintained, specifying the purposes of processing, the activities carried out, and the other circumstances established by the GDPR.

Principles applicable to personal data processing

Processing of the User’s personal data will be subject to the following principles established in Article 5 of the GDPR and Article 4 and onward of Organic Law 3/2018:

  • Lawfulness, fairness, transparency: Consent will always be required with clear information on the purposes.

  • Purpose limitation: Data will be collected for specific, explicit, and legitimate purposes.

  • Data minimization: Only strictly necessary data will be collected.

  • Accuracy: Data must be accurate and up to date.

  • Storage limitation: Data will only be retained for the necessary time.

  • Integrity and confidentiality: Data will be processed securely and confidentially.

  • Accountability: The Controller is responsible for compliance with these principles.

Categories of personal data

Only identification data is processed. No special categories of data (Article 9 GDPR) are processed.

Legal basis for processing

The legal basis for processing is consent. Noelova undertakes to obtain express and verifiable consent from the User for one or more specific purposes.

The User may withdraw consent at any time, as easily as it was granted. Withdrawal does not restrict the use of the website as a general rule.

If the User must provide data to submit queries, request information, or for other website-related actions, they will be informed if any field is mandatory.

Purposes of processing

Personal data is collected and managed to facilitate and fulfill commitments between the Website and the User, or maintain the relationship established through forms, or respond to inquiries.

Additionally, data may be used for commercial personalization, operational and statistical purposes, storage, marketing studies, and improving website content, quality, and navigation.

Users will be informed of the specific purposes when their data is collected.

Retention periods

Personal data will only be retained for the minimum time necessary and, in any case, for 36 months, or until the User requests deletion.

Users will be informed of the retention period or the criteria for determining it.

Recipients of personal data

User data will not be shared with third parties.
Users will be informed of any exception when data is collected.

Personal data of minors

Only persons over 14 years old may legally consent to personal data processing. Minors under 14 require parental or guardian consent.

Security and confidentiality

Noelova undertakes to adopt necessary technical and organizational measures to ensure confidentiality and avoid destruction, loss, unauthorized access, or alteration of personal data.

The Website uses SSL encryption to secure data transmission.

However, Noelova cannot guarantee absolute security nor the absence of unauthorized access by hackers. The Controller will notify the User without undue delay if a data breach occurs that may pose a high risk to rights and freedoms.

Personal data will be treated confidentially by the Controller and associated staff.

User Rights

Users may exercise the following rights under GDPR and Spanish law:

  • Right of access

  • Right to rectification

  • Right to erasure (“right to be forgotten”)

  • Right to restriction of processing

  • Right to data portability

  • Right to object

  • Right not to be subject to automated decision-making, including profiling

To exercise these rights, the User must send a written request with the reference “RGPD-https://noelova.com/” including:

  • Name, surname, and ID (and representation documents if applicable).

  • Specific request and reasons.

  • Notification address.

  • Date and signature.

  • Supporting documents.

Requests may be sent to:
Postal address: Vincenzo Bellini 36
Email: info@noelova.com

Third-party links

The Website may include links to third-party sites, which have their own privacy policies. These sites are solely responsible for their own data practices.

Complaints before the supervisory authority

Users may file a complaint with their local supervisory authority if they believe data protection law is violated.
In Spain, the authority is the Agencia Española de Protección de Datos (https://www.aepd.es/).

II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

The User must read and agree to this Privacy Policy, as well as accept personal data processing, for the Controller to process their data.

Use of the Website implies acceptance of this Privacy Policy.

Noelova may modify this Policy without prior notice due to legal, jurisprudential, or regulatory changes. Users should review this page periodically.

This Privacy Policy was updated to comply with GDPR (Regulation EU 2016/679) and Organic Law 3/2018.