Privacy policy

1. Data controller

• Controller: G NAVASTA SL (Systems Nexia)
• Tax ID (NIF): B56749534
• Address: C/ Eres del Centre, 4, 17486 Castelló d'Empúries (Girona), España
• Contact and privacy email: info@systemsnexia.com
• Phone: +34 651 686 894

2. What data we process

Through the contact form: name, company, email, phone (optional), service of interest and message.

Through the digital assessment: in addition to your contact details, the information you provide about your needs, the problem you want to solve, the tools you use and your expected timeline.

Browsing data: only if you accept it in the cookie panel, statistical and advertising data collected through Google and Meta cookies.

3. Purposes

We do not make automated decisions or create profiles with legal effects on you, and we do not send commercial communications without your consent.

• To respond to your request, study your case and, where appropriate, send you a proposal.
• To manage the commercial or contractual relationship if you become a client.
• With your consent: to measure the use of the website and the effectiveness of our advertising campaigns.

4. Legal basis

• Your consent, when you submit a form or accept cookies (Art. 6(1)(a) GDPR).
• Taking pre-contractual steps at your request and, where applicable, the performance of a contract (Art. 6(1)(b) GDPR).
• Compliance with legal obligations, such as tax and accounting obligations (Art. 6(1)(c) GDPR).

5. Retention period

• Requests that do not lead to a business relationship: 12 months from the last contact.
• Client data: for the duration of the relationship and thereafter for the applicable legal periods (up to 6 years for commercial and tax obligations).
• Cookies: for the periods indicated in the Cookie Policy.

6. Recipients and processors

We do not share your data with third parties unless required by law. To provide the service we rely on providers acting as data processors:

• Vercel Inc. — website hosting.
• Resend (Plus Five Five, Inc.) — delivery of form submissions by email.
• GoDaddy — domain and email.
• Google and Meta — analytics and advertising, only if you give your consent.

7. International transfers

Some of these providers may process data in the United States. These transfers are covered by the EU-US Data Privacy Framework or by standard contractual clauses approved by the European Commission.

8. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to info@systemsnexia.com and stating the right you wish to exercise.

If you believe we have not processed your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or the supervisory authority of your country of residence.

9. Security

We apply appropriate technical and organisational measures to protect your data, such as encrypted communications (HTTPS) and restricted access to information.