Privacy policy

1. Controller

The data controller is Jan Sherzad Colet, a self-employed professional trading as NOVA WEB, with Spanish tax ID 47327520Y and professional address at Carrer de Julià, 5, Sants-Montjuïc, 08004 Barcelona. You can contact us at contacto@novaweb.cat.

2. Data we process

• Form: name, email, business, current website and message.
• Chatbot: the content you enter and the recent context needed to generate an answer.
• Technical data: IP address, security logs and basic connection data processed by the hosting infrastructure.

3. Purposes and legal bases

• Answer enquiries, prepare assessments and take pre-contractual steps requested by the person concerned.
• Provide the chatbot requested by the user and keep it secure, based on that request and the legitimate interest in protecting the service.
• Prevent abuse, resolve incidents and maintain the website’s technical availability.

4. Retention

Enquiries that do not become projects are reviewed and deleted within a maximum of 12 months. Where a contractual relationship exists, necessary data is retained for the duration of the relationship and applicable legal periods. NOVA WEB does not store chatbot history on this website and requests AI responses with storage disabled; providers may process technical logs for the periods needed to secure and provide their services.

5. Providers and recipients

The service uses Netlify (hosting, forms and infrastructure) and OpenAI through Netlify AI Gateway (chatbot response generation). Netlify states that it uses the European Commission Standard Contractual Clauses —Decision 2021/914— for transfers to countries without an adequacy decision. For EEA customers, the OpenAI agreement is entered into with OpenAI Ireland Ltd.; subsequent transfers rely on an adequacy decision or EU Standard Contractual Clauses. You can read Netlify’s information and the OpenAI Data Processing Addendum. We do not sell personal data.

6. Your rights

You may request access, rectification, erasure, objection, restriction or portability by emailing contacto@novaweb.cat. If you believe the processing is inappropriate, you may complain to the Spanish Data Protection Agency.

7. Security and sensitive data

We apply reasonable measures to protect information. Do not send passwords, card details, identity documents, medical data or other particularly sensitive information through the form or chatbot.

8. Cookies and external resources

This version of the website does not use advertising or tracking cookies. It may record technical information essential for security and operation. If tools requiring consent are added in the future, this policy will be updated and consent requested before activation.

9. Changes

This policy may be updated when services or providers change. The date of the current version appears at the top of this page.