Privacy policy

1. Data controller

Controller: NEBULA LABS SL, tax ID B22723720, registered office at Paseo Riomonte 50, 28260 Galapagar (Madrid), España.

Contact: hello@nebulalabs.es.

Data protection contact: Daniel Urchegui, at hello@nebulalabs.es.

2. What data we process

Contact form: name, email, organization (optional), type of need, subject and message, the section of the website you write from, and your acceptance of this policy with its date.

Analytics, only if you accept it: Google Analytics 4 cookie identifiers, pages visited, browsing events, device and browser type, and approximate location.

Server logs: IP address, date and time, requested page and browser, generated automatically by the server on every visit.

We do not ask for special categories of data. Please do not include them in your messages.

3. Purposes and legal basis

Answering your contact request and, where applicable, preparing a proposal. Legal basis: your consent, given by ticking the form checkbox (art. 6(1)(a) GDPR), and, if the request leads to a contract, pre-contractual measures (art. 6(1)(b) GDPR).

Measuring the use of the website with Google Analytics 4. Legal basis: your consent through the cookie panel (art. 6(1)(a) GDPR and art. 22.2 LSSI-CE). Without consent, Google Analytics is not loaded.

Ensuring the security and operation of the website through server logs. Legal basis: legitimate interest in protecting the website (art. 6(1)(f) GDPR).

We do not make automated decisions or build profiles with legal effects on you.

4. Retention period

Contact data: as long as needed to answer your request and, if no business relationship starts, 12 months at most. After that, the data will be kept blocked during the limitation periods of any legal liabilities, available only to courts and competent authorities. [DATO: confirm period with the legal advisor]

Analytics data: the retention period configured in Google Analytics 4. [DATO: retention period configured in GA4]

Server logs: [DATO: server log retention period].

5. Recipients and processors

We do not share your data with third parties unless legally required. To provide the service, the following providers access it as data processors:

Web3Forms: receiving the contact form and forwarding it to our email. [DATO: sede de Web3Forms y garantías de transferencia internacional]

Google Ireland Ltd.: corporate email (Google Workspace), where we receive messages, and Google Analytics 4, only with your consent.

Web hosting: Hostinger International Ltd. (VPS), centro de datos en París, Francia (UE).

6. International transfers

Google may process data outside the European Economic Area, in particular in the United States. These transfers rely on the EU-US Data Privacy Framework and on the standard contractual clauses approved by the European Commission.

Web3Forms: [DATO: sede de Web3Forms y garantías de transferencia internacional]

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to hello@nebulalabs.es with the subject "Data protection". If we have reasonable doubts about your identity, we may ask for additional information to confirm it.

Withdrawing consent does not affect the lawfulness of prior processing. You can withdraw your analytics consent from "Cookie settings" in the footer.

If you believe we have not handled your rights properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Minors

This website is not aimed at children under 14. If you are under that age, please do not provide us with personal data.

9. Security

We apply technical and organizational measures appropriate to the risk, such as encrypted communications (HTTPS) and restricted access to systems, to protect your data against loss, unauthorized access or alteration.

10. Changes to this policy

We may update this policy to reflect legal changes or changes in our processing. The version in force is the one published on this page, with its last updated date.