Privacy

policy

DATA PROTECTION POLICY

NVLS INTERNATIONAL, S.L. (hereinafter “NOVALINS” or “we” or “Company”) is committed to providing you with an experience that meets the needs of our Website visitors, by using responsibly the information collected through our website. We are committed to respect your privacy and comply with applicable laws on data protection and privacy.

This policy determines and explains the conditions under which NOVALINS collects, stores, uses and generally processes your personal data.  If you have any questions regarding this Privacy Policy, but also any issue related to the processing of your personal data and the exercise of your rights, you may contact us at the following e-mail address: privacy@novalins.com.

1. Controller

NOVALINS is the controller of your personal data when processing is carried out in connection with the availability, operation, and termination of this website, as well as in relation to communication (both service-related and commercial), analysis, and electronic contact.

Controller information:

• Company name: NVLS INTERNATIONAL, S.L. (hereinafter “NOVALINS” or “we”).

• Registered Address: Valencia, Cronista Carreres, 5 -Ap. 11 – P.C.: 46003.

• Valencia Trade Registry, Volume 9675; Book 6957, Sheet 203, Section 8, Foil 155530, Inscription 1

• Tax. Id. No.: B98565195

• Email: privacy@novalins.com.

NOVALINS has not appointed a Data Protection Officer (DPO) as it is not legally required under Article 37 GDPR. However, any questions or concerns regarding data protection may be addressed to: privacy@novalins.com.

2. Data subject

The data subject is any identified or identifiable natural person whose personal data is collected, held, or processed by NOVALINS in the context of using this website or engaging with our services. For the purposes of this Privacy Policy, this refers primarily to user of the website (hereinafter; “you” or “the user”)

This includes, but is not limited to:

• Visitors to the website who do not submit any personal information
• Individuals who contact us via the contact form or other means
• Clients or prospective clients submitting data related to translation projects

We encourage all users to read this policy carefully to understand how their data is handled.

3. Data categories

The categories of personal data we collect depend directly on the type of communication we have with you and the specific purpose for which they are collected.  Below, you may find the data categories or types of data collected, and processed:

a. Data collected automatically (when browsing the website):

• metadata (IP, behavioural patterns, user experience, language, operating system, etc.)

b. Data provided directly by you:

When you are navigating and additionally contact us through the means provided for on the website, the following:

• identification data (name, surname, nationality, etc.)
• contact data (email, telephone, etc.)
• company info
• translation project info

c. Special categories of personal data (only where applicable):

We do not intentionally collect special categories of personal data (e.g., health data, biometric or religious information), unless explicitly provided by you in the context of a translation project. In such cases, processing is based on your explicit consent in accordance with Article 9(2)(a) GDPR.

4. Purposes and legal bases of processing

We process your personal data for specific and legitimate purposes, as defined below, and only where there is a legal basis under Article 6 of the GDPR. The table below outlines each purpose and its corresponding legal basis:

We do not process your personal data for any other purpose incompatible with the above, unless we are legally obliged to do so or you have given your prior consent.

5. Data retention periods

Data will be retained only as long as necessary to fulfil the purposes for which they were collected. After expiry, they will be securely deleted or anonymised.

Retention periods depend on the context and nature of the processing:

• Website analytics and logs: retained for up to 18 months.
• Contact form inquiries and general communication: retained for up to 18 months from last interaction.
• Client-related information and project data: retained for the duration of the contractual relationship and for a period of up to 5 years thereafter for legal, accounting, or tax purposes.
• Commercial communications: retained until the user unsubscribes or withdraws consent.
• Legal compliance data: retained for the period required by applicable legislation (e.g., tax or accounting laws).

Once the retention period expires, data is securely deleted or anonymized.

6. Recipients of your personal data

NOVALINS, yet for the compliance of legal obligations or requests, does not communicate data to third parties notwithstanding transmissions performed under operational needs to processors and alike. In relation to abovementioned, we share metadata with Google Ireland, Ltd so that we may be able to analyse traffic and behavioural patterns of our users by means of Google Analytics tools, or any other providers’ tools. Some of our providers to which we do transfer metadata may be found in our cookies policy.

Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs), approved by the European Commission.

7. Data security

We take appropriate technical and organizational measures to ensure a level of security appropriate to the risk involved in processing your personal data. These measures are designed to protect your data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

Despite our efforts, no transmission over the internet or method of electronic storage is completely secure. We encourage you to take reasonable precautions to protect your personal data when using the internet.

If you suspect any misuse or unauthorized access to your personal data, please contact us immediately at privacy@novalins.com.

8. Your rights

As a data subject, you have specific rights under the GDPR with regard to your personal data. You may exercise these rights at any time by contacting us at privacy@novalins.com.

Your rights include:

   i. Right to be informed: the right to be informed about the collection and the use of your personal data.

   ii. Right of access: the right to request confirmation as to whether your personal data is being processed and access a copy of the data.

   iii. Right to rectification: the right to have inaccurate personal data rectified, or completed if it is incomplete.

   iv. Right to erasure: the right to request the deletion of your personal data which will be granted without undue delay, unless the processing is necessary for the exercise of the legitimate rights of Novalins or third parties, for the fulfilment of a legal obligation, for reasons of public interest or for the defence of our legitimate rights before judicial or other authorities (“the right to be forgotten”).

   v. Right to restrict processing: the right to limit processing in certain circumstances.

   vi. Right to data portability: the right to receive your personal data , which you have provided to us with your consent, in order to use it elsewhere.

   vii. Right to object: the right to object to the processing in certain circumstances

   viii. Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time.

   ix. Right to lodge a complaint: the right to lodge a complaint to the supervisory authority, whose contact information is:

Agencia Española de Protección de Datos (AEPD) -España-

• Registro de entrada
• Calle Jorge Juan, 6 // C.P.: 28004 – Madrid
• Landline: +34 901 100 099 // +34 91 266 35 17
• https://www.aepd.es/

We will respond to your request within one month. In some cases, this period may be extended by two further months if necessary, taking into account the complexity and number of the requests. We will inform you of any such extension within one month of receipt of your request.

9. Automated Decision-Making and Profiling

We do not make decisions or carry out profiling based on automated processing of your personal data, except in the case of the use of “cookies” on our website, always with your informed consent.

10. Updates

This Policy was last updated on 01/08/2025. We reserve the right to amend and update this Policy, in whole or in part, at our sole discretion at any time. Any amendments to this Policy will be effective immediately upon posting of the revised Policy on our Website. In any event, by visiting and browsing our Site, you accept the Policy as in force.