Skip to main content
Nubia

Privacy policy

Last updated: 26 September 2026

1. Data controller

  • Controller: Nubiatech S.L.
  • Address: Carretera del Forn, 34, AD100 Canillo, Andorra
  • Email: hola@nubiatech.net

2. What data we collect and why

This site collects personal data through three channels:

  • Contact form: name, email, company (optional) and your message, to answer your enquiry and, if you ask for one, prepare a service proposal.
  • Automation kit download: email and, optionally, name and company, to send you the kit by email.
  • Diagnostic test: email, name and company (optional) and your answers about your business (sector, team size, workload, estimated costs and the task you would most like to get rid of), to generate your personalised report, email it to you and, if you are interested, prepare a proposal.

We store your contact details and the content of your request in our CRM (Dolibarr, installed on our own server) so we can handle it and follow it up.

  • Legal basis: your consent (art. 6.1.a GDPR), which you give by ticking the acceptance box, and the application of pre-contractual measures at your request (art. 6.1.b GDPR).
  • Retention period: as long as necessary to handle your request and, at most, two years from the last contact, unless a longer legal retention obligation applies. After that period, we delete it.

We do not use your data to send you unsolicited advertising, nor do we share it with third parties for commercial purposes.

3. Your IP address

Like any website, our server receives the IP address you connect from, but it does not store it in access logs. We only use it in memory and in pseudonymised form (as an encrypted fingerprint, never in clear) to limit the number of form submissions and protect the site against abuse, and we discard it within a few minutes. For the same purpose, we keep an encrypted fingerprint of the email address used to request the diagnostic report for 24 hours. Legal basis: our legitimate interest in ensuring the security of the network and the site (art. 6.1.f and recital 49 GDPR). If you accept analytics cookies, Google Analytics also receives your IP to measure the visit, without storing it.

4. Profiling

From your answers to the diagnostic test we automatically calculate an automation score, a cost estimate and a priority to organise our sales follow-up. We do not use this to make automated decisions that have legal effects on you or similarly significantly affect you (art. 22 GDPR), and you can object to this processing at any time.

5. Recipients and data processors

To provide the service we use suppliers who act as data processors:

  • Hetzner Online GmbH (Germany) — hosting of the website, the CRM and our automation tool (n8n), on servers located in the European Union.
  • Resend Inc. — sending the site's emails: the kit, the diagnostic report and the internal notifications of each request.
  • Google Ireland Limited — Google Analytics, only if you accept analytics cookies (see the cookie policy), and Google Gemini, the artificial intelligence model that writes the diagnostic report from your answers.
  • Email — ImprovMX (forwarding of our domain's email) and Google (mailbox), which process the messages you send us or that the site generates.

Some of these providers may process data outside the European Economic Area, in particular in the United States. In that case they do so under the EU–US Data Privacy Framework or the standard contractual clauses approved by the European Commission. We do not disclose your data to anyone else, unless legally required.

6. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time by writing to hola@nubiatech.net, stating the right you are exercising. You also have the right to withdraw your consent and to lodge a complaint with the competent supervisory authority: the Spanish Data Protection Agency (aepd.es) if you reside in Spain, or the Andorran Data Protection Agency (apda.ad) in Andorra.

7. Security

We apply appropriate technical and organisational measures: encryption of communications (HTTPS), validation of the data received, minimisation of the data requested and restricted access to the information.

8. Cookies

This site uses analytics cookies (Google Analytics) only if you accept the consent banner, and you can change your decision at any time from "Cookie settings" at the bottom of every page. See the details in the cookie policy.