Privacy policy

1. Website owner

Nintec Digital Solutions SL

Av. Ernest Lluch, 32 · Torre TCM2
Floor 1, Unit 1.17
08302 Mataró, Barcelona

info@nintecsolutions.com · +34 684 76 68 44

2. What data we collect

This policy covers only the processing of data arising from browsing and using this website (nintecsolutions.com), such as details submitted through contact or audit booking forms. If you subscribe to Nintec 360 or another Nintec Solutions product, the processing of your own customers’ data through the platform is governed by the specific Data Processing Agreement (Annex 1) included in the Nintec 360 Terms of Service, not by this policy.

Through this website’s contact and audit booking forms, we collect:

• First and last name
• Email address
• Phone number (optional)
• The content of the message you send us (“How can we help?”)

We do not collect special categories of data, such as health or political beliefs, through the website.

3. Why we process your data

• To respond to your enquiries and contact requests.
• To manage the booking and delivery of the free audit.
• To send you marketing information about our products (Nintec 360, Nintec Finance, Nintec Compliance) only with your explicit consent.
• To manage our business relationship if you purchase any of our services.

4. Legal basis

• Steps prior to entering into a contract or performance of a contract, when you request information or purchase a service.
• Consent of the data subject, when you tick the box accepting this policy when submitting a form, or agree to receive marketing communications.

5. Where your data is stored

Data collected through the website’s forms is stored in our internal CRM, which runs on Supabase database infrastructure. [PENDING: confirm and state the region or server hosting the project’s Supabase database (EU, UK, US, etc.), as this determines whether an additional international data transfer clause is needed.]

6. Who we share your data with

We do not disclose or sell your data to third parties for commercial purposes unrelated to Nintec Solutions.

We may share data with technology providers that supply infrastructure services, such as web hosting, databases and communication tools, under a Data Processing Agreement (DPA) that ensures GDPR compliance. [PENDING: once formally confirmed, list the providers involved in processing with a signed DPA, for example Vercel (hosting), Supabase (database), and any other technical service used to operate the website or the Nintec 360 and Finance products.]

7. How long we keep your data

We will keep your data for as long as the business relationship continues or until you request its deletion, and subsequently for any applicable statutory limitation periods.

8. Your rights

You have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Erase your data when, among other reasons, it is no longer needed.
• Restrict or object to processing in certain circumstances.
• Portability of your data.

You can exercise these rights by emailing info@nintecsolutions.com, stating the right you wish to exercise and attaching a copy of a document that verifies your identity.

If you believe we have not processed your data correctly, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

9. Use of the WhatsApp Business API (website contact only)

If you contact us directly through WhatsApp as a business contact channel for Nintec Solutions, rather than as an end user of a customer using Nintec 360, your data is processed under the terms of Meta’s official WhatsApp Business API, with the corresponding data processing agreement in place.