Grupo Navatea, S.L. handles personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Act 3/2018 on data protection and the guarantee of digital rights (LOPDGDD). This policy explains what data is processed through this website and what is done with it. This is a courtesy translation; in case of discrepancy, the Spanish version prevails.
Data controller
- Controller
- Grupo Navatea, S.L. · NIF B85372928
- Address
- C/ Los Naranjos, 21, 28922 Alcorcón (Madrid), Spain
- Data protection contact
- privacy@gruponavatea.com
The company is not required to appoint a data protection officer and has not voluntarily appointed one.
What data is processed
Browsing the website
This is a static website. It asks for no personal data in order to browse it: there are no forms, no user accounts, and no analytics, advertising or tracking cookies.
Everything the page is made of, typefaces included, is served from this same domain: your browser contacts no outside server in order to display it. The one exception is the audience measurement described just below.
Audience measurement
To know how many visits the site gets and which pages are read, it uses Overtracking, a cookieless analytics service: it neither stores nor reads anything on your device. That is why this site needs no consent banner.
Four things are sent per visit: the page address, the address you came from if any, the size of your browser window, and the server's response code. On receiving them, the service also learns your IP address, as does any server a browser connects to. No identifier is created, so nobody can be recognised from one visit to the next, or followed to other websites.
The legal basis is the company's legitimate interest in understanding the use of its own website (art. 6.1.f GDPR). You may object to this processing by writing to privacy@gruponavatea.com.
The server that delivers these pages records, as any web server does, the technical details of each request — IP address, date and time, page requested, response code and browser. Those logs exist for security and troubleshooting, and the legal basis is the company’s legitimate interest in the security of its systems (art. 6.1.f GDPR). They are kept for fourteen days and then deleted automatically. They are never cross-matched with other information or used to build profiles.
Light or dark theme preference
If you choose the light or dark theme, that choice is stored in your own browser’s local storage. It is not a tracking cookie, it never reaches the server, it identifies nobody, and you can remove it by clearing this site’s data in your browser. Because it is an interface preference chosen by the user, it does not require prior consent.
Emails you send us
If you write to the addresses published on this site, we process your email address, your name and whatever else you choose to include in the message. The purpose is to handle and answer your message. The legal basis is the company’s legitimate interest in maintaining the relationship you initiated (art. 6.1.f GDPR) or, where the message precedes a contract, pre-contractual measures (art. 6.1.b GDPR).
Messages are kept for as long as the relationship lasts and, afterwards, for the statutory limitation periods applicable to commercial and tax obligations.
Automated decisions
No automated decision-making or profiling is carried out with the data processed through this website.
Recipients
Personal data is not disclosed to third parties except where legally required. The following act as processors for the site’s technical infrastructure and the group’s corporate email:
- Amazon Web Services EMEA SARL — web server hosting, in European Union data centres (Ireland).
- Google Ireland Limited — the group’s corporate email (Google Workspace).
Both providers are bound by data processing agreements. Should any operation involve an international data transfer, it relies on the EU-U.S. Data Privacy Framework and, additionally, on the standard contractual clauses approved by the European Commission.
Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to privacy@gruponavatea.com, stating which right you are exercising and proving your identity.
If you believe the processing does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency. Before that, you are welcome to come to us: it is faster and usually enough.
Changes to this policy
This policy will be reviewed whenever the way the site works or the applicable law changes. The date of the last review appears at the top of this page.