Privacy policy
Last updated:
Summary
| Question | Answer |
|---|---|
| Controller | Neji · Tax ID (NIF) 47962153T |
| Data we process | Name, job title, email address and phone number |
| Purpose | To handle your request and arrange a first conversation |
| Legal basis | Your consent and pre-contractual measures taken at your request |
| Recipients | We do not share your data. Technical providers process it on our behalf |
| Retention | As long as needed to handle your request and, at most, 12 months if no business relationship follows |
| Rights | Access, rectification, erasure, objection, restriction, portability and withdrawal of consent |
Each point is explained in detail below. This English version is provided for information. In the event of any discrepancy, the Spanish version prevails.
Data controller
| Detail | Value |
|---|---|
| Controller | Neji (trade name) |
| Tax ID (NIF) | 47962153T |
| Registered tax address | Plaza Alfonso Comín, 11, 08023 Barcelona (Spain) |
| emartin@nejiconsulting.com |
This policy applies to the website nejiconsulting.com, including its www subdomain, and complies with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).
What data we process
We only process the data you provide in the contact form:
- Name.
- Job title.
- Email address.
- Phone number.
All four fields are mandatory, because without them we cannot handle your request. Please do not include data about third parties or special categories of data.
We do not request or process any other data through the website. We do not use the form to send newsletters or regular marketing communications.
What we use it for
We use your data to:
- Reply to your request. Our team replies within 24 to 48 working hours.
- Arrange a first conversation and, if you ask for one, prepare a proposal.
We do not send an automatic acknowledgement email. We receive your request and reply to you personally.
We do not make automated decisions or create profiles using your data.
Legal basis
We process your data on the following legal bases:
- Your consent (article 6.1.a GDPR), which you give by ticking the privacy box and submitting the form.
- Pre-contractual measures taken at your request (article 6.1.b GDPR), when your request concerns our services.
You may withdraw your consent at any time. Withdrawal does not affect processing carried out before it.
How long we keep it
We keep your data for as long as needed to handle your request. If no business relationship follows, we delete it within 12 months at most.
After that period, the data may be blocked for the periods required by law, available only to judges, courts and competent authorities. It is then deleted.
If a business relationship begins, the data is kept for as long as that relationship lasts and for the applicable legal periods.
Recipients
We do not share your data with third parties unless required by law.
To provide the service, some technical providers process the data on our behalf, under a data processing agreement:
| Provider | Service | Location |
|---|---|---|
| Microsoft Ireland Operations Ltd. | Website hosting on Microsoft Azure (Spain Central region) and delivery of the internal form notification through Azure Communication Services | European Union |
| Namecheap, Inc. | Email mailbox where we receive requests | United States |
International transfers
The provider of our email mailbox, Namecheap, Inc., is based in the United States. As a result, when we receive your request by email, your data may be processed outside the European Economic Area.
This transfer takes place with the appropriate safeguards provided for in the GDPR, such as the Standard Contractual Clauses approved by the European Commission. You can ask us for more information about these safeguards at emartin@nejiconsulting.com.
Protection against spam
To prevent automated submissions, the form applies technical checks that do not require any third-party captcha service:
- A hidden field that people do not see and that only automated programs fill in.
- A check on the time between opening the form and submitting it.
- A small calculation performed by your browser before submission (proof of work).
In addition, the server temporarily limits the number of submissions from the same IP address. This count is kept in memory only for a short time and is not stored.
Your rights
You may exercise the following rights at any time:
- Access: find out whether we process your data and obtain a copy.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask us to delete your data.
- Objection: object to a specific processing activity.
- Restriction: ask us to suspend processing in certain cases.
- Portability: receive your data in a structured, commonly used format.
- Withdrawal of consent: at any time, without affecting earlier processing.
To exercise them, write to emartin@nejiconsulting.com stating the right you wish to exercise. If needed to verify your identity, we will ask you for additional information. We will reply within one month, which may be extended in the cases provided for in the GDPR.
If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Security
We apply appropriate technical and organisational measures to protect your data against loss, unauthorised access or alteration. Among other things, the whole website runs over an encrypted connection (HTTPS) and access to the data is limited to the people who need it to handle your request.
Minors
The website is aimed at businesses and professionals. It is not intended for children under 14, and we do not knowingly process their data.
Website usage statistics
If you accept analytics cookies, we use Google Analytics 4 to understand how the website is used: pages visited, how you arrived, device type and approximate country or city. We also measure how many requests are sent through the form, without including your contact details. We do not use this information to identify you or for advertising.
- Legal basis: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time from “Cookie settings” in the footer of every page.
- Provider: Google Ireland Limited, acting as data processor. Google may process data in the United States with the safeguards of the EU-US Data Privacy Framework and the Standard Contractual Clauses.
- Retention: 14 months.
If you do not accept analytics cookies, Google Analytics is not loaded.
Cookies
The use of cookies and similar technologies is explained in the cookie policy.
Changes to this policy
We may update this policy to reflect legal changes or changes to the website. The version in force is always the one published on this page, with its update date.
For any privacy questions, please write to emartin@nejiconsulting.com or use the contact page.