NIMBE LOCATION AGENCY, S.L. informs users of the website about its policy regarding the processing and protection of personal data of users and clients.

It guarantees full compliance at all times with the obligations set out in applicable data protection and information society services regulations: Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), and Law 34/2002 on Information Society Services and Electronic Commerce (LSSICE).

DATA CONTROLLER

NIMBE LOCATION AGENCY, S.L.

Tax Identification Number (NIF): B23989742

Registered address: C/ Pau Claris, 162-164, Floor 3, Door 3 – 08037 – Barcelona,Spain

Registered with the Barcelona Mercantile Registry, Sheet B-649002, Entry 1, I.R.U.S. 1000465145466

Phone: +34 639 651 549

Email: contact@nimbeagency.com

PURPOSES OF DATA PROCESSING

The personal data provided by the User will be processed for the following purposes:

• To handle and manage inquiries or requests submitted through the contact forms available on the website, based on the Controller’s legitimate interest and, where applicable, the User’s consent.
• To send commercial communications, newsletters, and promotions, where the User has given explicit consent through the corresponding forms.
• To manage technical issues and ensure the proper functioning and maintenance of the website, based on the Controller’s legitimate interest.

DATA RETENTION PERIOD

Personal data will be retained for the following periods depending on the purpose of processing:

• Handling inquiries and requests: for the time necessary to process and resolve the User’s request.
• Commercial communications, newsletters, and promotions: until the User unsubscribes or withdraws consent.
• Technical management and website maintenance: for the time necessary to comply with applicable legal obligations and statutory limitation periods.

DATA RECIPIENTS

To fulfill the purposes outlined in this Privacy Policy, it may be necessary to grant access to your personal data to third parties that provide support services (Data Processors).

Such processors will process data strictly in accordance with the Controller’s instructions and under appropriate security measures.

COOKIES

Regarding the use of cookies and other tracking technologies, please refer to the Cookie Policy of this Website. The legal basis for processing your data in this context is your consent when accepting cookies in your browser.

USER RIGHTS

The User has the right to:

• Request access to their personal data and receive this information in writing through the requested means.
• Request the rectification of inaccurate personal data or, where appropriate, request its erasure when the data is no longer necessary.
• Request the restriction of processing of their data.
• Object to the processing of their personal data where applicable.
• Request data portability when processing is based on consent and carried out by automated means (data will be provided in a structured, commonly used, and machine-readable format).
• Withdraw consent at any time.
• Lodge a complaint with the Spanish Data Protection Authority (AEPD).

The User may exercise these rights by contacting the Controller via postal or email address, providing proof of identity (e.g., a copy of ID or equivalent document) and specifying the right they wish to exercise.

DATA SOURCE

Personal data will be provided voluntarily by the User. Failure to provide certain data requested in registration processes or electronic forms may result in the inability to access certain services that require such data.

The Controller will inform Users when providing personal data is mandatory for service provision.

The Controller guarantees the confidentiality and security of personal data and has adopted the necessary measures to prevent alteration, loss, unauthorized processing, or access.

INFORMATION PROVIDED BY THE USER

Users under 18 years of age may not provide personal data without the prior consent of their parents or legal guardians.

By entering their data in contact forms or download forms, Users expressly and freely consent to the processing of their data as necessary to fulfill their request. Providing additional data in optional fields is voluntary.

The User guarantees that the personal data provided is accurate and undertakes to notify any changes.

All data requested through the website is necessary to provide an optimal service. If all required data is not provided, the Controller does not guarantee that the information or services provided will fully meet the User’s needs.

SECURITY MEASURES

In accordance with applicable data protection regulations, the Controller complies with the provisions of the GDPR and LOPDGDD, ensuring that personal data is processed lawfully, fairly, and transparently, and is adequate, relevant, and limited to what is necessary.

The Controller has implemented appropriate technical and organizational measures to ensure data security and to protect the rights and freedoms of Users.

DATA BREACHES

The Controller will notify any data breach affecting the website’s database or third-party services to all affected individuals and competent authorities within 72 hours of detection.

APPLICABLE LAW AND JURISDICTION

The Controller reserves the right to take any civil or criminal actions deemed necessary for improper use of the website or its content.

The relationship between the User and the Controller shall be governed by applicable Spanish law. In the event of any dispute regarding interpretation or application, the parties shall submit to the jurisdiction of the competent courts in accordance with applicable law.