This privacy policy explains how your personal data is collected, used and protected when you visit narveo.eu, contact us or place an order. We process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, GDPR) and Spanish data protection law (Ley Orgánica 3/2018).
Who is the data controller
Xeno Solis, S.L. (trading as Narveo)
Calle Merlera, 60, 103
07817 Sant Josep de sa Talaia, Illes Balears, Spain
Tax ID (NIF/CIF): B25866534
Registered at the Mercantile Registry of the Balearic Islands (Registro Mercantil de Illes Balears)
Email: hello@narveo.eu
What data we collect
- Enquiry data: when you email us or use a contact form, we collect your name, email address and the content of your message.
- Order data: when you buy a Narveo unit, we collect your name, billing and delivery address, email address, telephone number and order details.
- Payment data: payments are processed by our payment provider. We do not store full card numbers on our servers.
- Technical and usage data: IP address, browser type and pages requested, recorded in server logs by our hosting provider. We do not collect this through analytics cookies. See our cookie policy.
Why we process your data and our legal basis
- To fulfil your order (process payment, deliver the product, provide support): performance of a contract, Article 6(1)(b) GDPR.
- To respond to your enquiries: our legitimate interest in answering you, Article 6(1)(f) GDPR.
- To meet legal obligations such as tax and accounting record-keeping: Article 6(1)(c) GDPR.
- For security and server logs: our legitimate interest in keeping the site available and secure, Article 6(1)(f) GDPR. We set no analytics or marketing cookies. If that changes we will ask for your consent first, Article 6(1)(a) GDPR, and you may withdraw it at any time.
Who we share data with
We share data only with service providers who help us run the business, acting as our processors under written agreements. These include our website host, payment provider, shipping and logistics partners, email provider and analytics provider. We do not sell your personal data. Some providers may process data outside the European Economic Area; where they do, transfers are protected by appropriate safeguards such as the European Commission's standard contractual clauses.
How long we keep your data
Order and invoicing records are kept for the period required by Spanish commercial and tax law (generally up to six years). Enquiry data is kept only as long as needed to handle your request and a reasonable period afterwards. Cookie data is retained for the lifespan of each cookie as set out in the cookie policy.
Your rights
You have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. To exercise any of these rights, email hello@narveo.eu. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
Security
We apply appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. Our site is served over an encrypted (HTTPS) connection.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last revised.