Privacy Policy
Last updated: April 2026
Novado is committed to protecting your personal data. This policy explains what data we collect, why we collect it, how we use it, and your rights under the General Data Protection Regulation (GDPR) and the Spanish LOPDGDD.
1. Data controller
Novado operates this website as an independent property information service. For data protection enquiries, contact us at privacidad@novado.es.
2. What data we collect
2.1 Data you provide voluntarily
When you use our contact form we collect: name, email address, phone number (optional), and the content of your message. We do not request sensitive data or payment information.
2.2 Automatically collected data
If you accept analytical cookies, we enable Google Analytics 4 with IP anonymisation. Server access logs include IP addresses and are automatically deleted after 30 days.
3. Legal basis for processing
We process your data based on: contract performance or legitimate interest to respond to enquiries (Art. 6.1.b/6.1.f GDPR); consent for analytical cookies (Art. 6.1.a GDPR); and legitimate interest for server security logs.
4. Data retention
Contact enquiries are retained for a maximum of 2 years. GA4 data follows Google Analytics retention settings (14 months by default). Server logs are automatically deleted after 30 days.
5. Who we share data with
We do not sell or transfer your data to third parties for marketing. We may share data with: our web hosting provider (under a processor contract per Art. 28 GDPR), Google LLC for GA4 (only with your consent), and where required by law.
6. Your rights
Under the GDPR you have the following rights:
- Access - request a copy of your personal data.
- Rectification - ask us to correct inaccurate data.
- Erasure - request deletion of your data ("right to be forgotten").
- Portability - receive your data in a structured, machine-readable format.
- Restriction - ask us to temporarily suspend processing of your data.
- Objection - object to processing based on legitimate interest.
To exercise your rights, send your request to: privacidad@novado.es
7. International transfers
Google Analytics 4 involves transferring data to Google LLC servers in the United States, carried out under Standard Contractual Clauses approved by the European Commission. We only enable GA4 with your consent.
8. Security
We apply appropriate technical and organisational measures: HTTPS encryption, restricted system access, and regular security reviews.
9. Changes to this policy
We may update this policy when necessary. The last-updated date at the top of this page reflects the most recent revision.
10. Contact
For any privacy enquiry or to exercise your rights: privacidad@novado.es