Back
GDPR / LOPDGDD

Privacy Policy

Your privacy and data protection are important to us. This policy explains how we collect, use, and protect your personal information.

Last Update: 1 October 2025

In compliance with Regulation (EU) 2016/679 (GDPR), and Organic Law 3/2018 (LOPDGDD), users are informed that the website https://nubyron.com/ (hereinafter, the “Website”) is owned by Quevedo Tech Group, S.L. (hereinafter, “QTG”).

1. Data Controller

Company NameQuevedo Tech Group, S.L.
VAT ID (CIF)B-22969661
Registered OfficeCalle Guimar, 12 – Floor 2, 35110 Santa Lucía de Tirajana (Las Palmas), Spain
Contact Emailrgpd@nubyron.com
Phone+34 603 479 347

2. Scope of the Policy

This Privacy Policy governs the processing of personal data provided by users or that may be collected through the Website and associated channels, including contact forms, information requests, newsletter subscriptions, downloads, events, or any other interaction with QTG.

Access to and use of the Website implies knowledge and acceptance of this Policy, as well as the Legal Notice and Cookie Policy.

Any additional information regarding data collection beyond this website is provided clearly in each case and regulated by the corresponding forms or contracts.

3. Principles Applicable

QTG will process personal data in accordance with Art. 5 GDPR and applicable national regulations:

Lawfulness, fairness, and transparency: Each processing relies on a valid legal basis and you are informed about purposes and rights.

Purpose limitation: Data are collected for specified, explicit, and legitimate purposes and not further processed incompatibly. If the purpose changes, new consent will be sought where appropriate.

Data minimization: Data will be adequate, relevant, and limited to what is strictly necessary.

Accuracy: Reasonable measures are taken to ensure data are accurate and up to date.

Storage limitation: Data are kept only for strictly necessary periods; afterwards, they are blocked, anonymized, or deleted.

Integrity and confidentiality: QTG applies technical measures to ensure security and prevent unauthorized access or loss.

4. Purposes and Legal Basis

4.1. Data we collect:

• Identification and contact: name, email, phone.

• Professional: company, position, sector.

• Interactions and project data: location, budget, timeline, service of interest, message content.

• Website use: Cookies, IP, and technical logs (see Cookie Policy).

• Applications (HR): CV, cover letter, links.

Personal data are provided directly by the data subject; technical data are generated by the server.

QTG does not process special categories of data. The user guarantees that provided data are truthful and accurate.

4.2. Purposes of processing:

I. Enquiries and requests: To respond and coordinate proposals. Basis: Pre-contractual measures (Art. 6.1.b GDPR) and Consent (Art. 6.1.a GDPR).

II. Newsletters: Sending updates. Basis: Consent (Art. 6.1.a). If you are a client, Legitimate Interest (Art. 6.1.f).

III. Resource downloads: Delivery and follow-up. Basis: Consent.

IV. Recruitment: Assessing profiles. Basis: Pre-contractual measures. To keep CVs: Consent.

V. CRM Segmentation: Organizing declared info. Basis: Legitimate Interest (Art. 6.1.f).

VI. Security: Monitoring IP/logs. Basis: Legitimate Interest.

VII. Legal Compliance: Meeting legal obligations. Basis: Legal Obligation (Art. 6.1.c).

5. Data Disclosure to Third Parties

QTG does not sell personal data. Data may be disclosed only when necessary to:

a. Service providers acting on behalf of QTG (data processors): hosting, maintenance, security, form management, etc. QTG ensures standard contractual guarantees.

b. Public administrations and authorities where there is a legal obligation.

c. Third parties for cookies, only if accepted (see Cookie Policy).

Apart from these, data will not be disclosed unless for a specific service previously informed.

6. International Transfers

Generally, QTG does not carry out international transfers. If tools outside the EEA are used (e.g., cloud providers), QTG will adopt GDPR safeguards, such as Standard Contractual Clauses.

7. Data Retention

We retain data only as long as necessary. Once fulfilled, data are blocked for legal liabilities and then deleted.

Indicative periods:

• Enquiries: Max 12 months from last interaction.

• Newsletters: Until user objects.

• Applications: During the process; if not selected, 12 months.

• Security: IP and logs up to 12 months.

• Legal compliance: According to limitation periods (e.g., 4 years tax, 6 years corporate records).

8. User Rights

As a data subject, you may exercise rights of access, rectification, erasure, objection, restriction, and portability at any time.

You can exercise these rights by sending a request with a copy of your ID to:

• Email: rgpd@nubyron.com

• Address: Calle Guimar, 12 – Floor 2, 35110 Santa Lucía de Tirajana (Las Palmas), Spain.

You may also file a complaint with the AEPD (www.aepd.es) if you believe your rights have been violated.

9. Security Measures

QTG has implemented technical and organizational measures to ensure security, confidentiality, integrity, and availability, preventing unauthorized access or loss.

Controls include secure communications, access management, encryption, and backups.

10. Minors

This website is not directed to minors. If QTG becomes aware of data collected from a minor without authorization, it will be deleted immediately.

11. Changes to Policy

QTG may modify this Policy to adapt to legal or service changes. Relevant changes will be communicated on the Website indicating the effective date.