PRIVACY

1. Data controller

Controller

Naralimon S.C.

Tax ID

ES J01837269

Address

Calle Tamarindos 7

Mijas Costa

29651 Málaga

Spain

Email

naralimongroup@naralimon.com

2. Applicable law

Personal data is processed in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), and other applicable Spanish and European Union data-protection rules.

3. Personal data processed

Naralimon may process data you voluntarily provide through the contact form, newsletter subscription, email correspondence and other direct communications. It may also process website-use and analytics data where you have given the relevant consent, together with information arising from cookies, local storage and technical mechanisms necessary for the operation and security of the site.

The contact form collects name, email, message, language and the date/time of submission. Naralimon does not claim to collect categories of data that are not part of the functions actually available on the site.

4. Purposes of processing

Personal data may be processed to:

• respond to enquiries and communications;
• manage communications relating to Naralimon;
• manage newsletter subscriptions and send communications where consent has been given;
• measure and analyse website use where the Analytics category has been accepted;
• maintain the security, integrity and technical operation of the site;
• comply with applicable legal obligations.

5. Legal bases

The legal basis depends on the specific purpose. Consent is used for the newsletter, Google Analytics and other optional processing that requires it. Where an enquiry concerns a possible commercial relationship, processing may be necessary to take pre-contractual steps requested by the data subject. Compliance with legal obligations provides the basis where applicable. Legitimate interests may apply on a limited basis, for example to protect the security and technical integrity of the site or to deal with general communications, provided those interests are not overridden by the rights and freedoms of the individual. Legitimate interests are not used as a blanket justification for all processing.

6. Contact form and email

Messages submitted through the contact form are sent by a server-side mail process to naralimongroup@naralimon.com. The user's email address is used as the Reply-To address. The website does not create a separate enquiries database. Email delivery uses the infrastructure configured for Naralimon, currently Google Workspace.

7. Newsletter and communications

If the user subscribes to Naralimon communications, their data will be used to manage that subscription and send the requested communications. The user may unsubscribe at any time using the unsubscribe mechanism included in communications or by writing to naralimongroup@naralimon.com.

8. Google Analytics

Naralimon uses Google Analytics only where the user has consented to the Analytics category. The Google Analytics script does not load before that consent is given. Analytics data is used to understand how the site is used, obtain aggregate statistics and improve its operation and content. Analytics is not treated as essential.

9. Retention

Personal data will be retained only for as long as necessary for the relevant purpose and, where applicable, for periods required by law. Enquiries will be retained for as long as needed to deal with them and meet any related obligations. Newsletter data will be retained while the subscription remains active or until consent is withdrawn or the user unsubscribes, subject to any legal obligations requiring additional retention. Retention of Analytics data depends on the applicable service configuration.

10. Recipients and processors

Providers necessary to operate the site and its services may process data for the functions described above, including Vercel for hosting and web platform services, Google Workspace for email, and Google Analytics for analytics where consent has been given. Such providers process data only to the extent necessary to provide their services and subject to the applicable terms and safeguards.

11. International transfers

Some providers may process data outside the European Economic Area. Where an international transfer is subject to the GDPR, the mechanisms and safeguards required by applicable law must be used, such as adequacy decisions or other valid safeguards. This policy does not attribute specific processing locations where they have not been verified.

12. Your rights

Where applicable, you may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability. You may also withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. Requests may be sent to naralimongroup@naralimon.com.

13. Supervisory authority

If you consider that the processing of your personal data infringes applicable data-protection law, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD).

14. Children

The site is not specifically directed at children for the purpose of collecting their personal data. Naralimon does not knowingly seek unnecessary personal data from children. If it becomes apparent that a child's data has been provided without the necessary legal basis or authorisation, appropriate steps will be taken in accordance with applicable law.

15. Changes to this policy

This Privacy Policy may be updated to reflect legal, technical or operational changes. The last-updated date shown above identifies the current version.