Privacy Policy
We process your personal data in accordance with the GDPR and Spanish data protection law. Here is how.
Data controller
Naia Energia S.L. (Tax ID B25912759), with registered office at Plaza Palloza, 3-2, 15006 A Coruña (Spain) and email proyectos@naiaenergia.es, is the controller of the personal data you provide through this website.
What data we process and why
We only process the data you voluntarily provide through the contact form: name, email address, company (optional), subject and message.
The purpose is to respond to your enquiry or request and to be able to contact you. We do not use your data to send unsolicited marketing communications.
Legal basis
The legal basis for the processing is your consent, given when you submit the form, as well as the legitimate interest of Naia Energia S.L. in responding to the requests we receive.
Retention period
We keep your data for as long as necessary to handle your request and, afterwards, for a maximum of 12 months, unless a legal obligation or a business relationship justifies a longer period. After that, the data is deleted.
Recipients and processors
To provide the service we rely on providers acting as data processors: Supabase (storage of the messages received), Resend (delivery of the email notification) and Vercel (website hosting).
Some of these providers may process data outside the European Economic Area. In that case, transfers are carried out with the appropriate safeguards provided for in the GDPR, such as the Standard Contractual Clauses approved by the European Commission.
We do not share your data with third parties for purposes other than those described, except where required by law.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time by writing to proyectos@naiaenergia.es and stating the right you wish to exercise.
If you believe the processing of your data does not comply with the law, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Automated decisions and profiling
We do not carry out profiling or make automated decisions using your personal data.
Security
We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration.