Privacy Policy
NordOps Consulting SL respects your privacy. This page describes what personal data we collect, why we collect it, and how we handle it.
Data controller
NordOps Consulting SL
Registered office: Plaza de la Constitución 16, 4A, 29640 Fuengirola, Málaga, Spain
Email: contact@nordopsconsulting.com
NordOps Consulting SL is in the process of completing its mercantile registry inscription. Once registered, the registry number and CIF will be published in the Aviso Legal section of this site. The data controller identity, registered office, and contact details remain as stated above.
What we collect
- Information you submit through our contact form — name, email, company name, company size band, and the message you write.
- Any further email correspondence you send us.
Why we collect it
To respond to your enquiry, schedule the discovery call you request, and — if a business relationship follows — deliver the services you contract us for. We do not use this data for marketing or share it with third parties for advertising.
Analytics
We measure aggregate site usage — which pages are read, where readers arrive from, how long visits last — so we can improve the content. We do not identify individual visitors, build profiles, or use analytics for advertising.
Tool and recipients. We use Umami, an open-source analytics tool that NordOps Consulting hosts on its own server in Falkenstein, Germany. There is no third-party analytics provider and no data processor: the data is collected, stored and read entirely on infrastructure we control, inside the EU. Nothing is transferred outside the EEA.
Data processed. Page address, referring page, browser, operating system, device type, screen size, browser language, and country. Your IP address is used only momentarily to derive the country and to compute an anonymous daily visitor hash; it is never written to storage, and the hash cannot be reversed or linked across days.
No cookies. Umami sets no cookies and uses no persistent identifier, so there is nothing to consent to and nothing to withdraw. See the Cookie Policy below.
Legal basis: legitimate interests (GDPR Article 6(1)(f)). Understanding how our own website is used is a legitimate interest, and because the measurement is first-party, cookieless, and involves no profiling or cross-site tracking, the impact on your privacy is minimal. You may object at any time — see “Your rights” below.
Retention. Aggregated statistics are retained indefinitely. No personal data is stored, so there is nothing tied to you to delete.
Legal basis for processing
Under GDPR Article 6, every processing activity must have a legal basis. The bases we rely on are as follows:
- Contact form and discovery call requests — Contract performance (Article 6(1)(b)). The data is necessary to respond to the enquiry you initiated.
- Email correspondence with prospects and clients — Contract performance (Article 6(1)(b)) prior to engagement; legitimate interests (Article 6(1)(f)) for follow-up communications post-engagement.
- Analytics — Legitimate interests (Article 6(1)(f)). First-party, cookieless measurement on our own infrastructure, with no profiling.
- Storage of tax-related communications and invoices — Legal obligation (Article 6(1)(c)). Spanish tax law requires retention of business records for at least four years.
- Security and abuse prevention, e.g. blocking spam contact-form submissions — Legitimate interests (Article 6(1)(f)).
How long we keep it
Contact data is retained for as long as necessary to respond to your enquiry and for any subsequent commercial relationship. Where no commercial relationship is established, contact data is deleted within twelve months of last contact. Analytics retention is described in the Analytics section above.
Your rights under GDPR
Under the General Data Protection Regulation (GDPR) you have the right to access, rectify, erase, port, restrict, and object to processing of your personal data. Where we rely on legitimate interests — as we do for analytics — you have the right to object under Article 21, and we will stop that processing for you. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out beforehand.
To exercise any of these rights, email contact@nordopsconsulting.com.
You also have the right to lodge a complaint with the Spanish data protection authority (Agencia Española de Protección de Datos). The authority’s main site is aepd.es; complaints can be filed directly via AEPD’s online complaint form.