Company name: Nomvi Foods S.L. ("Nomvi", "we", "us")
Address: Carrer de Banyoles, 2, 17850 Besalú, Girona, Spain
Tax ID (C.I.F): B65980849
Email (privacy/contact):info@nomvi.com
2.1. We process the data you provide through the Contact and Newsletter forms and any other channel related to the use of the Website or the services offered (e.g., job applications). This data generally includes name, city, and email address; for applications, it may include CV and other information relevant to your profile.
2.2. We may also process other personal data that you provide or that are generated during our communications or when you contract our products or services.
2.3. We use cookies for analytical and advertising purposes. For more information, please see our Cookies Policy.
2.4. By providing your data, you guarantee its accuracy and truthfulness. You are responsible for any false or inaccurate statements and for any damages caused to Nomvi or third parties as a result.
| Purpose | Legal basis |
|---|---|
| Provide services (e.g., product sales) and respond to your information requests. | Art. 6.1(b) GDPR –performance of a contract or pre-contractual measures. |
| Legal obligations (tax, accounting, AML, warranties/returns, and to enable the exercise of your rights). | Art. 6.1(c) GDPR –compliance with legal obligations. |
| Marketing - sending electronic commercial communications and newsletters. You may opt out at any time by emailing info@nomvi.com or via the unsubscribe link in each communication. | If you are a customer: Art. 21 LSSI (Spain) for digital marketing about similar products/services. If you are not a customer: Art. 6.1(a) GDPR - consent.Art. 6.1(a) GDPR – consent. |
| Satisfaction surveys regarding our products and services. | Art. 6.1(f) GDPR –legitimate interest in improving our services. |
| Analytics - non-identifying analysis of browsing on our Website. | Art. 6.1(a) GDPR –consent for cookie installation/use (see Cookies Policy). |
| Behavioural advertising & social media - showing ads during browsing based on your preferences and interactions; relevant social networks may process your data per their own policies. | Art. 6.1(a) GDPR –consent (Cookies Policy). |
| Job candidates - managing your application and, if appropriate, considering you for other roles aligned with your profile. If you apply via a third-party platform, they will also process your data under their privacy policy. | Art. 6.1(b) GDPR – pre-contractual measures; Art. 6.1(f) GDPR –legitimate interest in retaining applications for a reasonable time if not selected. |
4.1. We retain your data for as long as our relationship remains in force. If we observe prolonged inactivity, we will delete your data to the extent the processing is no longer adequate, relevant, and necessary for the intended purposes, unless you request deletion earlier.
4.2. When processing is no longer adequate, relevant, and limited to what is necessary, we will duly block your data and retain them only to address potential legal liabilities, as required by law.
4.3. We will take reasonable steps to ensure that inaccurate data are rectified or deleted.
5.1. We do not take individual decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.
As a general rule, we do not disclose your data to third parties. However, in certain cases we may need to disclose your data to:
Service providers requiring access to personal data to provide their services (e.g., administrative/accounting, IT, cloud/hosting, CRM providers, partners, logistics/postal services, telecoms, payment gateways, financial entities, legal and accounting advisors).
Other recipients when required by law, administrative or judicial authorities, or for the public interest/public order (e.g., AML/CFT compliance, tax obligations, Social Security).
We may also share your information when reasonably necessary to enforce the Website’s terms and policies or to protect our operations or Users.
7.1. We do not routinely carry out international data transfers. However, as is common today, some IT providers operate servers outside the European Economic Area (EEA). Some of our current providers (e.g., Google, Mailchimp, Freshsales, Odoo, and others we may engage in the future) may be located in or provide services from outside the EEA. Where strictly necessary to operate the Website and/or to provide the services you request, we will make such international transfers within the framework of the requested services.
7.2. In all cases, we will enter into the necessary contractual instruments (e.g., EU Standard Contractual Clauses and, where applicable, supplementary measures) to ensure adequate safeguards equivalent to those of the EU for any international transfers.
8.1. What rights do you have?
Under the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), you have the following rights:
· Access: to know whether we process your personal data and, if so, to access them.
· Rectification / Erasure: to request rectification of inaccurate data or deletion where appropriate.
· Restriction: to request restriction of processing in certain circumstances; during restriction we will only store data for the exercise or defence of claims.
· Portability: to receive the personal data you have provided in a structured, commonly used, machine-readable format and to transmit them to another controller where legally possible.
· Object: to object, on grounds relating to your particular situation, to processing based on legitimate interests; we will stop processing unless we demonstrate compelling legitimate grounds or for the exercise/defence of claims. You may object to marketing at any time.
8.2. How can you exercise your rights?
You may exercise your rights at any time by contacting the Data Controller (Nomvi) as indicated in Section 1 (subject: “Privacy”), at info@nomvi.com. To verify your identity, we may request additional information or documentation (e.g., a copy of your ID or equivalent).
Exercising your rights is free of charge. However, a fee may be charged when requests are manifestly unfounded, excessive, or repetitive.
8.3. Can you withdraw your consent?
Yes. You can withdraw your consent at any time for one, several, or all purposes that rely on consent. Please note this may affect or even prevent the provision of certain services.
8.4. Do you have the right to complain?
Yes. You can lodge a complaint with the competent supervisory authority in your place of residence. In Spain, this is the Agencia Española de Protección de Datos (AEPD). You can also contact us at info@nomvi.com to help resolve any issue amicably before filing a complaint.
8.5. Response time
We will respond as soon as possible and, in any event, within one month. If you do not receive a reply within that time, please accept our apologies and contact us again so we can address any technical issue that may have prevented a timely response.
9.1. Nomvi reserves the right to modify this Privacy Policy in accordance with the provisions of our Legal Notice.Legal Notice.