Privacy policy and purchase conditions

Basic information on data protection in the forms on our website

Data of the data controller:




Responsible for the treatment

NOVASAN, SA is responsible for the processing of personal data.

CIF: A78993433

Address: Camino de las Hormigueras, 175 Nave 12, 28031, Madrid


Manage the request of the user and/or interested party.

Compliance with contractual and pre-contractual obligations.


The processing is necessary for the application at the request of the interested party of contractual and pre-contractual measures (art 6.1.b RGPD)


No data will be transferred to other third parties, except under legal obligation.


Access, rectify and delete data as well as other rights that you can consult privacy policy sent communication to the email address [email protected]

Additional Information

You can consult all additional information at


We collect your personal data on different occasions:

Every time you contact us directly, for example through the web, telephone or participate in sweepstakes or social networks to request information.

When you reserve or contract a product or service directly with us.

When you participate in any of the direct marketing campaigns, for example by completing a registration form or participating in any activity or raffle through any of the platforms used and that requires you to complete a form in paper or online format with your personal data or with participation in events organized by the entity.

Through the different means used by the company for the reservation or acquisition of any of our products and services.

When, as a consequence of the execution of a service with a third entity, they are provided to us by the same, always with the express consent of the interested party prior acceptance.

Due to the characteristics of Novasan, SA, the data we obtain from our partners and users are of all types and conditions, taking into account the different profiles of users and partners.

We also remind you of the importance of keeping your personal data updated by informing us of any changes to your contact details or preferences.


Through the different services and contact channels described in this Privacy Policy, the following types of data may be collected about you:

Contact identification data

Name, address, telephone numbers, email.

Identification data relating to minors (over 16 years of age) or minors under 16 years of age provided by their legal guardians.

Name, address, telephone numbers, email.


Information that you provide us about your preferences and courses you take.

Use of the website and communications

How you use our website and platform; if you open or forward our messages; as well as the information collected through cookies and other tracking technologies (See Cookies policy).

Use of services

How you use the products offered by Novasan, SA


We expressly obtain your consent for the following purposes:

  • Contact us to inform about the different products offered by the company and in which the user may be interested, through the different possible means, through email, social networks, communications or newsletter.


  • For the execution of the contract when the user states that they wish to contract or obtain financing, the transfer of data to third companies is mandatory in order to comply with this obligation. In all cases, the user will be informed about who will be the recipient of their data.


  • For the use of your images with the purpose of illustrating our website or profiles on social networks.



We use your data for different purposes, which you will find detailed in this section.

Provision of the service offered by Novasan, SA

Customer Support

Promotions and advertising

Respond to queries and present offers and news

Novasan, SA collects your contact information, information about your preferences and data on the use of the websites and communications; to determine those offers and news that may be of most interest to you and to contact you regarding these offers, based on your marketing preferences.

Likewise, your personal data can be used to create individualized user profiles through statistical procedures. As a result of the profiling process, you may receive personalized communications of interest with content related to the entity's activity.

Treatments related to promotions and advertising will only be carried out with the express consent of the user.

The processing of this data is based on the existence of a contractual relationship with you, which must be adequately managed by Novasan, SA

Novasan, SA receives your contact information and data on the use of the services, which they use in accordance with what is established above. In addition, all the circumstances in which these data can be transmitted to third parties with the exclusive purpose of being able to provide the service are also included. concerned.

Quality control, research and development of new products and services - to improve our products and services

Novasan, SA may use any of the data that it obtains during the provision of services, for the purpose of developing future products and services and controlling the quality of existing ones. Before such data is used for any of these purposes, your information will be immediately anonymized so that it cannot be linked directly to you. This treatment is based on the legitimate interest of Novasan, SA to respond to the expectations of its clients regarding the quality of our current services and their desire to receive new services through our entity.

Compliance with legal and regulatory obligations - to comply with our legal obligations to comply with the information requirements issued by judicial bodies, regulatory and supervisory bodies and state security bodies and forces

All data controllers are subject to the laws of the countries in which they operate, and are obliged to comply with them. These obligations include the delivery, in certain circumstances, of personal data to judicial bodies, regulatory or supervisory bodies and state security bodies and forces. These data processing are based on the existence for Novasan, SA of a legal obligation to collaborate with such organizations.


To ensure the protection and maintain the security, integrity and availability of your data, we use various security measures.

Although in data transmissions over the Internet or from a website it is not possible to guarantee absolute protection against intrusions, we dedicate maximum efforts to maintain physical, electronic and procedural protection measures with which to guarantee the protection of your data in accordance with with the legal requirements applicable in this matter. The measures we use include the following:

Limit access to your data only to those people who must know it based on the tasks they perform.

As a general rule, the collected data is transferred in encrypted format.

Store the most sensitive data only in encrypted format, and making it clear that certain data is not in the possession of the person responsible, such as credit card data since we use payment gateways with the 3DSecure system that redirect the data to secure servers without the business can access or store them, complying with SSL protocols.

Install perimeter protection systems for computer infrastructures (“firewalls”) to prevent unauthorized access, for example “hackers”, and routinely monitor access to computer systems to detect and stop any misuse of personal data.

Where we have provided you (or you have chosen) a password that allows you to access certain parts of our websites or any other portal, application or service under our control, you are responsible for keeping it secret and for complying with all the other security procedures that we notify you. You will not be able to share your password with anyone.


Your personal data will be kept for the time necessary to fulfill the purpose for which it was collected. If your data is used for multiple purposes that require us to retain it for different periods, we will apply the longest retention period.

In any case, we limit access to your data only to those people who need to use it to perform their functions.

Our data retention periods are based on business needs and legal obligations, so in relation to personal data that is no longer necessary, access to it will either be limited to compliance with strictly legal obligations or destroyed. in a safe way.

Marketing Purposes: Regarding the use of your information for the purpose of sending advertising or marketing actions, we will retain that information for that purpose for ten years from the date on which we last obtained your express consent to direct marketing communications. commercials, unless you ask us to exclude you from them by revoking the consent given.

Purposes related to the execution of a contract: with regard to the use of your information for the management of any contractual obligation that we have with you, we will retain this data during the period of validity of the contract and for the following ten years, to be able to meet to possible subsequent queries or claims.


Novasan, SA does not share your data with any person responsible for processing nor transfer under any circumstances, except for legal obligations contracted by the entity, its data to any third company with the exception of those transfers necessary for the fulfillment of the request with the client and always under your express consent.


You can change your preferences regarding the use of your information by sending an email to the contact address [email protected]


To exercise your rights, you can contact us through the emails indicated on the website, contact form or on our telephone number. The rights regarding data protection are exercisable by any user or member of the entity. We remind you that you have the right to request:

More details about our use of your information.

A copy of the information you have provided to us.

Correct inaccuracies in the information we maintain.

Delete information for whose use we no longer have a legal basis.

Revoke your consent for the processing of your data for these purposes, in cases where data processing is conditional on consent, as well as for any commercial communication.

Object to any processing of your data - including profiling - that takes legitimate interest as a legal basis, unless our reasons for carrying out such processing outweigh any possible harm to your data protection rights.

Restrict how we use your data while a claim is investigated.

Your exercise of these rights is subject to certain exceptions for reasons of general interest (for example, the prevention or detection of crimes) and for our own interests (for example, maintaining the confidentiality of legal advice). If you exercise any of these rights, we will verify that you are really authorized to do so, and we will respond to you within one month or within the maximum period provided for in Spanish regulations, if this is shorter.

If you are not satisfied with the way we use your information or with our response to the exercise of any of these rights, you can file a complaint with the Spanish Data Protection Agency (

Contact details of the company and the Data Protection Officer

If you have any questions about our use of your personal data, you can contact our data protection officer at any time through the email address [email protected]

Legal bases for the processing of personal data

The use of your data under the conditions described above is permitted by European and Spanish data protection regulations in accordance with the following legal bases:

You have expressed your consent (you have been presented with a consent form to authorize the processing of your data for certain purposes, you can revoke the consent given at any time).

The processing of your data is necessary for the management and maintenance of a contract signed with you.

The processing of your data is necessary to comply with our legal obligations.

We use your data to pursue a legitimate interest and our reasons for doing so outweigh any potential harm to your data protection rights.

There may be purposes that are permitted under other legal bases; In such cases, we will do our best to identify the legal basis in question and communicate it to you as soon as possible as soon as we become aware of its existence.

Use of cookies

Our page uses cookies. Cookies are files that are downloaded to your computer when you access certain web pages. Cookies allow a website, among other things, to store and retrieve information about the browsing habits of a user or their equipment, depending on the information they contain and the way in which they use their equipment. In addition, they improve the browsing process, since they allow the website to offer the user information that may be of interest to them depending on their use and its content.

If you do not want to receive cookies, please configure your internet browser to delete them from your computer's hard drive, block them or notify you if they are installed. To continue without changes to your cookie settings, simply continue on the website.

The cookies we use do not store any personal data or any type of information that can identify you, unless you want to register voluntarily in order to use the services that we make available to you or to receive information about promotions and content of interest to you. By browsing and continuing on our website you indicate that you are consenting to the use of cookies and the conditions contained in this cookie policy.

What type of cookies does this website use?

Cookie name Domain Description/Purpose Guy Expiration
__utma Used to distinguish users and sessions. The cookie is created when the JavaScript library is executed and there is no __utma cookie. The cookie is updated each time data is sent to Google Analytics. Technique Two years from configuration or update
__utmb It is used to determine new sessions or visits. The cookie is created when the JavaScript library is executed and there is no __utmb cookie. The cookie is updated each time data is sent to Google Analytics. Technique 30 minutes from configuration or update
__utmc Not used in ga.js. It is configured to interact with urchin.js. Previously, this cookie acted in conjunction with the __utmb cookie to determine if the user was in a new session or visit. Technique End of browser session
__utmz Stores the traffic source or campaign that explains how the user arrived at the site. The cookie is created when the JavaScript library is executed and is updated each time data is sent to Google Analytics. Technique Six months from configuration or update
fr Facebook Encrypted Facebook ID and Browser ID Technique 3 months