Effective Date: 16/11/2024

1. Introduction

Welcome to NOMAD SPAIN! Your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your personal data when you interact with our website, products, and services. We are committed to complying with the General Data Protection Regulation (GDPR) to ensure the privacy and security of your data.

2. Data Controller

The data controller responsible for your personal data is NOMAD SPAIN, located at:
Calle el Escorial, 6, Madrid, Spain, 28004

For questions or concerns about this Privacy Policy, please contact us at:
Email: [email protected]
Phone: +34 603 824 757

3. Data We Collect

We may collect the following categories of personal data:

  • Contact Information: Name, email address, phone number, and address.
  • Transaction Details: Payment information, purchase history, and billing details.
  • Usage Data: IP address, browser type, pages visited, and time spent on our website.
  • Preferences: Information about your preferences and interests.
  • Cookies and Tracking Technologies: Data collected through cookies and similar technologies.

4. How We Use Your Data

We process your data for the following purposes:

  • To provide our products and services.
  • To manage bookings, orders, and transactions.
  • To personalize your experience on our website.
  • To communicate with you about updates, promotions, and offers.
  • To improve our website and services.
  • To comply with legal obligations.

5. Legal Basis for Processing

We rely on the following legal grounds to process your personal data:

  • Consent: When you have given us explicit consent (e.g., for marketing communications).
  • Contractual Necessity: To fulfill a contract with you or take steps at your request.
  • Legal Obligations: To comply with applicable laws and regulations.
  • Legitimate Interests: To improve our services and protect our business interests.

6. Data Sharing

We may share your data with trusted third parties, including:

  • Service providers (e.g., payment processors, hosting services).
  • Business partners (e.g., marketing agencies).
  • Authorities, when required by law or to protect our legal rights.

We ensure that all third parties comply with GDPR requirements to protect your data.

7. International Transfers

If your data is transferred outside the European Economic Area (EEA), we will ensure adequate protection, such as:

  • Using countries with approved adequacy decisions.
  • Implementing standard contractual clauses (SCCs).
  • Obtaining your explicit consent.

8. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy, or as required by law.

9. Your Rights

Under GDPR, you have the following rights:

  • Access: Request access to your personal data.
  • Correction: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your data, subject to legal exceptions.
  • Restriction: Restrict processing of your data.
  • Portability: Request transfer of your data to another service provider.
  • Objection: Object to processing based on legitimate interests or direct marketing.
  • Withdraw Consent: Withdraw consent at any time for processing based on your consent.

To exercise your rights, please contact us at [Insert Email Address].

10. Cookies and Tracking Technologies

Our website uses cookies to enhance your experience. You can manage your cookie preferences through your browser settings. For more details, please see our [Cookie Policy].

11. Security Measures

We implement technical and organizational measures to protect your data from unauthorized access, loss, or misuse. However, no system can be 100% secure, and we encourage you to protect your data as well.

12. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Please review this page periodically for updates.

13. Complaints

If you believe your data protection rights have been violated, you can file a complaint with your local data protection authority. For Spain, this is the Spanish Data Protection Agency (AEPD).