Privacy policy
This is a translation for information purposes; in case of discrepancy the Spanish version prevails.
We explain clearly what data we process, why, on what legal basis, who we share it with and for how long, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR; "RGPD" in Spanish) and Spanish Organic Law 3/2018 on data protection and digital rights (LOPDGDD).
Data controller
- {{RAZON_SOCIAL}}, Tax ID (NIF) {{NIF}}
- Address: {{DIRECCION_FISCAL}}
- Privacy email: info@novateja.com
What data we process
- Contact details: name, phone number, email.
- Property details: address, cadastral reference, year, square metres, use, photos you send us and roof measurements.
- Service details: appointments, reports, quotes, contracts, invoices and payments (we do not store your card details: they are processed by the payment provider).
- Browsing data and source of the visit (UTM parameters, campaign identifiers) when your cookie preferences allow it.
- Record of your consents: type, exact version of the text, date, IP address and form step.
Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Replying to your request, giving you a price and preparing the quote. | Taking steps at your request prior to entering into a contract (art. 6.1.b GDPR). |
| Providing the contracted service: visit, certificate, works, grant, invoicing and service notifications (appointment, report, invoice). | Performance of the contract (art. 6.1.b GDPR). By WhatsApp only if you have ticked that box; otherwise by email or phone. |
| Sending you proposals for other services for your property (roof, solar panels, energy performance certificate). | Separate, optional consent (art. 6.1.a GDPR and art. 21 LSSI). You can withdraw it at any time. |
| Sending the certificate to the notary you indicate, having it recorded with the Land Registry where applicable, and complying with tax, accounting and asbestos-related obligations. | Compliance with legal obligations (art. 6.1.c GDPR), including Catalan Law 8/2026 (Llei 8/2026) and Spanish Royal Decree 396/2006 (RD 396/2006) on asbestos work. |
| Usage analytics and campaign measurement through cookies. | Consent (art. 6.1.a GDPR and art. 22.2 LSSI). See the cookie policy. |
| Website security, prevention of fraud and form abuse, and defence against claims. | Legitimate interest (art. 6.1.f GDPR). |
Who we share your data with
Only when it is necessary for your service or required by law:
- The RERA-registered company carrying out the removal ({{RERA_PARTNER_NOMBRE}}, RERA no. {{RERA_NUM}}), when you contract building works, to prepare the work plan and carry it out.
- The qualified technician registered with a professional body who visits your property and signs the certificate.
- The notary you indicate, to send them the certificate, and the Land Registry (Registro de la Propiedad) where applicable.
- Public authorities: the town council (building permits), the labour authority (work plan) and the Agència de Residus de Catalunya (Catalan Waste Agency; grant application, with your authorisation).
- Data processors under a contract compliant with art. 28 GDPR: web hosting, database, CRM, messaging (WhatsApp Business), email, payments, e-signature, scheduling and analytics. Some may process data outside the European Economic Area with appropriate safeguards (an adequacy decision, such as the EU-US Data Privacy Framework, or standard contractual clauses).
How long we keep your data
- Requests that do not become a service: 12 months from the last contact.
- Customers: for as long as the relationship lasts and, afterwards, for the legal periods (6 years for accounting records, and the tax limitation periods).
- Certificate and works files (reports, photos, work plans, waste receipts): 15 years, so that they can be evidenced to notaries, registries, authorities and future buyers. The RERA-registered company also keeps the documentation required of it by RD 396/2006.
- Marketing proposals: until you withdraw your consent.
- Record of consents: for as long as needed to evidence them.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to info@novateja.com with a copy of your identity document. To stop receiving WhatsApp messages, just reply BAJA ("unsubscribe").
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD; www.aepd.es).
Security
We apply appropriate technical and organisational measures: encryption in transit, role-based access control, activity logging and backups. Photos and documents are kept in private storage with temporary links.