Privacy Policy
This Privacy Policy explains how NexLink Hub S.L.U. processes personal data under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Controller
Name: NexLink Hub S.L.U.
CIF: B88756994
Address: Avenida Meridiana 320, 3º 6ª, 08027 Barcelona, Spain
Privacy email: privacy@nexlinkhub.com
Legal email: legal@nexlinkhub.com
2. Data we process and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Handling commercial enquiries and project proposals sent by the form or by email | Name, email, project description, chosen model, anti-abuse verification token, and basic technical metadata | Art. 6.1.b GDPR (pre-contractual steps) | Up to 24 months from the last contact |
| Contract management and invoicing | Identity, tax, and contact data of clients and their representatives | Art. 6.1.b and 6.1.c GDPR (contract and legal duty) | Applicable commercial and tax limitation periods |
| Informational messages and commercial follow-up | Professional email and contact interactions | Art. 6.1.f GDPR (legitimate interest) or 6.1.a (consent) | Until objection or withdrawal of consent |
| Security, consented analytics, and abuse prevention | IP, date/time, security events, analytics identifiers, and technical logs | Art. 6.1.f GDPR (legitimate interest) and, for analytics, art. 6.1.a | Up to 12 months unless there is an incident. Analytics follow the provider, recommended maximum 25 months |
3. Recipients and transfers
Data may be processed by technology providers acting as processors under contract, with access limited to what the service requires, including form delivery and, if accepted, Google Analytics measurement. We do not sell data. Disclosures happen only when the law requires them.
If a provider is outside the European Economic Area, we apply appropriate GDPR safeguards (standard contractual clauses or another valid mechanism).
4. Your rights
You can request access, rectification, erasure, objection, restriction, and portability by writing to:
If you believe your request was not handled properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.
5. Minors
NexLink Hub services are not directed at anyone under 18. If we detect a minor's data without a valid legal basis, we delete it.
6. Security
NexLink Hub applies technical and organisational measures appropriate to the risk: access control, encryption in transit, infrastructure protection, monitoring, and least-privilege policies.