Legal

Politique de confidentialité

In the event of any discrepancy, the Spanish (Castilian) version prevails.

Last updated: 31 October 2026.

In short. If you write to us from the form, we use your name, your email, your phone number (optional, only if you add it) and your message only to reply to you, because you asked us to (Art. 6.1.b GDPR): you do not have to accept anything. The form sends the message to the website's own server (hosted at IONOS), which forwards it by email to our mailbox and does not store it. There is no account, no cookies, no advertising and no automated decisions. We measure website use with aggregated statistics, without cookies, on our own server. You can exercise your rights by writing to support@haznova.com.

1. Data controller

Controller: Haznova
Email: support@haznova.com

This policy covers the data the controller receives through this website. There is no data protection officer: it is not mandatory for this activity.

2. What data we process and how it reaches us

The contact form sends your data to the website's own server, hosted at IONOS (processor for hosting and email). That server receives it, forwards it by email to support@haznova.com (a mailbox hosted at IONOS) and does not store it: there is no contacts database and no copy on the server. If the server is unavailable, the website prepares the email in your email program (or hands you the text so you can copy it and send it yourself), and in that case the message travels from your own email account, and until you send it nothing reaches the controller.

We receive only what the email contains: name, email address, phone number (optional: only if you write it), service of interest, the description of your problem and anything you add, plus the technical data that comes with any email (date, headers). The fields are those needed to reply to you. Please do not include specially protected data (health, beliefs, etc.) or data about third parties in the message.

Browsing data: as with any web hosting, the server may record technical connection data (IP address, date and page requested) for security and operational reasons. IONOS manages it as the website's hosting provider (the form included); we do not use it to identify you or to build profiles.

Usage statistics (no cookies). We measure how many people visit the website and how they use it with Umami, an open-source analytics program that we install on our own server (a machine of our own; it is not a third party or another company's cloud service). When you open a page, the following is sent to that server: the page and the site you came from, your language, screen size, browser, operating system and device type, a country (and, if it can be deduced, an approximate region or city), and usage events: technical errors on the page, load times and the steps of the form (opening it, which fields you get to and the last one before leaving, trying to send it, sending it or it being blocked), without what you type in it. Your IP address is not stored: it is used at that moment to deduce the country and to compute an anonymous identifier with a hash (of IP address, browser, website and a salt that changes every month), which prevents counting the same visit twice without identifying you or following you across sites. Umami does not use cookies or write anything to your device (details). Source: Umami's official documentation (docs.umami.is, “Metric definitions” and “FAQ”). If your browser sends the “Do Not Track” signal, your visit is not measured.

3. Purposes

To know, in aggregate form, how the website is used (visits, pages, origin, devices, countries), to detect errors and to improve its performance and availability.
To answer your enquiry (by email or, if you leave us your phone number, also by phone) and, if you ask, to prepare a proposal or quote.
If the conversation ends in a contract, to manage it: that processing will be explained in the terms agreed at that time.
To handle the exercise of your rights and, if necessary, to defend against claims.

We do not build profiles, we do not make automated decisions and we do not send commercial communications you have not requested (Art. 21 LSSI-CE). We do not use your data for any other incompatible purpose.

4. Legal basis

To reply to your enquiry and, if you ask, to prepare a proposal or quote: taking pre-contractual steps at your request (Art. 6.1.b GDPR), because you contacted us and asked. If your message has nothing to do with hiring a service, we reply on the basis of our legitimate interest (Art. 6.1.f GDPR) in answering people who write to us. We do not ask you to accept anything or tick any box.
If you go on to sign a contract, the performance of that contract (Art. 6.1.b GDPR).
Compliance with legal obligations (Art. 6.1.c GDPR), for example tax and accounting obligations if you become a client.
The controller's legitimate interest (Art. 6.1.f GDPR) in the security of the website and in defending against claims.
The controller's legitimate interest (Art. 6.1.f GDPR) in knowing how the website is used and detecting errors through aggregated statistics, without cookies and without storing your IP: the impact on you is minimal. You have the right to object (Art. 21 GDPR) by writing to the contact address; you can also avoid being measured by turning on your browser's “Do Not Track” signal.

Providing the form data is voluntary (the phone number is optional), but without the other data we cannot reply to you.

5. Retention

Demandes sans contrat : le temps nécessaire pour répondre et, au maximum, 12 mois depuis la dernière communication ; ensuite elles sont supprimées (ou bloquées uniquement pendant que des responsabilités peuvent survenir, jusqu'à leur prescription).
If you become a client: during the relationship and, afterwards, for the applicable legal periods (generally between 4 and 6 years for tax and commercial records).
Usage statistics: 13 months; then they are deleted automatically.
Rights requests: the time needed to prove they were handled.

You can ask for earlier deletion by writing to support@haznova.com.

6. Recipients

We do not share your data with third parties unless legally required (for example, with the competent public authorities). The providers that make the service possible have access to it as processors: IONOS (1&1 IONOS España S.L.U.), which provides the website hosting (including the server that receives the form and forwards it by email, without storing it) and the haznova.com email, under the data processing agreement provided for in Art. 28 GDPR. Your own email provider, with which you send the message, also processes it under its own terms, which are outside the controller's control.

7. International transfers

Les statistiques d'utilisation sont stockées sur le propre serveur du responsable, en Espagne. Pour que ton navigateur y accède, la connexion chiffrée (HTTPS) passe par le réseau Tailscale (Tailscale Inc., USA) via sa fonction Funnel ; selon sa documentation, ses serveurs de relais ne déchiffrent pas le trafic, qui est déchiffré sur le serveur du responsable (tailscale.com/kb/1223/funnel). Tailscale agit seulement comme transport et ne reçoit pas les données de statistiques en clair. Le responsable ne transfère pas tes données hors de l'Espace Économique Européen. Si IONOS ou l'un de ses sous-traitants le faisait, ce ne serait qu'avec les garanties du chapitre V du RGPD (décision d'adéquation, clauses contractuelles types ou autres). Tu peux nous les demander en écrivant à l'adresse de contact.

8. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to support@haznova.com, stating the right you are exercising and, if needed, a way to verify your identity (without sending documentation that is not necessary). We will reply within one month, extendable under the GDPR. If you think we have not handled your rights properly, you can complain to the Spanish Data Protection Agency (aepd.es), calle Jorge Juan 6, 28001 Madrid.

9. Automated decisions

We do not make decisions based solely on automated processing or build profiles about you.

10. Minors

Haznova's services are aimed at businesses and professionals. This website is not aimed at children under 14 and we do not knowingly collect their data. If you think a minor has written to us, let us know and we will delete the message.

11. Security

The website is served over HTTPS, uses no cookies or third parties that receive your data (the statistics go to our own server), and the form server does not store the data: it only forwards it by email, and the connection to it is encrypted (HTTPS). Ordinary email does not by itself guarantee the confidentiality of its content in transit: that is why we ask you not to include sensitive data in it. In the mailbox we apply reasonable technical and organisational measures proportionate to the risk (Art. 32 GDPR).

12. Cookies

This website does not use cookies and neither do the usage statistics. Details in the cookie policy.

13. Changes to this policy

We may update this policy if the law or the website changes (for example, if a new service that processes data is added). The current version is the one published here, with its date; if the change is significant, we will say so on this page.