Privacy policy

At NOXIFY we take the protection of your personal data seriously. This policy explains, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), what data we process when you use this website, for what purpose and what rights you have.

1. Data controller

• Controller: NOXIFY GROUP SLU
• Tax ID (NIF): B26791913
• Address: C/ Alts Forns, 29, 1º 4ª, 08038 Barcelona (Spain)
• Privacy contact email: info@noxifygroup.com
• Phone: +34 695 694 993

2. What data we process

We process the data you provide through the website forms and the client private area:

• Identification and contact data: name, email address, phone number, country and, where applicable, company.
• Details of your request: selected profile (entrepreneur, startup, company, investor, etc.), information about your project or interest (for example, budget, capital range, investment horizon, visa needs) and the content of your messages.
• Private area data: access credentials, requests made, saved opportunities, booked meetings and documents you choose to upload.
• Technical data: those strictly necessary for the security and operation of the site (for example, IP address and technical cookies; see the Cookie Policy).

We do not request special categories of data. Please do not include such information in free-text fields.

3. Why we use your data and on what legal basis

We process your data for the following purposes and legal bases under Article 6 GDPR:

• To handle your enquiries and requests for information about services and published opportunities — pre-contractual measures at your request (Art. 6.1.b) and your consent when submitting the form (Art. 6.1.a).
• To create and manage your private area account. When you submit a form on the website, an account is automatically created from which you can track your requests; you will receive a welcome email to set your password — performance of the service relationship (Art. 6.1.b).
• To manage meeting bookings with our team through the Cal.com platform integrated in the private area — pre-contractual measures or performance of the service (Art. 6.1.b).
• To present you with investment, purchase or sale opportunities matching your profile, only if you have ticked the corresponding box — consent (Art. 6.1.a).
• To send you commercial communications about NOXIFY opportunities, news and events, only if you have ticked the corresponding box — consent (Art. 6.1.a). You may withdraw it at any time.
• To comply with applicable legal obligations (tax, commercial or otherwise) — Art. 6.1.c.
• To ensure the security of the website and prevent fraudulent use — legitimate interest (Art. 6.1.f).

We do not make automated decisions with legal effects on you, nor do we carry out automated profiling within the meaning of Article 22 GDPR.

4. How long we keep your data

• Enquiries and requests: for as long as necessary to handle them and manage the subsequent relationship.
• Private area account: for as long as you keep it active. You may request its deletion at any time.
• Commercial communications: until you withdraw your consent.
• In general: once the relationship has ended, data will be kept blocked for the applicable legal limitation periods (for example, tax or commercial) and then deleted.

5. Who we share your data with

We do not sell your data or disclose it to third parties for commercial purposes. It is only accessed, as data processors under contracts pursuant to Article 28 GDPR, by the providers necessary to deliver the service: web hosting, email and the Cal.com meeting booking platform, which we use through its European instance (app.cal.eu).

When the site's fonts are loaded from Google Fonts, your browser connects to Google servers and communicates your IP address to them; Google LLC is certified under the EU–U.S. Data Privacy Framework.

Beyond these cases, we will only disclose data to third parties where there is a legal obligation. If, in the context of a specific opportunity, it becomes necessary to share your data with the other interested party, we will inform you and ask you first.

6. International transfers

As a general rule, our providers process data within the European Union. Where a provider may involve an international transfer (such as the Google case mentioned above), it is covered by a European Commission adequacy decision or by the safeguards of Chapter V GDPR, such as standard contractual clauses.

7. Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, as well as withdraw any consent given, by writing to info@noxifygroup.com, indicating the right you wish to exercise. We may ask you for additional information to confirm your identity.

If you believe we have not processed your data correctly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid, Spain). We would nevertheless appreciate it if you contacted us first so we can try to resolve the matter.

8. Minors

The website and its services are intended for people over 18 years of age. We do not knowingly collect data from minors; if we detect a minor's registration, we will delete it.

9. Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, alteration, loss or disclosure, taking into account the state of the art and the risks of the processing.

10. Changes to this policy

We may update this policy to reflect legal changes or changes to our services. The current version, with its update date, will always be published on this page.