Legal Notice, Privacy & Cookies

1. Legal notice: site owner

In compliance with Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE), the owner of this website is:

• Owner: Matias Alvaro Quiriquino el Ashuh, sole trader, operating under the NEXVYLIA brand.
• Tax ID (NIF): 76586830G.
• Address: Calle América, Urb. Triana 42, 11204 Algeciras (Cádiz), Spain.
• Contact email: quoriquinomatias@gmail.com.
• Activity: custom software development, digitalisation, process automation and applied AI for businesses.

Accessing and using this site grants you the status of user and implies acceptance of this legal notice. The site contents (texts, logos, designs and own images) are owned by NEXVYLIA or used with permission and may not be reproduced without consent. The owner is not responsible for the content of linked third-party sites. This notice is governed by Spanish law.

2. Data controller

The controller of the data collected through this site is the owner identified above: Matias Alvaro Quiriquino el Ashuh (NIF 76586830G), NEXVYLIA brand. For anything regarding your data, contact quoriquinomatias@gmail.com.

3. What data we collect

We only collect the data you voluntarily provide and the minimum needed for the site to work:

• Project request: trade or company name, contact person, email, phone and whatever information about your business and what you want to solve you choose to include. This data is stored even if you do not complete account registration, so we can handle your request.
• Appointment or call booking: name, email and phone, so we can call you on the day and time you choose and prepare a proposal. This data is stored even if you do not create an account.
• Customer account: name, email and password (always stored encrypted, never in plain text).
• Email verification: a temporary code sent to your email to confirm your identity.
• Technical data: the date of your last sign-in and the strictly technical data tied to the session and site security.
• Billing and contracting data: if you hire a project or the maintenance service, we also process your name or company name, tax ID (NIF/CIF), fiscal address, the details of the contracted service and your invoice and payment history.

4. What we use it for

We use your data only to:

• Handle your project request and prepare a proposal or quote.
• Call you and handle the appointment you book, and send the reminder the day before.
• Contact you, by phone or email, to follow up on your request or appointment and, where it fits what you told us, tell you about our services. You can object to these communications at any time.
• Create and manage your customer account and, where applicable, invoicing for contracted projects.
• Manage the collection of contracted services (including maintenance subscriptions), issue the corresponding invoices and comply with our tax and accounting obligations.
• Keep the site secure and prevent fraudulent use.

We do not carry out advertising profiling, nor do we sell or share your data with third parties for commercial purposes.

5. Legal basis

We process your data on the basis of your consent (given when you submit the form and accept this policy), the performance of the contract when you hire a project or a maintenance subscription, compliance with legal obligations (in particular the tax and accounting duties tied to invoicing), and our legitimate interest in keeping the site secure.

6. How long we keep it

We keep quote request data that does not lead to a contract for a maximum of 24 months from our last contact with you; after that period we delete or anonymise it. If you become a customer, your data is kept for as long as the contractual relationship lasts and, afterwards, for the period needed to handle any potential liabilities. Billing data (invoices, tax ID, fiscal address and payments) is kept for the periods required by law: at least 4 years for tax purposes (Spanish General Tax Law) and 6 years for commercial purposes (Spanish Commercial Code); during those periods it cannot be deleted on request, only blocked. For all other data you can request deletion at any time as set out below.

7. If we contacted you first

This section is not aimed at people using this website, but at the professional firms we approach with a commercial proposal on our own initiative. If you got here from one of our emails and had never heard of us, this is what you should know.

Where we got your address: from publicly accessible sources — professional directories and the legal notice or contact page of your own website. We do not buy databases and nobody passes them on to us.

What we process: the firm name, sector, city, phone number, website and a generic mailbox such as info@ or contact@. We only write to mailboxes of that kind, never to addresses bearing a specific person's name.

Legal basis: our legitimate interest in making a service related to your professional activity known (art. 6.1.f GDPR), together with art. 21.2 of the Spanish LSSI, which allows this communication where the data is public, the offer relates to your activity and you can object easily. We have documented that balancing exercise in writing and can send it to you on request.

How long we keep it: twelve months from the last contact if there is no reply, after which we delete it. If you ask us not to write again, we keep only your address on an exclusion list indefinitely, as that is the only way to guarantee you receive nothing further from us.

How to stop this: reply "baja" (unsubscribe) to any of our emails. It is recorded and we will not write to you again. You may also exercise the other rights described below.

We do not build profiles about you, we do not track whether you open our emails on an individual basis, and we do not share your data with anyone.

8. Cookies

This site only uses technical and preference cookies, needed for it to work and to remember your language. We do not use advertising or third-party tracking cookies, so no profile is built about you.

You can block or delete these cookies from your browser settings, but some features such as signing in or language may stop working correctly.

9. Providers, payments and transfers

To deliver the service we rely on technology providers acting as data processors (or as independent controllers, in the case of the payment gateway) that only access the data needed for their function:

• Web hosting and email: the site, its database and service emails (verifications, quotes, invoices and communications, sent from our own domain) are hosted on our hosting provider's servers (Hostinger International Ltd.) within the European Economic Area, including its backups.
• Tax advisors: billing documents (issued and received invoices) may be forwarded to our tax advisory firm for bookkeeping and tax filings.
• Payments and subscriptions: charges (including maintenance fees) are processed through Stripe Payments Europe, Ltd. (Ireland). You provide your card details directly to Stripe on its secure gateway and they are never stored on our systems; we only receive the payment confirmation and the identifying details of the transaction. Stripe may transfer data to its parent company in the United States under the EU-US Data Privacy Framework and Standard Contractual Clauses approved by the European Commission. More information at stripe.com/privacy.
• Tax administration: billing data may be disclosed to the Spanish Tax Agency (AEAT) where required by law, including the submission of invoicing records under the VERI*FACTU system.

Beyond the above we do not carry out international data transfers outside the European Economic Area, and where a provider involves them they will always take place with the safeguards required by law (adequacy decisions or Standard Contractual Clauses).

10. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time, as well as withdraw the consent you have given. To do so, email us stating the right you wish to exercise. You also have the right to lodge a complaint with the relevant data protection authority if you believe we have not handled your request properly.

11. Security

We apply reasonable technical and organisational measures to protect your data: encrypted connection (HTTPS), encrypted password storage, access control to the internal panel and email verification. No system is infallible, but we work to minimise any risk.

12. Contact

For any question about this policy or the processing of your data, you can write to us via the NEXVYLIA contact email. We will update this page whenever the way we process data or the cookies we use changes.