Privacy policy
La versión corta
- The controller is Noah Merlijn Winkelman, trading as Selva Digital, in Calonge.
- We process what you give us: name, contact details, what you asked for, invoices. Technical data from the site with your consent.
- We use it to answer you, quote, deliver the work, invoice, and, only if you said yes, send the newsletter.
- We keep it as long as the job and the law require, then delete it.
- Providers we use (hosting, email, analytics, Holded) are under data-processing agreements; some are outside the EU under valid transfer mechanisms.
- You can see, correct, move or delete your data, withdraw consent, or complain to the AEPD. Email hola@selvadigital.eu.
1.Who is the controller of your personal data
Selva Digital - Noah Merlijn Winkelman is the controller of the user’s personal data and informs you that these data are processed in accordance with Regulation (EU) 2016/679 of 27 April (GDPR) and Organic Law 3/2018 of 5 December (LOPDGDD).
2.Personal data processed
Depending on the relationship with the user and the services requested, Selva Digital - Noah Merlijn Winkelman may process the following categories of personal data:
- Identification data Name, surname, company name, professional role or position.
- Contact details Email address, telephone number, postal address, WhatsApp contact and other communication details provided by the user.
- Commercial and professional data Information related to enquiries, quotation requests, meetings, contracted services, project requirements, business activity, website needs, digital strategy, support requests or client communications.
- Billing and payment data Tax identification data, billing address, invoices, payment records, bank details where applicable, and other data necessary for accounting, tax and administrative management.
- Technical data IP address, browser type, device information, access logs, website usage data, cookies, analytics identifiers and technical information necessary for the security and proper functioning of the website.
- Support and ticket data Information included in support requests, incident reports, technical communications, files or documents voluntarily provided by the client for the management of the requested service.
- Newsletter and marketing data Email address, subscription preferences, consent records and data relating to commercial communications or newsletter subscriptions.
- Social media data Data associated with messages, comments, interactions or communications made through Selva Digital’s corporate social media profiles.
- Supplier or collaborator data Identification, contact, professional, billing and contractual data necessary to manage relationships with suppliers, collaborators or external professionals.
3.Why do we process your personal data?
The personal data provided through the website of Selva Digital - Noah Merlijn Winkelman will be processed for the following purposes:
- To manage enquiries and requests for information submitted through contact forms, email, telephone, WhatsApp or any other communication channels available on the website.
- To handle quotation requests, meetings or commercial proposals related to the services offered by Selva Digital, including website development, online shops, hosting, domains, SEO, Google Ads, digital strategy, technical support, website maintenance, ICT services, Holded and other digital services linked to its activity.
- To manage contractual or pre-contractual relationships with clients, including the provision of contracted services, support, maintenance, incident management, ticket management, operational communications, service administration and project follow-up.
- To manage invoicing, accounting, payments and administrative, tax and legal obligations arising from the relationship with clients, suppliers or collaborators.
- To send commercial communications, newsletters or updates, provided that the user has given their consent or there is another lawful basis that allows it, with the option to unsubscribe at any time.
- To manage Selva Digital’s presence on social media, including handling messages, comments, interactions or requests made through LinkedIn, Facebook, Instagram, WhatsApp or other corporate profiles.
- To analyse the use of the website and improve its performance, through cookies or similar technologies, in accordance with the cookie policy and, where required, subject to the user’s prior consent.
- To ensure the technical security of the website, prevent misuse, spam or unauthorised access, and maintain the proper functioning of the systems, forms and digital tools used by Selva Digital.
4.Why can we process your personal data?
The processing of your personal data is lawful under Article 6 of Regulation (EU) 2016/679, General Data Protection Regulation (GDPR), on the following legal bases:
- Performance of pre-contractual or contractual measures — Article 6(1)(b) GDPR When you request information, a quotation, a meeting, technical support or contract any of our services, we process your data to respond to your request, prepare a proposal, manage the project and properly provide the contracted service.
- Compliance with legal obligations — Article 6(1)(c) GDPR We process certain data to comply with tax, accounting, administrative and legal obligations, such as issuing invoices, managing payments, keeping legally required documentation or responding to requests from competent authorities.
- User consent — Article 6(1)(a) GDPR When you subscribe to the newsletter, agree to receive commercial communications or authorise the use of non-essential cookies, we process your data on the basis of your consent, which you may withdraw at any time.
- Legitimate interest of the controller — Article 6(1)(f) GDPR We may process your data to maintain website security, prevent abuse or fraudulent use, respond to communications already initiated, manage technical incidents, improve our services and carry out basic internal analyses related to Selva Digital’s activity, provided that your fundamental rights and freedoms do not prevail.
5.For how long will we keep your personal data?
Personal data will be kept for as long as necessary to fulfil the purpose for which it was collected and, afterwards, for the legally required periods to deal with any possible administrative, tax, accounting, contractual or legal liabilities.
In particular:
- Data related to enquiries or requests for information will be kept for the time necessary to respond to the request.
- Data related to clients and contracted services will be kept while the contractual relationship remains in force.
- Billing and accounting data will be kept for the periods required by applicable tax and commercial regulations.
- Data processed on the basis of consent, such as newsletters, commercial communications or non-essential cookies, will be kept until the user withdraws such consent.
Once the data is no longer necessary, it will be securely deleted or, where appropriate, anonymised, applying the appropriate technical and organisational measures.
6.To whom do we disclose your personal data?
As a general rule, personal data will not be disclosed to third parties, unless there is a legal obligation to do so or where it is necessary for the provision of the requested service.
However, for the proper functioning of the website, the management of advertising campaigns and the provision of the services of Selva Digital - Noah Merlijn Winkelman, certain external providers acting as data processors may have access to personal data, such as:
- hosting, domain and email service providers;
- web analytics, cookie and audience measurement tools;
- online advertising platforms, such as Google Ads or similar tools;
- commercial management, technical support, ticketing, invoicing, CRM or automation tools;
- IT maintenance, web development, digital marketing and communication providers.
Where required, the corresponding data processing agreements and confidentiality commitments required by the GDPR will be in place with such providers.
Personal data may also be disclosed to Public Administrations, Courts, Tribunals or competent authorities where there is a legal obligation to do so.
7.International data transfers
Some of the technology providers used by Selva Digital - Noah Merlijn Winkelman, especially analytics, online advertising, digital management, communication or cloud service tools, may be located outside the European Economic Area or may process data from third countries.
In such cases, international data transfers will only be carried out where there is a valid legal basis under the GDPR, such as an adequacy decision by the European Commission, the provider’s adherence to the EU-U.S. Data Privacy Framework, where applicable, or the signing of Standard Contractual Clauses approved by the European Commission, together with any additional safeguards that may be required.
8.What are your rights?
The rights of the USER are:
- Right to withdraw consent at any time.
- Right of access, rectification, portability and erasure of your data and the limitation or objection to their processing.
- The right to file a claim with the Spanish Supervisory Authority (www.aepd.es) if you consider that the processing does not comply with the current legislation.
Contact information for exercising rights :
Selva Digital - Noah Merlijn Winkelman. Avinguda Puigcerver 13, - 17251 Calonge (Girona). E-mail: noah@selvadigital.eu
9.Compulsory or optional nature of the information provided by the user
Users, by ticking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact, subscription or request forms, expressly, freely and unequivocally accept that such data are necessary for Selva Digital - Noah Merlijn Winkelman to properly handle their request.
The data requested in the mandatory fields are necessary to process the user’s enquiry, provide the requested information, manage the service or maintain the corresponding relationship with the user. The remaining fields, where applicable, may be provided voluntarily.
The user guarantees that the personal data provided to the Controller are true, accurate, complete and up to date, and undertakes to notify any modification thereof.
If the user does not provide all the data marked as mandatory, it may not be possible to properly process the request, provide the requested service or ensure that the information supplied is fully adapted to the user’s needs.
10.Security measures
In accordance with current personal data protection regulations, Selva Digital - Noah Merlijn Winkelman undertakes to process personal data in compliance with the provisions of the GDPR and the LOPDGDD, applying the principles set out in Article 5 of the GDPR, including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality.
The Controller has implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in order to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.
These measures are reviewed and adapted where necessary, taking into account the nature of the data processed, the risks associated with the processing and the technological resources available.
For further information about privacy guarantees or the processing of personal data, users may contact the Controller at:
Selva Digital - Noah Merlijn Winkelman Avinguda Puigcerver 13 17251 Calonge, Girona Email: noah@selvadigital.eu
Questions about this document? Email hola@selvadigital.eu or write to Avinguda Puigcerver 13, 17251 Calonge (Girona), Spain. You can also complain to the Spanish supervisory authority at aepd.es.