Privacy policy

1. Data controller

The owner of this website and controller of contact form data is Yago Fernández Seco, Spanish tax identification number 71528550E, owner of the Nodum Fulfillment project.

Legal and data protection contact: yago.fernandez@nodumfulfillment.com.

Owner’s address: Calle Eros, Madrid.

2. Data we process

The form collects your name, company or brand, email address and approximate monthly order range. You may optionally provide a phone number, website and message. Required fields identify the enquiry and allow us to respond; the form cannot be submitted without them.

We do not need sensitive data or personal data about your customers. Please do not include these in your message. When you access the site or submit an enquiry, technical services also receive connection data, such as your IP address and information needed to handle the request and protect the service.

3. Purposes and legal bases

• Responding to enquiries and discussing possible collaboration: pre-contractual steps you request when enquiring about a service for yourself; where you represent a brand, legitimate interests in responding to professional correspondence and maintaining that contact.
• Security and abuse prevention: legitimate interests in protecting the form and systems against malicious or automated submissions.
• Legal obligations and rights requests: compliance with applicable obligations.

Submitting the form does not subscribe you to a newsletter or authorise advertising campaigns. This enquiry is not used for commercial profiling or automated decisions with legal effects.

4. Who receives the data

The people handling Nodum enquiries access the information needed to reply. The contact flow uses Cloudflare Workers to process requests, Resend to send messages and Microsoft 365 to receive and manage correspondence. Technical providers needed to serve the website are also involved.

We do not sell form data. Information may be provided to authorities where legally required.

These providers may process information outside the European Economic Area.

5. Retention

Messages are retained while handling your enquiry and related follow-ups. They will be deleted when no longer needed. Where retention is required for obligations or liabilities, use will be restricted to that purpose for the applicable legal periods. Any future contract will have its own processing and retention information.

6. Your rights

You may request access, rectification, erasure, objection, restriction and, where applicable, portability by writing to the legal contact above. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.

Identify the right you wish to exercise and provide the information needed to find your enquiry. Additional identity verification will only be requested if there are reasonable doubts; do not send a copy of your identity document initially.

You will normally receive a response within one month. If complexity or the number of requests requires a lawful extension, you will be informed within that first month. You may also complain to the Spanish Data Protection Agency.

7. External resources and LinkedIn

General Sans is loaded from Fontshare. Requesting the font sends that provider technical information needed to deliver the resource, such as your IP address. LinkedIn is an external link, not an embedded profile. Your interaction with that service is governed by its own policy.

8. Changes

This information will be updated if the purposes, providers or operation of the site change. New purposes requiring another legal basis will not be treated as authorised by an earlier enquiry.