Privacy Policy

Last updated: March 2026

At NOVALUX GP we take the protection of your privacy very seriously. This Privacy Policy describes how we collect, use and protect your personal data, in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and other applicable data protection regulations.

1. Data Controller

  • Identity: NOVALUX GP
  • Address: Andorra — [TO BE COMPLETED: full registered address]
  • Tax ID: [TO BE COMPLETED]
  • Email: info@novaluxgp.com
  • Phone: +376 659848

2. Personal Data We Process

Depending on how you interact with our website, we may process the following categories of personal data:

  • Identification data: first and last name.
  • Contact data: email address and phone number.
  • Communication data: the content of the message you send us through the contact form.
  • Browsing data: IP address, browser type, pages visited and session duration, obtained through cookies and similar technologies (see our Cookie Policy).

We do not process particularly sensitive data (health data, racial origin, religious beliefs, etc.).

We process your data for the following purposes:

a) Managing enquiries and communications

When you fill in the contact form or send us an email, we process your data to handle your enquiry and communicate with you.

Legal basis: your express consent (Art. 6.1.a GDPR) and the legitimate interest of NOVALUX GP in handling information requests (Art. 6.1.f GDPR).

b) Managing appointments and meetings

When you request a meeting or call through our calendar, we process your data to confirm and manage the appointment.

Legal basis: performance of pre-contractual measures at the request of the data subject (Art. 6.1.b GDPR).

c) Provision of contracted services

If you engage any of our services, we process the data necessary for the performance of the contract.

Legal basis: performance of a contract to which the data subject is party (Art. 6.1.b GDPR).

d) Website analysis and improvement

We use browsing data in aggregated and anonymised form to understand the use of the site and improve it.

Legal basis: legitimate interest of NOVALUX GP (Art. 6.1.f GDPR) and, where applicable, your consent through cookie preferences.

4. Data Retention Period

We retain your personal data for the time strictly necessary to fulfil the purpose for which they were collected:

  • Enquiries and communications: until your request is resolved and, thereafter, for the limitation period for any legal actions that may arise (generally 3 years).
  • Contractual data: for the duration of the contractual relationship and the applicable legal limitation period (up to 10 years for certain commercial obligations).
  • Browsing data: according to the type of cookie used (see Cookie Policy).

After these periods, data will be deleted or anonymised.

5. Recipients of Data

As a general rule, NOVALUX GP does not share your personal data with third parties, except in the following cases:

  • Service providers: companies that provide us with web hosting, email platforms, web analytics or calendar tools, acting as data processors pursuant to Art. 28 GDPR and obliged to process data solely in accordance with our instructions.
  • Legal obligations: when necessary to comply with a legal obligation or requirement of a competent authority.

Some of our providers may be located outside the European Economic Area (EEA). In such cases, we ensure that international transfers are made with the appropriate safeguards provided for in the GDPR (e.g., standard contractual clauses, European Commission adequacy decisions).

6. Your Rights

As a data subject, you may exercise the following rights at any time:

  • Access: to know what personal data we are processing about you.
  • Rectification: to request the correction of inaccurate or incomplete data.
  • Erasure: to request the deletion of your data when they are no longer necessary for the purposes for which they were collected.
  • Objection: to object to the processing of your data in certain circumstances.
  • Restriction: to request restriction of processing in certain cases.
  • Portability: to receive your data in a structured, commonly used format and transmit them to another controller.
  • Withdrawal of consent: to withdraw consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.

To exercise your rights, send us an email at info@novaluxgp.com stating the right you wish to exercise and attaching a copy of your identity document.

You also have the right to lodge a complaint with the competent supervisory authority. In the Principality of Andorra: Autoritat de Protecció de Dades d’Andorra (APDA). If you reside in another EU Member State, you may contact the data protection supervisory authority of your country.

7. Data Security

NOVALUX GP implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including communications encryption (HTTPS), access controls and periodic review procedures.

However, no data transmission system over the Internet is completely secure, so we cannot guarantee the absolute security of information transmitted through our site.

8. Changes to this Policy

NOVALUX GP reserves the right to modify this Privacy Policy to adapt it to legislative changes or changes in our services. Any modification will be published on this page with the date of the last update. We recommend reviewing this policy periodically.

For any enquiries about the processing of your personal data, please contact us at info@novaluxgp.com.