Privacy

Data controller

The data controller for https://www.navexmarina.es is Navex Marina (SIRET 100 036 748 00018), a French Entrepreneur individuel run by Emanuel Pamies. Postal contact: 630 Avenue de Tournamy, 06250 Mougins, France. Email for privacy matters: info@navexmarina.es. No Data Protection Officer is appointed; requests are handled directly by the entrepreneur.

Personal data we collect

When you submit the contact form we collect: first and last name, email address, optional phone number, subject, free-text message, and — for B2B demo requests — company name, professional role and fleet size. For abuse prevention we also log the IP address, the HTTP user-agent and the timestamp of the submission. When you accept analytics cookies, Google Analytics 4 additionally collects pseudonymised usage data (details in our Cookie Policy). We do not collect special-category data and we do not ask you to create an account.

Purposes of processing

We process your data strictly to: (i) answer your enquiry and, where applicable, forward it to E-CLYPSE INTERNATIONAL for the issuance of a commercial quote or the handling of an order; (ii) send the automatic acknowledgement email; (iii) protect the service against spam, fraud and abuse; (iv) measure aggregate usage of the website to improve the service — only when analytics consent is granted. We do not use your data for profiling or for automated decision-making with legal effect.

Legal basis

Each purpose rests on one of the following legal bases under Article 6(1) of the GDPR: (a) pre-contractual steps taken at your request, for handling enquiries, quotes and orders forwarded to E-CLYPSE INTERNATIONAL; (b) our legitimate interest in securing the service, for abuse prevention and technical logs; (c) your explicit consent, for analytics cookies and for any future marketing communications. You may withdraw consent at any time with effect for the future.

Recipients and processors

Your personal data is accessed by the entrepreneur and forwarded to E-CLYPSE INTERNATIONAL (joint controller, in its capacity as the seller) for the handling of requests and orders. The following processors also act on our behalf under written data-processing agreements: Resend (transactional email delivery), Google LLC (Google Analytics 4 — only if analytics consent is granted), Cloudflare Inc. (Turnstile anti-abuse challenge), hCaptcha (fallback anti-abuse challenge), and our hosting provider OVH SAS (infrastructure). We do not sell, rent or otherwise disclose your data to advertising networks.

International transfers

Google Analytics, Cloudflare and hCaptcha are US-based providers. Personal data transferred to them outside the European Economic Area is protected, where the provider is certified, under the EU–US Data Privacy Framework, and in all cases by the European Commission's Standard Contractual Clauses supplemented by the provider's transfer-impact assessment. No data is transferred to jurisdictions that do not benefit from an adequacy decision or appropriate safeguards.

Retention periods

Contact-form messages are retained for up to 36 months from the last exchange with you, unless a commercial relationship extends that period. Consent audit logs are retained for 5 years, in line with the CNIL's recommended practice for proving valid consent. Generic technical server logs are rotated every 12 months. Google Analytics data follows the 14-month retention window configured in the GA4 property.

Security measures

The site is served exclusively over HTTPS with TLS 1.2+. Forms are protected by CSRF tokens, by per-IP rate limiting and by captcha verification. Access to the mail system follows least-privilege principles. The operating system and application dependencies receive periodic security updates. We monitor for abusive patterns in the anti-abuse logs.

Your rights

Under the GDPR and the French Loi Informatique et Libertés (Act No. 78-17 of 6 January 1978 as amended) you have the right to: access your personal data, have it rectified, have it erased, restrict its processing, object to processing based on our legitimate interest, withdraw your consent at any time, receive a portable copy of the data you have provided, and issue directives on what happens to your data after your death. Navex Marina does not take automated decisions producing legal effects concerning you.

How to exercise your rights

Send an email to info@navexmarina.es describing your request. For sensitive requests we may ask for reasonable proof of identity before acting. We reply within one month of receipt; the deadline may be extended by a further two months when strictly necessary, in which case we inform you and explain the reason.

Right to lodge a complaint

If you consider that your rights are not respected you may lodge a complaint with the French supervisory authority: Commission Nationale de l'Informatique et des Libertés (CNIL) — 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr. Residents of Spain may alternatively file a complaint with the Spanish Agencia Española de Protección de Datos (AEPD) at aepd.es. You may also seek judicial remedy before the competent courts.

Minors

This website is not intended for children under 16. We do not knowingly collect personal data from minors without parental authorisation. If you believe that a minor has submitted data to us, please contact us at info@navexmarina.es and we will delete the record without delay.

Changes to this policy

We may update this policy to reflect changes to the service, to our processors or to applicable law. The "last updated" date at the top of the page always reflects the version in force. Material changes will be signalled on the home page before they take effect.