Privacy Policy

1. Introduction

Noburo ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website at noburo.es and our services.

We comply with the EU General Data Protection Regulation (GDPR) and the Spanish Ley Orgánica de Protección de Datos Personales y garantía de los derechos digitales (LOPDGDD).

2. Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, and phone number when you sign up for our waitlist or contact us.
• Account information: credentials and profile details when you create an account.
• Tax and legal documents: identification documents, NIE, tax forms, and other paperwork you provide for our gestoria services.
• Usage data: IP address, browser type, pages visited, and interaction data collected automatically.
• Communication data: messages, inquiries, and support requests you send to us.

3. How We Use Your Data

We process your personal data for the following purposes:

• To provide and manage our gestoria services, including tax filings, visa applications, and administrative procedures.
• To manage your waitlist registration and notify you about our launch and updates.
• To communicate with you regarding your account, services, and support requests.
• To improve our website, services, and user experience through analytics.
• To comply with legal obligations under Spanish and EU law.

The legal bases for processing your data include: your consent, performance of a contract, compliance with legal obligations, and our legitimate interests in operating and improving our services.

4. Cookies

Our website uses cookies and similar technologies to enhance your experience. These include:

• Essential cookies: required for the website to function properly.
• Analytics cookies: help us understand how visitors interact with our website.
• Preference cookies: remember your settings and preferences.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our website.

5. Data Sharing

We do not sell your personal data. We may share your data with:

• Licensed tax advisors and legal professionals who verify and submit documents on your behalf.
• Spanish government agencies(e.g., Agencia Tributaria, Oficina de Extranjería) as required to complete your filings and applications.
• Service providers who help us operate our platform (e.g., hosting, email, analytics), bound by data processing agreements.
• Law enforcement or regulatory bodies when required by applicable law.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by law. Tax-related documents are retained for the minimum period required by Spanish tax law (generally 4 years from the filing date). Waitlist data is retained until our launch or until you request its deletion, whichever comes first.

7. Your Rights

Under GDPR and LOPDGDD, you have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data, subject to legal retention requirements.
• Right to data portability: receive your data in a structured, commonly used, machine-readable format.
• Right to restrict processing: request that we limit how we use your data.
• Right to object: object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent: withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at hello@noburo.es. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD).

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. All data is encrypted in transit (TLS) and at rest. Access to personal data is restricted to authorized personnel only.