Draft — pending legal review. This text has not been reviewed by legal counsel yet and may change.
Legal
Privacy policy
How Nomadic handles the personal data it receives through its forms and site analytics, and how to exercise your rights under Argentine Law 25,326 and the GDPR.
Last updated:
Contents0
This policy explains what personal data we receive when you visit nomadic.agency or get in touch, what we use it for, who we share it with and how you can exercise your rights. It is written to comply with Argentina's Personal Data Protection Law No. 25,326 and its related regulations and, for visitors from the European Union or the European Economic Area, with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
Who is responsible for your data
The data controller is [RAZÓN SOCIAL] ("Nomadic"), with registered address at [DOMICILIO], Argentina.
For any question about this policy or your data, write to hola@nomadic.agency with "Privacy" in the subject line.
Database registered with Argentina's National Database Registry: [N.º DE INSCRIPCIÓN, si corresponde].
What data we receive
Data you give us. When you fill in a form on the site (contact or diagnosis request) we receive:
- Your name.
- Your email address.
- Your company and, if you add them, your brand, website or business category.
- The message you write to us.
Please don't include sensitive data in your message (for example, health data, ethnic origin, or political or religious opinions). We don't need it to reply.
Browsing data. If you accept it, we use Google Analytics 4 to measure how the site is used: pages visited, time on page, device and browser type, approximate location (city or country level) and the source that brought you here. Google Analytics 4 does not log or store full IP addresses. Cookie details are in our Cookie policy.
Server technical data. Like any website, our hosting service logs technical data for each visit (IP address, date and time, requested page, browser) to deliver the site and protect it from abuse.
What we use it for and on what legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Reply to your enquiry and, if you ask, prepare a diagnosis or proposal | Form data | Your consent when you submit it (s. 5, Law 25,326) and, for EU visitors, steps taken at your request prior to a contract (Art. 6(1)(b) GDPR) |
| Follow up commercially on that same enquiry | Form data | Your consent (Law 25,326) and our legitimate interest in replying to people who contact us (Art. 6(1)(f) GDPR) |
| Measure site usage to improve it | Browsing data | Your consent, which you can withdraw at any time (Art. 6(1)(a) GDPR) |
| Keep the site running and secure | Server technical data | Legitimate interest in site security (Art. 6(1)(f) GDPR) |
We don't use your data for automated decisions that affect you, we don't sell it and we don't share it with third parties for advertising.
If you'd like to receive news from Nomadic by email, we'll ask you separately. You can unsubscribe at any time using the link in every email.
How long we keep it
- Form enquiries: for as long as the conversation lasts and up to 24 months after the last contact, unless we start working together; in that case, for the duration of the relationship plus the periods required by accounting, tax or legal-defence rules.
- Google Analytics data: the retention period configured in the tool, which does not exceed 14 months.
- Server technical logs: the period set by the hosting provider for its operations and security logs.
After those periods, we delete or anonymise the data.
Who we share it with
Only with providers we need to run the site and reply to you, who process data on our behalf and under our instructions:
- Google Cloud and Firebase Hosting (Google LLC / Google Cloud): site and infrastructure hosting.
- Google Analytics 4 (Google LLC / Google Ireland Ltd.): web analytics, only if you accepted it.
- Email and sales-management providers we use to receive and answer enquiries.
We may also disclose data when required by law or by a competent authority.
International transfers
Some of these providers process data outside Argentina and the European Union, mainly in the United States. Where the destination country does not offer an adequate level of protection according to the Argentine authority or the European Commission, the transfer relies on contractual clauses that guarantee an equivalent level of protection (including the model clauses approved by Argentina's Agency for Access to Public Information and by the European Commission) and, where applicable, on the EU-U.S. Data Privacy Framework.
Your rights
If you are in Argentina (Law 25,326) you can ask us to access, rectify, update or delete your data, and to keep it confidential. We answer access requests within 10 calendar days, and rectification, update or deletion requests within 5 business days of receiving them.
The data subject has the right to access their personal data free of charge at intervals of no less than six months, unless a legitimate interest is shown, in accordance with section 14(3) of Law No. 25,326. The Agency for Access to Public Information, as the supervisory authority under Law No. 25,326, is empowered to handle complaints and claims filed by anyone whose rights are affected by non-compliance with personal data protection rules.
If you are in the European Union or the European Economic Area (GDPR) you have the rights of access, rectification, erasure, objection, restriction of processing and data portability, and you can withdraw your consent at any time without affecting prior processing. You can also lodge a complaint with your local supervisory authority (in Spain, the Agencia Española de Protección de Datos, aepd.es).
EU representative (Art. 27 GDPR): [REPRESENTANTE EN LA UE, si corresponde].
How to exercise them: write to hola@nomadic.agency with "Privacy" in the subject line, telling us which right you want to exercise. If needed, we'll ask you to verify your identity so we don't hand your data to someone else.
Security
We apply reasonable technical and organisational measures to protect data: encrypted connections (HTTPS) across the site, access limited to the team members who need it, and providers with recognised security standards. No system is infallible; if we detect an incident affecting your data, we'll let you know and notify the authority where the law requires it.
Minors
This site is aimed at businesses and professionals. We don't knowingly collect data from people under 18; if we find out we did, we delete it.
Changes to this policy
We may update this policy to reflect changes to the site, our providers or the law. The current version is always published on this page with its update date and, if the change is significant, we'll flag it on the site.