Privacy policy

Last updated: September 2026

This policy explains what happens to personal data when you contact ConverNova or send us a specification. It is written to satisfy Articles 13 and 14 of the General Data Protection Regulation, Regulation (EU) 2016/679.

Who is responsible for your data

Data controller

ConverNova SL

Tax identification number

ESB22492342

Address

Calle Levante 18, 28036 Madrid, Spain

Contact for data protection

[email protected]

ConverNova has not appointed a Data Protection Officer, and is not required to, because it does not carry out large scale monitoring or process special categories of data.

What we collect

Only what you choose to send us. Through the specification form that is:

• Your first name and, if you give it, your last name.
• Your email address, and your phone number if you provide one.
• Your company and address, if you provide them.
• The technical content of your enquiry: topology, operating point, quantities, and whatever you write in the free text field.
• Any files you attach, such as waveforms, schematics or specifications.

If you write to us by email instead, we receive whatever your message contains. If you use the chat window on this site, we receive the conversation and whatever contact details you choose to give in it.

Our hosting provider keeps standard server logs, which include IP addresses, for security and diagnostics. We do not use them to build any profile of you.

If, and only if, you accept the cookie notice, we also collect anonymous statistics about which pages are visited. That is covered under Cookies and analytics below.

Why we use it, and on what legal basis

• To answer your enquiry and prepare a design proposal or quotation. Legal basis: taking steps at your request before entering into a contract, Article 6(1)(b).
• To keep a record of enquiries and quotations, and to follow up on one you sent us. Legal basis: our legitimate interest in running and defending our business, Article 6(1)(f).
• To protect the form against automated abuse. Legal basis: our legitimate interest in keeping the service usable, Article 6(1)(f).
• To count visits and see which pages are actually useful. Legal basis: your consent, Article 6(1)(a), given or refused in the cookie notice and withdrawable at any time. Nothing is measured until you accept.
• To meet accounting and tax obligations once an enquiry becomes an order. Legal basis: compliance with a legal obligation, Article 6(1)(c).

We do not send marketing email on the basis of an enquiry, and there is no automated decision making or profiling of any kind.

The confidentiality of what you send us

A specification is commercially sensitive, and we treat it that way. Your files and operating points are used to answer your enquiry and are not shared outside ConverNova, are not used as an example, and are not published. The form posts directly to our own server rather than through a third party form service, specifically so that your files do not pass through anyone else's system.

Who else can see it

We do not sell or rent personal data, and we do not share it for anyone else's marketing. It reaches these parties only as far as running the service requires:

• Our hosting and email provider, BanaHosting, which stores the site and delivers our email as a data processor.
• Cloudflare, Inc., which sits in front of the site as a content delivery network and provides the Turnstile anti abuse check on the form. It processes your IP address and basic request information for security purposes.
• HubSpot, provided by HubSpot, Inc., which is two things here: the system in which an enquiry is recorded so that it can be followed up and the history of a project stays together, and the live chat window on this site. If you use the chat, the conversation is stored there.
• Our external accountants, once an enquiry becomes an order, for invoicing and bookkeeping. They see what invoicing requires and nothing more.
• Google, but only if you accepted analytics cookies, and only the pages you looked at together with a random identifier. Google never receives your name, your enquiry or your files, and the analytics data is not linked to anything you send us through the form.
• Public authorities, where the law requires us to disclose something.

Transfers outside the European Economic Area

Our HubSpot account is hosted in HubSpot's European region, so the enquiries and chat conversations it holds are stored in the European Union. HubSpot, Inc. is nonetheless a United States company and access from there cannot be ruled out, so the safeguards below apply to it as well.

These providers are established in the United States and may process data outside the EEA:

• Cloudflare, Inc., which delivers this site and runs the anti abuse check on the form. It processes your IP address and basic request information.
• HubSpot, Inc., which provides the enquiry records and the chat, stored in its European region as described above.
• Google, only where you have accepted analytics. Google Ireland Limited acts as our processor and Google LLC in the United States as its sub processor.

Each of them relies on the European Commission's Standard Contractual Clauses and on its certification under the EU–US Data Privacy Framework. Write to us if you would like details of the safeguards that apply to your data.

Everything else stays here. The typefaces, images and video on this site are served from our own domain, and the specification form posts to our own server, so reading a page or sending us a file does not hand your data to anyone beyond the two providers above and our hosting company.

How long we keep it

• Enquiries that do not lead to an order: 24 months from our last contact with you.
• Enquiries that lead to an order: for the life of the commercial relationship, and afterwards for the periods required by Spanish commercial and tax law, which is generally six years for accounting records and four years for tax.
• Server logs: the retention period applied by our hosting provider, typically a few weeks.

Your rights

You can ask us at any time to:

• Confirm whether we hold personal data about you, and give you a copy.
• Correct anything that is wrong or incomplete.
• Delete it, where we no longer need it for the purpose you sent it for.
• Restrict how we use it, or object to processing based on legitimate interest.
• Receive it in a portable, machine readable format.

Write to [email protected] and we will answer within one month. We may ask you to confirm your identity first, so that we do not hand your data to somebody else.

If you believe we have handled your data badly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos, at www.aepd.es. We would rather you told us first, so we can put it right.

Cookies and analytics

Nothing is stored in your browser until you agree to it. There is no advertising, no remarketing, no profiling and nothing sold to anyone.

The first time you arrive, a small notice asks whether we may count your visit using Google Analytics. Until you accept, no analytics cookie exists and the Google script is not even downloaded. If you decline, the site behaves exactly the same; we simply do not know you were here.

If you accept

Cookie	Set by	What it does	Expires
_ga	Google Analytics	Tells one browser apart from another, so a return visit is not counted twice	2 years
_ga_<id>	Google Analytics	Keeps track of the current visit	2 years
__hstc	HubSpot	The main visit counter	6 months
hubspotutk	HubSpot	Recognises a returning browser	6 months
__hssc	HubSpot	Keeps track of the current visit	30 minutes
__hssrc	HubSpot	Notices that the browser was restarted	End of session

We have turned off Google Signals and ad personalisation, so this data is not used to build an advertising profile of you. Google Analytics truncates IP addresses before storing them.

The chat window

The chat is provided by HubSpot and is there whether you accept or decline. Until you accept, HubSpot is told that analytics consent has not been given, and it then sets no measurement cookie at all. We tested this rather than assuming it: before an answer is given, HubSpot leaves nothing in your browser.

If you actually open the chat and write to us, HubSpot sets messagesUtk, which keeps your conversation attached to you for six months so that a reply reaches the right person and you can pick the thread back up, plus two short lived ones remembering whether the window is open. Those exist because you asked for the chat, not to measure you, and they never appear if you do not use it.

Whether you accept or not

Your answer is remembered in your browser's local storage, under cn-cookie-consent, so that you are not asked again on every page. It is a record of your own choice, it identifies nobody, it never leaves your device, and it is kept for twelve months, after which we ask again. This is strictly necessary to respect your decision and needs no consent of its own.

Changing your mind

Use Cookie Settings at the bottom of any page. Declining after having accepted also deletes the analytics cookies. You can of course delete cookies from your browser at any time, and browser settings let you block them entirely.

Security

The site is served over HTTPS, the specification form runs on our own server, and attachments are delivered straight to our engineering mailboxes rather than being held in a third party system. No transmission over the internet is ever completely secure; if a specification is unusually sensitive, tell us and we will agree a route that suits it.

Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top of it.