Data controller
- Trading name
- Nexe Labs
- Owner
- Marc Alonso Melich
- NRT
- F-385781-G
- Address
- Plaça Bartomeu Rebés Duran, 5, ground floor, unit 59. AD500 Andorra la Vella, Andorra.
- Contact
- [email protected]
- Privacy
- [email protected]
Processing is governed by Andorra’s Qualified Law 29/2021 of 28 October on personal data protection, and any other applicable rules.
When you contact us
We use your name, email, message and, if provided, information about your company or website to respond to your enquiry and assess your proposed project. Please do not include passwords, identity documents or sensitive data in your message.
The basis for handling a service request or preparing a proposal is taking pre-contractual steps at your request. For other enquiries, the basis is our legitimate interest in responding to communications you send us. The form checkbox confirms that you have read this information; it does not subscribe you to advertising.
Your name, email and message are required to submit the form. Your company or website is optional.
If you ask us for a free audit or book a place in a campaign, the message is optional. For the audit we need your website address: we review it and email you the result.
If you arrive through a campaign link, we store that campaign’s label with your enquiry, for example “meta” or “google”, to know which ads and channels bring us enquiries. It does not include your browsing or the ads’ click identifiers.
Andorra Digital grants notification
If you sign up, we use your email and, if you provide it, your name to confirm your subscription and notify you when the next Andorra Digital grant application round is announced. The legal basis is your consent, which we collect through a specific checkbox and email confirmation. We won’t subscribe you to other communications.
Your email is required and your name is optional. We record the language, request and confirmation dates, and consent version to manage the list and document your authorisation. Confirmation links expire after 48 hours.
You can withdraw your consent using the unsubscribe link in the email or by writing to [email protected]. We will retain your subscription until we send the notification about the next application round or until you unsubscribe. Afterwards, we will only retain, with restricted access, the information needed to document your consent and withdrawal or address potential liabilities for the applicable periods.
Technical data and security
The server may log connection data such as IP address, date, requested path and browser information to serve the website, detect incidents and prevent abusive access. The basis is our legitimate interest in maintaining the security and operation of the service.
Only with your permission do we use Google Analytics and Microsoft Clarity to understand how the website is used, and Meta to measure campaigns. You can accept or reject each purpose under “Cookie settings”.
If you accept advertising and submit the contact form, our server also tells Meta that an enquiry has been made, with your IP address, your browser and the identifiers in its cookies. We do not send it your name, email or message.
We do not make automated decisions with legal effects on people who contact us. You can find more information in our cookie policy.
Data retention
We will retain enquiries for as long as needed to respond and provide the requested follow-up. If you commission a service, the necessary information will be used to manage that relationship. Afterwards, we will retain only the information needed to comply with legal obligations or address potential liabilities, with restricted access for the applicable periods.
- Technical and security logs: the retention criterion is the time needed to detect and resolve incidents, prevent abuse and verify that the service operates correctly. If a log is needed to investigate an incident or address a legal liability, retention is limited to that purpose and the applicable period.
- Google Analytics: our configuration retains event data for 2 months and user data for 14 months. The user data retention period resets with new activity. These settings do not limit aggregated statistical reports in the same way.
- Microsoft Clarity: according to its documentation, recordings are retained for 30 days; sessions marked as favourites or labelled, and heatmaps, are retained for 9 months.
- Meta: retention of received data depends on the processing purpose, the type of information and the security and legal compliance needs described in its privacy policy. A cookie expiring does not mean that data already received by Meta is deleted.
See the retention details for Google Analytics, Microsoft Clarity and Meta. Withdrawing analytics or advertising permission stops future collection from this website; you can exercise your rights to request deletion of data already processed.
You can request deletion of your data at [email protected].
Providers and external services
To provide our services, we use providers of web hosting, form delivery, and email hosting and management. They may access the data necessary for these tasks. We do not sell your data. Data may also be disclosed to authorities where required by law.
- Website hosting: Cloudflare Pages serves the pages and processes the technical data needed for the website to function securely.
- Form delivery: Resend (Plus Five Five, Inc.) transmits the name, email, company or website and message you provide to our contact inbox, [email protected].
- Andorra Digital notification list: Resend manages confirmed contacts and confirmation and notification emails. Cloudflare stores consent records and the data needed to confirm subscriptions and process unsubscribes.
International data processing
The following services may process data outside Andorra, including in the United States and other countries where their infrastructure or subcontractors operate. Analytics and advertising tools receive data only when you authorise their purpose.
- Cloudflare, Inc.: hosting and security through an international network. Its data processing agreement provides for standard contractual clauses for transfers within its scope. Its subprocessor list details the providers and their locations.
- Resend (Plus Five Five, Inc.): email delivery and notification list management, with primary processing in the United States. Its data processing agreement incorporates standard contractual clauses in the circumstances it specifies.
- Google Analytics (Google Ireland Limited / Google LLC):browsing and measurement data, which may be processed in the United States and other countries. Google describes its use of adequacy decisions and, where applicable, standard contractual clauses in its data transfer frameworks.
- Microsoft Clarity (Microsoft Corporation): browsing analysis with storage in the United States. Microsoft acts as a controller of the data it receives through Clarity. Its privacy statement explains transfer destinations and safeguards, including standard contractual clauses.
- Meta Pixel (Meta Platforms Ireland Limited / Meta Platforms, Inc.): advertising measurement that may involve processing in the United States and other countries. You can consult the destinations and safeguards in its privacy policy and its data transfer terms.
Standard contractual clauses establish obligations to protect transferred data. The application of an adequacy decision or another safeguard depends on the recipient, processing and applicable law; it does not mean that every transfer to a country is authorised. You can request information about the safeguards applicable to your data and how to obtain a copy by writing to [email protected].
Links to other services
WhatsApp and Calendly open only when you click their links. If you use them, the policies of the following also apply: WhatsApp and Calendly. Their content is not embedded in this website.
Your rights
You can request access, rectification, erasure, objection, restriction of processing and portability, where applicable, by writing to [email protected]. Where processing is based on your consent, you may withdraw it without affecting its previous lawfulness. We will request additional information to verify your identity only where necessary.
You can also lodge a complaint with the Agència Andorrana de Protecció de Dades (APDA).
Changes to this policy
We will update this page if the website’s processing or services change. The review date appears at the top. Changes requiring additional information or consent will be communicated before the new processing begins.