Privacy Policy

NATCOB is a trading name of BCB Engineering, S.L., which is the controller of your personal data:

Company

BCB Engineering, S.L.

Tax ID (NIF)

B93912319

Registered address

DS Sa Bassa Roja, 07820 Sant Antoni de Portmany (Illes Balears), Spain

Email

hello@natcob.com

For any question about this policy or your personal data, contact us at the email address above. See also our Legal Notice.

Information you give us. When you use our contact form, we collect your name, email address, the type of inquiry you select, and the content of your message. If you email us directly, we receive your email address and whatever you choose to include.

Information collected automatically. When you browse the site, we and our service providers collect technical data such as your IP address, browser and device type, pages visited, referring page, and approximate location derived from your IP address. We also collect performance metrics and, if something breaks, error diagnostics.

We do not knowingly collect special categories of personal data, and we ask that you do not include such information in your messages.

• To respond to your inquiry and, where relevant, to take steps at your request before entering into an agreement (for example, discussing an acquisition, investment, or partnership). Legal basis: steps prior to a contract and our legitimate interest in answering business inquiries (Art. 6(1)(b) and (f) GDPR).
• To keep the site secure, prevent spam and abuse of the contact form, and fix technical errors. Legal basis: our legitimate interest in operating a secure, reliable website (Art. 6(1)(f) GDPR).
• To understand how the site is used and improve its content and performance. Legal basis: our legitimate interest for cookieless, aggregated statistics (Art. 6(1)(f) GDPR), and your consent for analytics cookies and session replays (Art. 6(1)(a) GDPR).
• To comply with legal obligations and to establish, exercise, or defend legal claims. Legal basis: legal obligation and legitimate interest (Art. 6(1)(c) and (f) GDPR).

We do not sell your personal data, and we do not use it for automated decision-making or profiling that produces legal or similarly significant effects. We will not add you to marketing lists without your explicit consent.

When you first visit the site, we ask whether you accept non-essential cookies. Nothing non-essential is loaded until you choose, and rejecting is as easy as accepting.

• Always active (no consent needed): Vercel Analytics and Speed Insights, which do not use cookies or store IP addresses, and a record of your cookie choice kept in your browser's local storage for 12 months.
• Only if you accept: Google Tag Manager and the analytics tags it loads (such as Google Analytics, which sets cookies beginning with _ga that last up to 2 years), and Sentry session replays, which use your browser's session storage.

You can change your choice at any time using Cookie Settings in the footer. If you withdraw consent, we remove Google Analytics cookies and stop loading these tools. You can also block or delete cookies through your browser settings.

We share personal data only with service providers that process it on our behalf, under data processing agreements, and only as needed to provide their services:

We may also disclose personal data to professional advisers, to a buyer or successor in the event of a corporate transaction, or where required by law or by a competent authority.

Some of our providers are located, or have sub-processors, outside the European Economic Area, notably in the United States. When personal data is transferred outside the EEA, we rely on an adequacy decision (such as the EU–US Data Privacy Framework, for certified providers) or on the European Commission's Standard Contractual Clauses, together with additional safeguards where appropriate.

• Contact inquiries: for as long as needed to handle your inquiry and any resulting relationship, and then for up to 24 months unless a longer period is required by law or to defend legal claims.
• Rate-limiting records: stored only as a one-way hash and automatically deleted when the one-hour limit window expires.
• Error diagnostics and session replays: up to 90 days in Sentry.
• Analytics cookies: up to 2 years in your browser (see section 4), unless you delete them or withdraw consent. Vercel Analytics keeps only aggregated, non-identifying statistics.
• Your cookie choice: 12 months, after which we ask again.

Under the GDPR, you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to data portability. Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, email hello@natcob.com. We will respond within one month. We may ask you to verify your identity before acting on your request.

If you believe your data has been handled unlawfully, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or the supervisory authority in your country of residence.

We use appropriate technical and organizational measures to protect your personal data, including encrypted connections (HTTPS), access controls, input validation, and abuse protection on our forms. No method of transmission or storage is completely secure, but we work to protect your data and to address any incident promptly.

Our website is intended for business audiences and is not directed at children under 16. We do not knowingly collect personal data from children.

We may update this policy from time to time. The “last updated” date at the top of this page shows when it was last revised. Material changes will be highlighted on this page.

Questions about this policy? Email hello@natcob.com or use our contact form.