Skip to content
Book a call
PRIVACY POLICY

Privacy policy

We explain what data we collect when you write to us, request a Nexus demo or apply for a position, what we use it for and how you can exercise your rights.

Last updated: October 1, 2026

1. Data controller

The controller of your personal data is:

  • Company name: Naka Labs S.L.
  • Tax ID (CIF): B75788034
  • Address: Paseo de la Castellana 95, 28046 Madrid (Spain)
  • Email: carlos@nakalabs.es

2. What data we process and why

We only process the data you give us or that is generated when you use the website, depending on each form:

  • Contact and quote requests: name, email, phone, company and the message you write. We use them to reply and prepare a proposal.
  • Nexus demo and demo dashboard: name, job title, email, phone, company, industry and company size. We use them to call you and tailor the demo to your business.
  • Careers: name, contact details, professional profile and the CV you attach. We use them to manage your application.
  • Newsletter and product waitlists: your email, to send you the information you ask for.
  • Browsing data: pages visited, source (UTM parameters, referrer) and usage events. They are added to the forms you submit and, if you accept analytics cookies, measured with Google Analytics 4.

3. Legal basis

The legal basis for each processing activity is:

  • Your consent (Art. 6.1.a GDPR), given by ticking the box on each form and by accepting analytics cookies. You can withdraw it at any time.
  • Taking pre-contractual steps at your request (Art. 6.1.b GDPR) when you ask for a quote or a proposal.
  • Our legitimate interest (Art. 6.1.f GDPR) in keeping the website secure and preventing automated form submissions.

4. Retention

We keep data for as long as the relationship or process you provided it for lasts and, afterwards, for the legal limitation periods of possible liabilities. Unsuccessful applications are kept for 12 months at most, unless you ask us to delete them sooner.

5. Recipients and processors

We do not sell your data. To provide the service we use suppliers acting as data processors under a contract pursuant to Art. 28 GDPR:

  • MongoDB Atlas: storage of requests and blog entries.
  • Resend: sending notification and confirmation emails.
  • Cloudflare R2: storage of attached CVs.
  • Vercel: hosting and delivery of the website.
  • Google Analytics 4: usage measurement, only if you accept analytics cookies.

Some of these providers may process data outside the European Economic Area. In that case they rely on adequacy decisions or on the European Commission's standard contractual clauses.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to carlos@nakalabs.es and stating the right you want to exercise. If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan 6, 28001 Madrid, www.aepd.es).

7. Security

We apply reasonable technical and organizational measures: encrypted connections, restricted access to data, file uploads through signed URLs and protection against automated form submissions.

8. Changes to this policy

We may update this policy to reflect legal or service changes. The date of the last update appears at the top of the page.