Legal Notice and Privacy Policy

Privacy Policy

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (OJEU L 119/1, 04-05-2016) (hereinafter GDPR) provides a modernized and accountability-based framework for data protection in Europe.

In this regard, Article 12 of the GDPR, under the heading "Transparency of information, communication and procedures for exercising the data subject's rights", establishes the following in paragraph 1:

The controller shall take appropriate measures to provide the data subject with any information referred to in Articles 13 and 14, as well as any communication pursuant to Articles 15 to 22 and 34 concerning processing, in a concise, transparent, intelligible and easily accessible form, in clear and plain language, in particular any information specifically addressed to a child. The information shall be provided in writing or by other means, including, where appropriate, by electronic means. Where requested by the data subject, the information may be provided orally, provided that the identity of the data subject is proven by other means.

In order to make compatible the greater demand for information introduced by the GDPR and the conciseness and comprehension in the way it is presented, the Data Protection Authorities recommend adopting an information model by layers or levels.

The multilevel information approach consists of the following:

  • Present basic information at a first level, in summary form, at the same time and in the same medium in which the data are collected.
  • Refer to the additional information on a second level, where the rest of the information will be presented in detail, in a medium more suitable for its presentation, comprehension and, if desired, archiving.

 Responsible for the treatment NATEEVO NATEEVO DIGITAL, S.L.

Address of the person in charge Avda/ de Europa 1, edificio B, CP 28108, Alcobendas (Madrid)

Purpose Your data will be used in order to attend your requests and provide you with our services.

Advertising We will only send you advertising with your prior authorization, which you can provide us through the corresponding box established for this purpose.

Legitimation We will only process your data with your prior consent, which you can provide us with by ticking the corresponding box provided for this purpose.

Addressees In general, only duly authorized personnel of our entity may have knowledge of the information we request from you.

Rights You have the right to know what information we hold about you, correct it and delete it, as explained in the additional information available on our website.

Additional information More information in the section "YOUR DATA SAFE". of our website.



Information in compliance with personal data protection regulations.

In Europe and Spain there are data protection regulations designed to protect your personal information that are mandatory for our company.

Therefore, it is very important to us that you fully understand what we are going to do with the personal data we ask you for.

Thus, we will be transparent and give you control of your data, with simple language and clear choices that allow you to decide what we will do with your personal information.

Please do not hesitate to ask us if you have any questions after reading this information.

Thank you very much for your cooperation.

  • Who are we?
    • Our name: NATEEVO DIGITAL, S.L.
    • Our CIF / NIF: B-80891856
    • Our core business: Full Commerce Agency
    • Our address: Avda/ de Europa 1, edificio B, CP 28108, Alcobendas (Madrid)
    • Our contact phone number: + 916 623 404
    • Our contact e-mail address:
    • Our website:
    • For your confidence and security, we inform you that we are an entity registered in the following Mercantile Register / Public Registry: B-80891856

We are at your disposal, do not hesitate to contact us.

  • What are we going to use your data for?

In general, your personal data will be used to relate with you and to provide you with our services.

They may also be used for other activities, such as sending you advertising or promoting our activities.

  • What data will we use?

The data that NATEEVO treats as a consequence of the interactions made by the user through our web page come from the following sources:

  • Data provided by the user by filling in the forms made available by NATEEVO, or that the user authorizes the social networks to provide NATEEVO when using the social network connectors to register, by filling in the spaces made available for the participation in promotions managed by VASS, by sending e-mails or by any other means by which the user communicates with VASS.
  • Data generated as a consequence of the navigation and use by the user of NATEEVO's webs.
  • Data generated as a consequence of the development, processing and maintenance of the relationship established between the user and NATEEVO.
  • Third-party data provided by the user.
  • Data obtained from external sources (e.g., social networks, etc.).

VASS may process personal data of the following types, depending on the relationship established with the user:

  • Identifying data (e.g. first and last name, e-mail address, postal address, telephone number, IP address, image, etc.).
  • Data on personal characteristics and social circumstances (e.g., age, date of birth, tastes, hobbies and lifestyle, etc.).
  • Navigation and location data (e.g. use of VASS web pages, sections visited, data that the user provides through NATEEVO networks by indicating his/her location, etc.)
  • Other types of data. Exclusively in case the user registers through the social connectors of social networks, the types of data that the user has made public through the social network in question and that the user has consented to be accessed and processed by NATEEVO will be processed.


  • Why do we need to use your data?

Your personal information is necessary for us to be able to relate to you and to be able to provide you with our services. In this sense, we will put at your disposal a series of boxes that will allow you to decide in a clear and simple way about the use of your personal information.


  • Who will know the information we ask for?

In general, only duly authorized personnel of our entity may have knowledge of the information we request from you.

Similarly, those entities that need to have access to your personal information so that we can provide you with our services may have knowledge of your personal information. Thus, for example, our bank will know your data if the payment of our services is made by credit card or bank transfer.

Likewise, those public or private entities to which we are obliged to provide your personal data in order to comply with any law will have knowledge of your information. To give you an example, the Tax Law requires us to provide the Tax Agency with certain information on economic operations that exceed a certain amount.

In the event that, apart from the aforementioned cases, we need to disclose your personal information to other entities, we will request your prior permission through clear options that will allow you to decide in this regard.


  • How will we protect your data?

We will protect your data with effective security measures based on the risks associated with the use of your information.

To this end, our entity has approved a Data Protection Policy and annual controls and audits are carried out to verify that your personal data is secure at all times.


  • Will we send your data to other countries?

In the world there are countries that are safe for your data and others that are not so safe. For example, the European Union is a safe environment for your data. Our policy is not to send your personal information to any country that is not safe from the point of view of data protection.

In the event that, in order to provide you with the service, it is essential to send your data to a country that is not as secure as Spain, we will always request your prior permission and we will implement effective security measures to reduce the risks of sending your personal information to another country.


  • How long will we keep your data?

We will retain your data for the duration of our relationship and as long as we are required to do so by law. At the end of the applicable legal periods, we will dispose of it in a secure and environmentally friendly manner.


  • What are your data protection rights?

You can contact us at any time to find out what information we hold about you, rectify it if it is incorrect and delete it after our relationship has ended, where legally possible.

You also have the right to request a transfer of your information to another entity. This right is called "portability" and may be useful in certain situations.

To request any of these rights, you must make a written request to our address, along with a photocopy of your ID card, in order to identify you.

In our offices we have specific forms to request these rights and we offer you our assistance in filling them out.

To learn more about your data protection rights, you can consult the website of the Spanish Data Protection Agency (


  • Can you withdraw your consent if you change your mind at a later time?

You may withdraw your consent if you change your mind about the use of your data at any time.

Thus, for example, if you were once interested in receiving advertising of our products or services, but no longer wish to receive more advertising, you can let us know through the form of opposition to treatment available at the offices of our entity.


  • If you feel that your rights have been disregarded, where can you file a complaint?

In case you understand that your rights have been disregarded by our entity, you can file a complaint with the Spanish Data Protection Agency, through any of the following means:

Spanish Data Protection Agency
C/ Jorge Juan, 6

      • By telephone:

Tel. 901 100 099

Tel. 91 266 35 17

Filing a complaint with the Spanish Data Protection Agency does not entail any cost and the assistance of a lawyer or solicitor is not required.


  • Will we profile you?

It is our policy not to profile users of our services.

However, there may be situations where, for service delivery, marketing or other purposes, we need to profile information about you. An example might be the use of your purchase or service history to enable us to offer you products or services tailored to your tastes or needs.

In such a case, we will implement effective security measures to protect your information at all times from unauthorized persons seeking to use it for their own benefit.


  • Will we use your data for other purposes?

Our policy is not to use your data for purposes other than those we have explained to you. If, however, we need to use your data for other activities, we will always ask for your permission beforehand through clear options that will allow you to decide about it.



The Management / Governing Body of  NATEEVO DIGITAL, S.L. (hereinafter, the Data Controller), assumes the utmost responsibility and commitment to the establishment, implementation and maintenance of this Data Protection Policy, ensuring the continuous improvement of the Data Controller with the aim of achieving excellence in relation to compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (OJEU L 119/1, 04-05-2016), and Spanish personal data protection regulations (Organic Law, specific sectoral legislation and its implementing rules).

The Data Protection Policy of NATEEVO DIGITAL, S.L. rests in the principle of proactive responsibilityaccording to which the data controller is responsible for compliance with the regulatory and jurisprudential framework governing this Policy, and is able to demonstrate this to the competent supervisory authorities.

In this regard, the controller shall be governed by the following principles that should serve to all its personnel as a guide and frame of reference in the processing of personal data:

  1. Data protection by design: the controller shall implement, both at the time of determining the means of processing and at the time of the processing itself, appropriate technical and organizational measures, such as pseudonymization, designed to effectively implement data protection principles, such as data minimization, and to integrate the necessary safeguards into the processing.
  2. Data protection by default: the controller shall implement appropriate technical and organizational measures to ensure that, by default, only personal data that are necessary for each of the specific purposes of the processing are processed.
  3. Data protection in the information life cycle: measures to ensure the protection of personal data shall be applicable throughout the entire life cycle of the information.
  4. Loyalty, loyalty and transparency: personal data will be processed in a lawful, fair and transparent manner in relation to the data subject.
  5. Limitation of purpose: personal data will be collected for specified, explicit and legitimate purposes and will not be further processed in a way incompatible with those purposes.
  6. Data minimization: personal data will be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
  7. Accuracy: personal data shall be accurate and, if necessary, kept up to date; all reasonable steps shall be taken to ensure that personal data that are inaccurate with respect to the purposes for which they are processed are promptly deleted or rectified.
  8. Limitation of the conservation period: personal data will be kept in a form that allows the identification of the data subjects for no longer than is necessary for the purposes of the processing of the personal data.
  9. Integrity and confidentiality: personal data will be processed in such a way as to ensure adequate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, by implementing appropriate technical or organizational measures.
  10. Information and training: One of the keys to guarantee the protection of personal data is the training and information provided to the personnel involved in the processing of such data. During the life cycle of the information, all personnel with access to the data will be properly trained and informed about their obligations in relation to compliance with data protection regulations.

The Data Protection Policy of NATEEVO, S.L. is communicated to all staff of the controller and made available to all interested parties.

Consequently, this Data Protection Policy involves all the staff of the data controller, who must know and assume it, considering it as their own, each member being responsible for applying it and verifying the data protection rules applicable to their activity, as well as identifying and providing the opportunities for improvement that they consider appropriate with the aim of achieving excellence in relation to their compliance.

This policy will be reviewed by the Management / Governing Body of the company. NATEEVO, S.L.The company's data protection policy shall be updated as many times as deemed necessary, in order to comply, at all times, with the provisions in force regarding the protection of personal data.

Acceso al portal ético