Privacy policy
Last updated: November 2026
This policy explains how we process the personal data we receive through this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).
1. Data controller
- Controller: Carlos Nicolás Novello
- Tax ID: X7237440F
- Address: Calle Filemón Losantos 3, 3.º derecha, 31560 Azagra, Navarra
- Contact email: niko@magicraft3d.com
2. Data we process
The data you give us in the contact form: name, company, email, phone (optional) and the content of your message. Also anything you send us by email or WhatsApp, including drawings, photos or other files.
3. Purpose and legal basis
- To reply to your request and prepare a quote. The legal basis is your consent, given by ticking the box on the form, and taking steps at your request before entering into a contract (article 6.1.a and 6.1.b GDPR).
- If we enter into a business relationship, to manage the order and meet the related legal obligations (article 6.1.b and 6.1.c GDPR).
We do not make automated decisions or create profiles with your data.
4. Retention
We keep request data for as long as needed to handle it and, if no order follows, for a maximum of 12 months. Data linked to an order is kept for the periods required by legal, tax and commercial obligations. Web3Forms, our form provider, may separately keep a copy of each submission for up to three years from receipt, unless it is deleted sooner.
5. Recipients and processors
We do not share your data with third parties unless legally required. We use these providers to run the service:
- Web3Forms, a service of Web3Creative (India), which receives and stores form submissions and forwards them to our email. To filter spam, it may share your IP address and email with CleanTalk and Akismet (Automattic).
- Website hosting: Netlify, Inc. (United States).
- Our email provider.
- WhatsApp, if you choose to contact us that way. WhatsApp's own terms also apply as an independent service.
6. International transfers
Some of these providers process data outside the European Economic Area:
- Web3Creative operates from India and uses providers that may process data in several regions, including the United States. These transfers rely on the standard contractual clauses adopted by the European Commission (Implementing Decision (EU) 2021/914), incorporated into its data processing agreement.
- Netlify, Inc. is based in the United States and states that it participates in the EU-U.S. Data Privacy Framework, so the transfer relies on the European Commission's adequacy decision for that framework.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to niko@magicraft3d.com. You can also withdraw your consent at any time, without affecting the lawfulness of earlier processing.
If you believe we have not handled your rights correctly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
8. Cookies
This website does not use cookies or tracking analytics tools. Fonts are served from the website itself, with no connection to external services.