Last updated: 29 September 2026.
Controller
NovoDistribuciones Online SL, NRT L-714617-K. Contact for privacy matters and rights: [email protected].
Verified data and purposes
- Browsing and security: IP address and technical data recorded by the server when handling a request, such as the date, requested URL, response, browser and referrer. These data are used to serve the website, diagnose errors, maintain security and prevent abuse.
- Search: entered terms are processed to display results and may appear in technical request logs.
- Contact: subject, email address, message and any file the user chooses to attach. These are used to answer and follow up the enquiry.
- User account: title, first name, surname, email address and protected password, together with date of birth and optional preferences when provided. These data are used to create and manage the requested access and selected preferences.
- Affiliate redirect: random reference, product, variant, quantity, seller and click date. These are used to perform the redirect and, where applicable, reconcile purchase attribution. This record contains no payment details, buyer name or buyer address.
- Optional preferences: when a user voluntarily selects a newsletter or offers option, that choice is stored. It is not enabled by default.
Legal basis
Secure browsing and technical log retention are based on the need to operate and protect the service. Enquiries and accounts are processed to handle the user's request and provide the requested functionality. Optional communications and any non-essential technology are based on a voluntary choice that may be withdrawn.
Retention
Data are retained only for as long as needed for the stated purpose and subsequently for any restriction periods required by applicable obligations. An account is retained while active or until deletion is requested, without prejudice to any legally required restriction. Technical logs are rotated according to operational and security settings.
Recipients and external websites
Data may be processed by technical providers strictly required for hosting and email, subject to the applicable safeguards. Information from a form or account is not disclosed to the seller merely because a link is selected. After entering an external store, that seller will process browsing data and any information supplied by the user under its own policy.
NovoDix does not receive payment data, the buyer's address or other buyer personal data from the external cart through the attribution reference described above. If the integration changes, this policy will be updated before any new processing is enabled.
Rights
Users may request access, rectification, erasure, objection, restriction and portability where applicable, and may withdraw consent, by writing to [email protected]. Proof of identity will be requested only when necessary.
Users may also lodge a complaint with the Andorran Data Protection Agency and, where applicable to their situation, with the competent data protection authority in the European Union.
Automated decisions
No automated decisions with legal or similarly significant effects are made about users. General catalogue ordering is explained in the comparison service terms.
Registered address
Carretera del Plans 65, Escas, La Massana AD400, Andorra.
Legal bases and service providers
Accounts and pre-contractual requests are processed to provide the requested service. General enquiries, security and the defence of claims rely on our legitimate interests in supporting users and protecting the service. Legal obligations are processed as required by law; optional marketing requires consent, which may be withdrawn at any time.
We use Google Cloud hosting with a server in Belgium, Google Workspace for email, and Cloudflare for content delivery, security and website measurement. Cloudflare Web Analytics receives visit and performance data; according to its documentation, it does not use cookies or local storage to identify users. International services may involve processing outside Andorra or the EEA: such transfers must rely on an adequacy decision or valid safeguards, including standard contractual clauses, as applicable. You may request information about specific safeguards at [email protected].
Required fields are necessary to provide the requested function; without them we may be unable to do so. Withdrawing consent does not affect prior lawful processing. Andorran data protection law and, where applicable, the GDPR apply.