Privacy information
Last updated: 3 November 2026
This page explains how the data you send through the demo request form on nyamia.com is processed, in line with Article 13 of the General Data Protection Regulation (GDPR).
Data controller
Controller: Nyamia
Privacy contact email: farnausgar@gmail.com
What data is processed
What you enter in the form: full name, an email or a phone number (at least one of them), professional profile and, if provided, your practice name, approximate number of clients and message. Also the page language, the date of your consent and the version of this information you accepted.
Where your visit came from, when available: the campaign parameters in the address you arrived through (utm_source, utm_medium, utm_campaign, utm_content and utm_term) and the domain of the website you came from. Only the domain of the referring site is kept, never the full address.
To protect the form from abuse, a pseudonymous code derived from your IP address with a secret key (a keyed hash, which does not reveal the address without that key) and your browser identifier, cut to 200 characters, are also stored. The IP address itself is not stored with your request.
The hosting providers’ technical logs may record the full IP address of each request, as part of the normal operation and security of their service.
What it is used for
To reply to your demo request, arrange it and contact you about Nyamia. Each new request is notified to Nyamia by email so it can be answered.
Where the visit came from is used to learn which channels bring demo requests.
The IP code and the browser identifier are used only to limit the number of submissions and prevent abuse.
No automated decisions or profiling are carried out with this data.
Legal basis
Your consent (Art. 6(1)(a) GDPR), given by ticking the form checkbox. You can withdraw it at any time; this does not affect processing carried out before withdrawal.
Protecting the form from abuse is based on the legitimate interest in keeping the service secure, and recording where the visit came from on the legitimate interest in knowing which channels work (Art. 6(1)(f) GDPR).
How long it is kept
12 months from when the request is sent. After that it is deleted automatically. If you withdraw consent or ask for erasure earlier, it is deleted then. The same period applies to the copy of the notification email Nyamia receives.
Who else has access
The data is not shared with third parties. Only the following providers have access, as data processors acting on Nyamia’s behalf and solely to provide their service:
Vercel: website hosting and cookieless visit statistics.
Railway: the server that receives the form and the database where requests are stored.
Resend: delivery of the email that notifies Nyamia of each new request.
Google (Gmail): the mailbox where Nyamia receives that notification.
If any of these providers processes data outside the European Economic Area, it does so with the safeguards provided for in the GDPR, such as the EU-U.S. Data Privacy Framework or standard contractual clauses.
Your rights
You can request access, rectification, erasure, objection, restriction of processing and portability of your data, and withdraw your consent, by emailing farnausgar@gmail.com.
If you believe your data has not been handled properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Required data
Name, an email or a phone number, professional profile and consent are needed to process the request. All other fields are optional.
Cookies
This website uses no cookies. Visit statistics are collected without cookies and in aggregate form. Details are in the cookie policy.
Changes to this information
If this information changes, a new dated version will be published. Each request stores the version that was accepted.