PRIVACY POLICY

Nortiva — Consulting & Management

Last updated: September 28, 2026

Version 1.0

At Nortiva, we value privacy, confidentiality, and information security.

This Privacy Policy explains how we collect, use, store, protect and, where applicable, share personal data relating to individuals who visit nortiva.com.ar, use our forms, contact us, or interact with our digital services.

Nortiva's processing of personal data is primarily governed by Argentine Personal Data Protection Law No. 25,326, its implementing regulations, rules issued by the Agency for Access to Public Information (AAIP), and other applicable laws of the Argentine Republic.

1. Data Controller

The controller responsible for the processing of personal data is:

German Haverich

Owner of Nortiva — Consulting & Management

Legal address: Milstein 2958, Roldán, Santa Fe, Postal Code 2134, Argentine Republic

Email: administracion.nortiva@gmail.com

Website: nortiva.com.ar

Questions concerning privacy, personal data protection, or the exercise of data protection rights may be sent to the email address above.

2. Scope

This Policy applies to personal data processed through:

  • nortiva.com.ar;
  • forms included on the website;
  • communications initiated through those forms;
  • email;
  • digital channels linked from the website;
  • technological infrastructure used to manage Nortiva inquiries and services.

The availability of the website in Spanish, English and Portuguese is intended to facilitate access by individuals who prefer those languages. Nortiva currently directs its commercial activities to the market of the Argentine Republic.

3. Personal Data We May Collect

When an individual voluntarily completes our contact form, we may collect:

  • name;
  • contact information;
  • information concerning their company, business or activity;
  • size of the company or organization;
  • description of the problem, requirement or reason for contacting us;
  • stated level of urgency;
  • any other information the individual voluntarily provides when communicating with Nortiva.

We may also retain subsequent communications necessary to follow up on an inquiry or commercial relationship.

4. Information We Do Not Request Through the Form

Nortiva's public contact form is not designed to request:

  • credit or debit card details;
  • passwords;
  • biometric information;
  • contacts stored on a device;
  • access to a device's camera or gallery;
  • precise geolocation;
  • medical information;
  • information concerning sexual orientation, religion, political opinions or other sensitive categories of personal data.

Users should avoid including sensitive data or unnecessary confidential information in free-text fields.

If we receive this type of information without having requested it, its processing will be limited to what is strictly necessary to manage the communication and it may be deleted where appropriate.

5. Information Collected Automatically

When the website is used, certain technical and browsing information may be collected, including:

  • IP address;
  • browser type and version;
  • operating system;
  • device type;
  • date and time of access;
  • pages visited;
  • approximate session duration;
  • interactions with the website;
  • traffic source;
  • technical information necessary for the operation, diagnostics and security of the website;
  • identifiers associated with cookies or similar technologies, where applicable and subject to the required authorization.

This information may be processed in aggregated form to understand website performance and improve our digital services.

6. Purposes of Processing

Personal data may be used to:

  • receive and respond to inquiries;
  • understand the needs of prospective clients;
  • contact individuals who request information;
  • manage meetings and communications;
  • prepare proposals or assess potential consulting services;
  • manage relationships with clients and prospective clients;
  • improve the website experience and performance;
  • obtain statistics regarding website usage;
  • detect, prevent and investigate technical or security issues;
  • maintain records required for administrative management;
  • comply with legal, regulatory, tax or contractual obligations;
  • send commercial communications only where appropriate and where a valid legal basis exists.

Nortiva will not use collected personal data for purposes incompatible with those originally communicated without first providing the relevant information and, where required, obtaining renewed consent.

7. Consent and Processing

Where processing requires consent, such consent will be requested in advance and in a free and informed manner.

Submitting the contact form requires that the user has been given access to this Privacy Policy and accepts the processing necessary to manage the inquiry.

Consent to receive marketing or informational communications will be separate from the submission of an inquiry and may subsequently be withdrawn.

Certain processing may also take place where necessary to take steps requested by the individual, perform a contractual relationship, comply with legal obligations, or in other circumstances permitted under applicable law.

8. Cookies and Similar Technologies

nortiva.com.ar may use cookies and similar technologies.

Strictly necessary cookies support essential functions such as website security, technical operation, preservation of certain preferences and consent management.

Non-essential cookies, including analytics cookies, will be used in accordance with the preferences selected by the user through the consent mechanism available on the website.

Users may accept, reject or modify non-essential cookie categories using the tools provided for this purpose.

Blocking certain cookies may affect some website features. However, rejecting analytics or marketing cookies will not prevent general access to Nortiva content.

9. Google Analytics

Nortiva uses Google Analytics 4 (GA4) to obtain website usage statistics and understand in aggregated form how visitors interact with the website.

Google Analytics may process information relating to devices, browsing activity, interactions, traffic sources, IP addresses and other technical identifiers in accordance with the configuration implemented and Google's policies.

At Nortiva, analytics functions are intended to be activated after the user provides the corresponding consent through the website's cookie management system where such consent is required.

Nortiva has selected a 14-month retention period for user-level and event data subject to GA4's configurable data-retention settings, without prejudice to aggregated information that Google may retain in accordance with the characteristics of its services.

10. Technology Providers

Nortiva uses specialized providers to operate its digital services. Those providers may process information only to the extent required to provide their respective services.

Nortiva's current technology infrastructure includes services provided by:

  • Hostinger, for website hosting and infrastructure;
  • Supabase, for backend infrastructure and information storage;
  • n8n, for process and workflow automation;
  • Google, for email services and Google Analytics.

Each provider may operate under its own terms, privacy policies and data processing agreements.

Nortiva seeks to select providers offering security and data-protection measures appropriate to the nature of the services they provide.

11. International Data Transfers

Some of our technology providers may use infrastructure located outside the Argentine Republic or process information from other jurisdictions.

Where processing involves an international transfer of personal data, Nortiva will seek to implement the safeguards required under Argentine law, including, where applicable, transfers to jurisdictions recognized as providing an adequate level of protection, applicable contractual clauses, or other mechanisms accepted by the competent authority.

12. Artificial Intelligence and Automation

Nortiva may use automated systems and artificial intelligence tools to support internal work, organization, analysis, automation and process improvement.

The use of these technologies is subject to principles of data minimization, confidentiality and information protection.

As an internal policy, Nortiva seeks to ensure that personal data that directly identifies clients or users is not provided to external artificial intelligence systems for processing where anonymized or de-identified information can be used instead.

Nortiva does not intentionally provide users' personal information for the public training of artificial intelligence models.

Unless expressly disclosed otherwise, Nortiva does not make decisions producing legal or similarly significant effects on an individual based solely on automated processing.

13. Disclosure to Third Parties

Nortiva does not sell or rent personal databases.

Personal data may be disclosed or made available to third parties only where:

  • necessary for a contracted technology provider to perform its services;
  • necessary to carry out a user's request;
  • valid authorization has been provided by the data subject;
  • required to comply with legal obligations;
  • required by a competent authority;
  • necessary to exercise or defend Nortiva's rights within the limits permitted by law.

Technology providers will have access only to information reasonably necessary to perform their respective services, according to their role and applicable terms.

14. Data Retention

We apply retention criteria linked to the purpose for which personal data was collected.

As a general rule:

Inquiries and prospective clients: up to 24 months from the last interaction, unless contractual, legal or administrative reasons justify longer retention.

Clients: throughout the contractual relationship and afterwards for the periods necessary to comply with legal, tax, accounting or contractual obligations or to address potential claims.

Marketing communications: until consent is withdrawn or, as a general criterion, after 24 months of inactivity.

Google Analytics: 14 months for user and event data affected by Nortiva's selected retention setting.

Technical and security logs: for the period reasonably necessary to prevent, investigate or manage incidents and ensure the integrity of our systems.

When retention is no longer necessary, personal data may be deleted, anonymized or archived where a legal retention requirement exists.

15. Information Security

Nortiva implements reasonable technical, organizational and administrative measures intended to protect personal information against:

  • unauthorized access;
  • loss;
  • destruction;
  • alteration;
  • improper disclosure;
  • unauthorized use.

Such measures may include access controls, credential management, role-based restrictions, encryption where applicable, backups, technical monitoring and responsible provider selection.

Nevertheless, no Internet-connected system can be considered completely invulnerable. If a security incident is identified, Nortiva will take reasonable measures appropriate to its nature and in accordance with applicable legal obligations.

16. Data Subject Rights

Individuals may exercise the rights recognized by Argentine law, including the right to:

  • request information concerning the existence of their personal data;
  • access their data;
  • request updating;
  • request correction;
  • request deletion where applicable;
  • withdraw previously granted consent where processing depends on that consent.

Requests may be sent to:

administracion.nortiva@gmail.com

Nortiva may request reasonable information to verify the identity of the person exercising a right and to prevent fraudulent access or modifications.

The right of access may be exercised free of charge in accordance with the conditions and frequency established by applicable law.

Nortiva will respond to access requests and to requests for correction, updating or deletion within the time limits established by applicable Argentine law.

17. Supervisory Authority

The AGENCY FOR ACCESS TO PUBLIC INFORMATION (AGENCIA DE ACCESO A LA INFORMACIÓN PÚBLICA — AAIP), as the supervisory authority under Law No. 25,326, is empowered to receive complaints and claims from individuals whose rights may have been affected by non-compliance with applicable personal-data-protection rules.

Further information is available from the official website of the Agency for Access to Public Information of the Argentine Republic.

18. Minors

Nortiva's services are directed toward companies, entrepreneurs and organizations and are not specifically intended for children.

Nortiva does not intentionally seek to collect personal information relating to minors through its website.

If we discover that information relating to a minor has been provided without any authorization that may be required, we will take reasonable measures to delete it where appropriate.

19. Marketing Communications

Nortiva may send news, content or marketing communications where an individual has requested them or another valid legal basis exists under applicable law.

Subscription to such communications will be independent from the ability to submit a commercial inquiry.

Recipients may request to stop receiving these communications through the mechanism included in them or by emailing administracion.nortiva@gmail.com.

20. External Links and Social Networks

The website may contain links to third-party websites, platforms or social networks.

Nortiva does not control third-party privacy policies or data-processing practices.

When a user leaves nortiva.com.ar and accesses a third-party service, subsequent processing of information is governed by the applicable provider's terms.

We recommend reviewing the privacy policies of those services.

21. Changes to this Policy

Nortiva may modify this Privacy Policy when changes occur in:

  • its services;
  • internal processes;
  • technology;
  • providers;
  • types of processing;
  • applicable legislation.

The current version will remain available at nortiva.com.ar and will state the date on which it was last updated.

Where a change is substantial and renewed consent is required, Nortiva will take appropriate steps before implementing the new processing.

22. Applicable Law

This Policy is governed by the laws of the Argentine Republic and, in particular, Argentine legislation applicable to personal data protection.

The availability of the website in other languages does not in itself mean that Nortiva currently directs its services toward foreign jurisdictions.

23. Contact

For questions concerning this Policy or the processing of personal data:

Nortiva — Consulting & Management

Controller: German Haverich

Address: Milstein 2958, Roldán, Santa Fe, Postal Code 2134, Argentine Republic

Email: administracion.nortiva@gmail.com

Website: nortiva.com.ar

24. Languages

This Policy is available in Spanish, English and Portuguese to facilitate its understanding.

The Spanish version constitutes the original and governing text of this Policy. Versions in other languages are translations provided for convenience. In the event of an interpretive discrepancy, and to the extent permitted by applicable law, the Spanish version will prevail.