Privacy notice

Last updated: October 24, 2026

1. Identity and address of the data controller

Grupo GNOVIA («GNOVIA»), with its address in Mexico City, Mexico, is the controller of the personal data collected through the website gnovia.com.mx, its forms and the contact channels offered on it, in accordance with Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), published in the Official Gazette of the Federation on March 20, 2025, and other applicable regulations.

For any matter related to this notice or your personal data, please write to servicios@gnovia.com.mx.

Service requests handled in Colombia may be managed by Grupo GNOVIA Colombia S.A.S., a company of the same group that applies this notice and Colombian data-protection law (Law 1581 of 2012).

2. Personal data we process

a) Data you provide

When you complete a form (Contact, Evaluation, Diagnosis or the business assessment), message us on WhatsApp or send an email, we may collect: name, email address, phone number, company or organization, position or department, city or area, sector, description of the glass damage and project details (type of damage, approximate area or number of panes, access conditions, urgency, whether there is a replacement quote) and, for automotive cases, vehicle make, model and year.

b) Data collected automatically while browsing

To operate, protect and improve the site, GNOVIA’s server records technical information about each visit:

• Connection: IP address; approximate location derived from the IP (country, state, city, postal code and approximate coordinates); internet provider, organization or network that owns the IP and its host name.
• Device and browser: device type and, when the browser reports it, make and model; operating system and version; browser and version; languages; time zone; screen size, resolution and pixel density; number of processor cores and approximate memory; connection type and speed; graphics processor model; theme and accessibility preferences; privacy signals such as “Do Not Track” or “Global Privacy Control”.
• Site usage: pages visited, landing page and referring page, campaign parameters (UTM), date and time, active time, scrolling, clicks on links and buttons (including WhatsApp, phone, email and brochure downloads), internal searches, filters used in the case library, projects viewed, diagnosis choices, form starts and fields used (what you type is not recorded until you decide to submit it) and technical errors.

c) Data we do not request

GNOVIA does not request sensitive personal data (for example health, ethnic origin, beliefs or preferences) or financial data through the site; please do not include it in your messages. We do not request photographs in the first contact. The site is intended for businesses and adults; we do not knowingly collect data from minors.

3. Purposes of processing

Necessary purposes (required for our relationship with you)

1. Respond to your requests for information, evaluation, diagnosis and quotation of glass restoration services.
2. Contact you by WhatsApp, email or phone to follow up on your request and schedule visits, demonstrations or services.
3. Prepare technical and commercial proposals and, where applicable, provide and invoice the contracted service.
4. Keep the site secure and working: prevent fraud, form abuse and unauthorized access, and diagnose errors.
5. Comply with legal obligations and respond to requests from competent authorities.

Secondary (optional) purposes

1. Produce statistics and analysis on the use of the site, its content and campaigns.
2. Identify the sector, organization or network from which the site is visited in order to improve and prioritize commercial service to businesses.
3. Send you commercial information, success stories and news about our services.

If you do not want your data to be used for any secondary purpose, you may say so at any time by writing to servicios@gnovia.com.mx with the subject “Secondary purposes”. Your refusal will not prevent us from responding to your request.

4. Cookies and tracking technologies

GNOVIA’s public website does not use advertising cookies. Besides Google Analytics (described below), it relies on its own first-party analytics without cookies and additional measurement services, which work as follows:

• Browser local storage (localStorage and sessionStorage): stores a random pseudonymous browser identifier, the number of visits, the landing page and source of the first visit, your language preference and the progress of the diagnosis (used to display the WhatsApp button). This information stays on your device and is sent only to GNOVIA’s server.
• Server logs: the technical data described in section 2 b) are stored on the hosting server contracted by GNOVIA, in private files that are not publicly accessible.
• Approximate IP geolocation: to estimate city, region and network, the IP address is checked with specialized providers (ipinfo.io or ipwho.is). Only the IP address is sent to these providers.

You can limit these technologies at any time by clearing the site data in your browser, using private browsing or blocking local storage; the site will keep working. “Do Not Track” and “Global Privacy Control” signals are recorded, and you can ask us to exclude your information by writing to the email above.

Third-party services: the website uses Google Analytics 4 (Google LLC), which sets first-party measurement cookies (_ga and _ga_*, lasting up to 2 years) to measure visits, traffic sources and campaign performance statistically. You can block or delete them in your browser settings, or install the Google Analytics opt-out add-on, and the site will keep working. When you arrive from a ChatGPT ad, the site keeps the campaign click identifier (oppref) in your browser’s local storage and, if your request qualifies, GNOVIA’s server tells OpenAI that a request took place, sending only that identifier and an event number — never your name, email or phone — to measure the campaign’s effectiveness. YouTube videos load in privacy-enhanced mode only when you choose to play them, and when you tap a WhatsApp button you open the WhatsApp service (Meta), which applies its own privacy notice.

The administration panel uses a strictly necessary technical cookie only for authorized GNOVIA staff; site visitors do not receive it.

5. Data transfers and processors

GNOVIA does not sell or share your personal data with third parties for their own purposes. Your data may be:

• Shared with processors that provide services to us under our instructions and confidentiality obligations: the site’s hosting and email provider, IP geolocation providers and the measurement services listed above.
• Transferred to Grupo GNOVIA Colombia S.A.S., a company of the same group operating under the same policies, when your request must be handled in Colombia.
• Disclosed to competent authorities when required by law or by a duly grounded order.

These transfers do not require your consent under the LFPDPPP. If a transfer requiring your authorization becomes necessary in the future, we will request it beforehand. By providing your data and not objecting, you accept the transfers described here.

6. ARCO rights and withdrawal of consent

You have the right to access your personal data, rectify it if it is inaccurate or incomplete, cancel it when you consider it is not needed for the stated purposes, and object to its processing for specific purposes (ARCO rights). You may also withdraw the consent you have given, to the extent permitted by law.

To exercise these rights, send a request to servicios@gnovia.com.mx with the subject “ARCO rights request”, including:

1. The data subject’s name and a way to send you our response.
2. A document proving your identity or, where applicable, legal representation.
3. A clear description of the data and the right you wish to exercise.
4. Any information that helps us locate your data (for example the email or phone you used, the date of the form or your request reference).

We will inform you of our decision within a maximum of 20 business days from receipt of the request and, if applicable, implement it within the following 15 business days. These periods may be extended once for an equal period when justified. Exercising these rights is free of charge; only justified shipping or reproduction costs may apply.

If you believe your right to personal data protection has been violated, you may contact the competent authority, currently Mexico’s Secretaría Anticorrupción y Buen Gobierno.

7. Options to limit use or disclosure

In addition to ARCO rights, you can limit the use of your data by (i) asking us by email to exclude you from commercial communications or secondary purposes; (ii) clearing the site data in your browser or using private browsing; and (iii) registering with the Public Registry to Avoid Advertising (REPEP) of Mexico’s Federal Consumer Protection Agency (Profeco).

8. Retention and security

GNOVIA applies administrative, technical and physical measures to protect your data against damage, loss, alteration, destruction or unauthorized use, access or processing. Information is stored in private server files that are protected from public access and available only to authorized staff with a password.

Browsing records are kept for up to 12 months, and request data for as long as needed to manage the commercial relationship and meet legal obligations; afterwards they are deleted or kept in de-identified form for statistical purposes.

9. Changes to this privacy notice

This notice may change due to legal requirements, changes in our services or in our privacy practices. Any change will be published on this page with the date of the last update and, when appropriate, announced on the site’s forms.

10. Consent

By submitting your data through the site’s forms or contact channels, and by continuing to browse after this notice has been made available to you, you consent to the processing of your data for the necessary purposes described here. You may refuse the secondary purposes at any time, as explained in section 3.

The Spanish version of this notice prevails in case of discrepancy. Ver en español