1. Data controller
We process your data in accordance with Andorran Law 29/2021, of 28 October, on the protection of personal data (Llei 29/2021, qualificada de protecció de dades personals) and its implementing regulations.
2. What data we process
- Contact form: name, company, email, phone, your message and, if you used it, the configurator summary.
- Proposal request: full name, company, email, phone, website, comments, how you prefer the call and your answers in the configurator (sector, goals, services, scope, budget and timing).
- Technical data: IP address, browser type and access date, logged by the server for security.
We do not ask for special categories of data. If you give us data about other people (for example, your team), you must inform them first.
3. Why we use it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Answering your enquiries. | Your consent, when you submit the form. |
| Preparing your proposal, holding the phone or video call and analysing your project. | Taking steps at your request prior to entering into a contract. |
| Providing the contracted services, invoicing and meeting accounting and tax obligations. | Performance of the contract and legal obligation. |
| Keeping the website secure and preventing abuse. | Legitimate interest. |
| Sending you news or offers. | Only with your express consent, which you can withdraw at any time. |
We do not make automated decisions with legal effects on you or carry out profiling. The configurator price is an indicative calculation; the proposal is prepared by a person.
4. How long we keep it
- Enquiries and proposals that do not lead to a contract: up to 12 months from the last contact.
- Clients: for as long as the relationship lasts and, afterwards, for the legal limitation and accounting and tax retention periods.
- Technical logs: for the minimum time needed to keep the website secure.
5. Who can access it
We do not sell or share your data. It is accessed only by the providers we need to operate, under a data processing agreement:
- Netlify, Inc. (United States): website hosting and form handling.
- Our email provider, to manage communications with you.
We will also disclose it to the authorities when required by law.
6. International transfers
Some of these providers process data outside Andorra, for example in the United States. In those cases, the transfer is made to countries with an adequate level of protection or with the safeguards provided for in Law 29/2021, such as standard contractual clauses. You can ask us for more information at hello@avaragency.com.
7. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, the right not to be subject to automated decisions and the right to withdraw your consent, without affecting processing carried out before.
Write to us at hello@avaragency.com or to the postal address above, explaining which right you wish to exercise. If we have reasonable doubts about your identity, we may ask you to prove it. We will reply within the legal time limit.
If you believe we have not handled your data properly, you can lodge a complaint with the Andorran Data Protection Agency (Agència Andorrana de Protecció de Dades, APDA): www.apda.ad.
8. Minors
The website is aimed at companies and professionals. We do not knowingly collect data from children under 16.
9. Security
We apply technical and organisational measures to protect your data: encrypted connection (HTTPS), access restricted to the people who need it and providers with security guarantees.
10. Changes to this policy
We may update this policy to reflect legal changes or changes to our services. The date of the last update is shown at the top of the page.
This English version is provided for convenience. In case of discrepancy, the Spanish version prevails.