1. Data controller
Data controller: Marc Benet Esteve, owner of AurIA42. Privacy contact: hola@auria42.com. Full tax identification details are provided on request.
2. Data we process
Through the contact form we process only the data you provide and the minimum technical data required to deliver the service and prevent automated submissions.
- —Mandatory: name, email address and message.
- —Optional: company or activity, phone number (only if you provide it) and service of interest.
- —Consents and confirmations: record of your confirmation that you have read this information and, where applicable, your consent to receive commercial information (date and time).
- —Technical and anti-bot data: anti-robot verification result, timestamps and minimum technical request data needed for form security.
3. Purposes and legal basis
Each purpose has its own legal basis:
- —Answering your enquiry and preparing quotes or proposals: pre-contractual measures at the data subject's request (Art. 6(1)(b) GDPR).
- —Performing and managing the contractual relationship if the project goes ahead: contract performance (Art. 6(1)(b) GDPR).
- —Sending commercial information about services, news and use cases: consent (Art. 6(1)(a) GDPR), which can be withdrawn at any time.
- —Complying with legal, tax and accounting obligations: legal obligation (Art. 6(1)(c) GDPR).
- —Securing the form and preventing spam and abuse: legitimate interest in information security (Art. 6(1)(f) GDPR).
4. Retention
We keep enquiry data while we handle it and, if no contract follows, for a reasonable commercial follow-up period. If a contractual relationship begins, data is kept for its duration and afterwards for statutory limitation periods (up to 6 years for commercial and tax matters). Data processed on the basis of your consent is kept until you withdraw it.
5. Recipients and processors
We do not sell or transfer your data. It can only be accessed by the technology providers required to deliver the service (hosting, database and email delivery), acting as processors on the controller's instructions, and by public authorities where legally required.
Where processing involves international transfers, the applicable safeguards will be disclosed before it takes place. If a specific project involves new providers, they will be documented in the corresponding contract.
6. Use of artificial intelligence
We do not use client data or project content to train artificial intelligence models, unless the client gives express written authorisation.
Each project will set out in writing the providers and sub-processors involved, the location of processing, any international transfers and the applicable safeguards, as well as data minimisation measures.
7. Automated decision-making
The web form does not involve automated decision-making or profiling with legal or similarly significant effects on the data subject. If such processing is introduced in the future, we will inform you beforehand of the logic involved and the envisaged consequences.
8. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to hola@auria42.com, stating the right you wish to exercise. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es).
9. Security
We apply technical and organisational measures appropriate to the risk (encryption in transit, access control, data minimisation and backups) to protect information.