Data controller
ARTIC AGENCY DIGITAL CONSULTING, S.L. (ARTIC), tax ID B19726967, registered office at Av. Vilafranca del Penedès, 11B, 08799 Olèrdola (Barcelona), Spain. Data protection contact: info@articagency.com.
We process data in accordance with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD) and Spanish Law 34/2002 on Information Society Services (LSSI).
What data we process, why and for how long
We only ask for the data needed for each purpose. Required fields are marked on the forms; if you leave them empty, we will not be able to handle your request.
| Processing | Data and purpose | Legal basis | Retention |
|---|---|---|---|
| Contact and quote requests | Name, email, phone, company, website and whatever you tell us in the form, the calculator, by email, phone or WhatsApp. We use it to reply and prepare a proposal. | Steps taken at your request prior to entering into a contract (art. 6.1.b GDPR). | Up to 12 months from the last contact if you do not hire us. |
| Clients | Contact and billing details of the company and its contacts. We use them to provide the service, invoice and meet our accounting and tax obligations. | Performance of the contract (art. 6.1.b) and legal obligations (art. 6.1.c). | For the duration of the relationship and then 6 years (art. 30 of the Spanish Commercial Code) or the limitation period for legal claims. |
| Marketing communications | Name and email, to send you ARTIC news, content and offers. | Your consent (art. 6.1.a), given by ticking the optional box. For clients, legitimate interest for services similar to those hired (art. 21.2 LSSI). | Until you unsubscribe (every email includes a link to do so) or withdraw your consent. |
| Job applications | Data from the job form and the CV you send us, to assess your profile in our recruitment processes. | Your consent (art. 6.1.a). | 12 months, unless you ask us to delete it sooner. |
| Measurement and advertising | Browsing data collected with analytics and advertising cookies, to understand how the website is used and measure our campaigns. | Your consent (art. 6.1.a GDPR and art. 22.2 LSSI). | See the cookie policy. |
| Website security | An encrypted fingerprint (hash) of the IP address and browser when a form is submitted, to prevent spam and abuse. | Legitimate interest in protecting the website (art. 6.1.f). | Together with the request it relates to. |
| Social media | Public profile data when you interact with our LinkedIn, Instagram or other social media pages. | Legitimate interest in managing our social media presence (art. 6.1.f). | While you follow or interact with the page. Each network has its own privacy policy. |
We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.
Who we share your data with
We do not sell or share your data with third parties for their own purposes. We only disclose it when the law requires it (for example, to the Spanish Tax Agency, to banks to process payments or to courts and law enforcement) or when it is needed to provide a service you have hired, such as registering a domain (to DonDominio and the domain registry, as required by ICANN).
We work with providers that access data only on our behalf and under a data processing agreement (art. 28 GDPR):
| Provider | Service | Location |
|---|---|---|
| Hostinger | Website and form hosting | European Union |
| Google (Google Workspace) | Email and documents | EU and US |
| Holded | Invoicing and client management | European Union |
| Stripe | Card payments and direct debits, if you pay this way | EU and US |
| Google (Analytics and Ads) | Website and campaign measurement, only if you accept cookies | EU and US |
| OpenAI | Advertising campaign measurement, only if you accept advertising cookies | US |
International transfers
Some of these providers may process data in the United States. They do so with appropriate safeguards: certification under the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023) or the standard contractual clauses approved by the European Commission. You can ask us for more information about these safeguards.
Your rights
You can exercise the following rights at any time, free of charge:
- access: know what data of yours we process;
- rectification: correct inaccurate or incomplete data;
- erasure: ask us to delete it;
- objection and restriction of processing;
- portability: receive your data in a structured format;
- withdraw the consent you have given, without affecting prior processing.
Write to info@articagency.com stating which right you wish to exercise. We will reply within one month at the latest. We will only ask you to prove your identity if we have reasonable doubts that the request comes from you.
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Security and accuracy of data
We apply technical and organisational measures appropriate to the risk to protect your data against loss, unauthorised access or alteration: encrypted connection (HTTPS), storage of form submissions outside the server's public folders, access control and backups.
By sending us your data, you confirm that it is accurate and that, if it belongs to someone else (for example, a colleague at your company), you have their permission to share it with us.
Minors
Our services are aimed at businesses and professionals. We do not knowingly collect data from children under 14; if we find that we have received it, we will delete it.
Changes to this policy
We may update this policy to reflect legal changes or changes to our services. The version in force will always be published on this page with its update date and, if the change is significant, we will let you know through the usual channels.