Privacy policy
1. Data controller
- Data controller: Eduardo García Romera (ArribaIA)
- Tax ID (NIF): 54487155V
- Business address: C/ Medussa, 14, 03700 Dénia (Alicante), Spain
- Email: [email protected]
2. Purpose
The data you provide through the contact form is used exclusively to respond to your inquiry, evaluate a possible business relationship, and, if requested, prepare an audit or proposal. It is not used to send newsletters or periodic marketing communications, and it is not shared with third parties for advertising purposes.
3. Legal basis
The legal basis for processing your data is the consent you give when submitting the contact form.
4. Retention period
Data is retained for as long as your inquiry is being handled and, as a general rule, for up to a maximum of 12 months from the last contact, unless there is an active contractual relationship or a legal obligation requiring a different period.
5. Recipients and data processors
This site's contact form is managed by Formspree (Formspree, Inc.), which acts as a data processor for receiving and emailing the messages sent. The booking page (/book) uses Cal.com's scheduling system (Cal.com, Inc.), which acts as a data processor to manage availability, confirm the appointment, and send the corresponding confirmation and reminder emails. The website is hosted on Vercel, which may also process technical visit data as a data processor. If you accept the cookie banner, Microsoft Clarity (Microsoft Corporation) also processes usage and browsing data in aggregate for experience analysis; see the cookie policy for more detail. The domain and email associated with arribaia.com are managed through Cloudflare.
6. International transfers
Some of the providers mentioned in the previous section (including Formspree, Cal.com, Vercel, and Microsoft) may process data on servers located outside the European Economic Area, particularly in the United States. In these cases, the processing is covered by the safeguards each provider has in place under the General Data Protection Regulation. This section will be reviewed and detailed further once documented confirmation of each provider's applicable contractual clauses is available.
7. Rights of data subjects
You can exercise your rights of access, rectification, erasure, objection, restriction of processing, and portability by emailing [email protected], indicating which right you wish to exercise and attaching, if necessary, a document proving your identity.
8. Source of the data
The only data collected is what you voluntarily provide through this site's contact form (name, email, your brand's website if you have one, and the content of your message) or, if you book a session from /book, what you enter directly into Cal.com's scheduling system (name, email, and, if provided, other booking form details).