Privacy Policy

Last updated: April 2026

1. Data Controller

The data controller is Andrea Saccà Consulting SLU, with registered office at Calle Antonio Maria Manrique 3, 35011 Las Palmas de Gran Canaria, España. NIF: B76271824.

Email: info@andreasaccaconsulting.com

2. Data We Collect

We collect personal data that you voluntarily provide when using our contact form: name, email address, company name (optional), type of inquiry, budget range, and message content.

We also collect technical data automatically: IP address, browser type, operating system, pages visited, and timestamps — through cookies and similar technologies (see our Cookie Policy).

3. Legal Basis for Processing

We process your personal data based on: (a) your consent (Art. 6(1)(a) GDPR), when you submit the contact form or accept cookies; (b) legitimate interest (Art. 6(1)(f) GDPR), for website security and service improvement; (c) contractual necessity (Art. 6(1)(b) GDPR), when processing is needed to respond to your inquiry or provide services.

4. Purpose of Processing

Your data is processed for: responding to contact requests, providing business development and consulting services, improving our website and services, complying with legal obligations, and sending relevant communications when consent is given.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described above. Contact form submissions are retained for 24 months. Technical logs are retained for 12 months.

6. Data Sharing

We do not sell your personal data. We may share data with: hosting and infrastructure providers (within the EU/EEA or with adequate safeguards), email service providers for responding to inquiries, and legal authorities when required by law.

7. Your Rights (GDPR)

Under the GDPR, you have the right to: access your personal data, rectify inaccurate data, erase your data ('right to be forgotten'), restrict processing, data portability, object to processing, and withdraw consent at any time.

To exercise these rights, contact us at info@andreasaccaconsulting.com. We will respond within 30 days.

8. International Transfers

Your data may be transferred to service providers outside the EU/EEA. In such cases, we ensure adequate protection through Standard Contractual Clauses (SCCs) or adequacy decisions by the European Commission.

9. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

10. Supervisory Authority

You have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es, or with any EU supervisory authority in your country of residence.

Something in mind?

Write it down. We'll shape it together.