1. Data controller

2. Data we process and its source

We only process the data you provide voluntarily through the contact form or by email: name, company or organisation, email address, type of enquiry and the content of your message. We do not collect data from third-party sources or special categories of data (article 9 GDPR); please do not include this type of information in your messages.

The server may log technical connection data (IP address, date and time, user agent) in activity records, for security and operational purposes.

3. Purposes and legal basis

No automated decision-making or profiling with legal effects for the data subject is carried out.

4. Retention periods

• Enquiries that do not lead to a contractual relationship: up to one year from the last contact, unless erasure is requested earlier.
• Client data: for the duration of the relationship and, afterwards, blocked for the statutory limitation periods (among others, 4 years for tax purposes under Spanish Law 58/2003 and 6 years for commercial matters under the Spanish Commercial Code).
• Subscriptions to communications: until consent is withdrawn.
• Server technical logs: short periods for security reasons.

5. Recipients and processors

Data is not disclosed to third parties except under legal obligation. To provide the service we use suppliers acting as data processors (hosting and deployment of the site, email and office tools), with whom the contracts required by article 28 GDPR have been signed.

Where any of these suppliers is located outside the European Economic Area, international transfers are covered by a European Commission adequacy decision or, failing that, by Standard Contractual Clauses with supplementary measures (articles 44 to 49 GDPR). You may request information about the safeguards applied by writing to info@almatria.com.

6. Data subjects' rights

You may exercise the rights of access, rectification, erasure, objection, restriction of processing, portability and not to be subject to individual automated decisions, as well as withdraw the consent given at any time, without this affecting the lawfulness of the prior processing.

To exercise them, send a request to info@almatria.com or by post to Calle Carril de las Morillas 621 A, 29010 Málaga (Málaga), España, stating the right you are exercising and attaching a copy of a document proving your identity. We will reply within one month, extendable by two further months in complex cases.

If you consider that your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan 6, 28001 Madrid — www.aepd.es).

7. Security and accuracy of data

We apply technical and organisational measures appropriate to the risk (article 32 GDPR), including encryption of communications through HTTPS and access control to information. The user warrants that the data provided is accurate and undertakes to report any change.

8. Cookies

The use of cookies and similar technologies is described in the Cookies Policy.

9. Changes to this policy

This policy may be updated to adapt it to regulatory changes or new processing activities. The current version is always the one published on this page, with its update date.