This policy explains which personal data are processed through armstudio.es, why, for how long and what your rights are, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
- Hourity S.L. (Armstudio Technologies)
- Tax ID (NIF): B01639459
- Address: C/ Cuatro Caminos s/n, 04400 Alhama de Almería (Almería), España
- Data protection contact: email (see the contact page)
2. Which data are processed and why
| When | Data | Purpose | Legal basis |
|---|---|---|---|
| Free assessment form | Your answers about your company and needs, company name and website, your name, email and phone. Also technical data about the submission: page, referrer, campaign, completion time and browser. | Preparing and sending your assessment and contacting you about your request. | Pre-contractual steps at your request (Art. 6(1)(b) GDPR). |
| Marketing communications | Name and email. | Sending you information about the controller’s own services, only if you tick the box. | Consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. |
| Contact by email, phone or WhatsApp | The data you provide in your message or call. | Answering your enquiry. | Pre-contractual steps (Art. 6(1)(b)) or legitimate interest in replying (Art. 6(1)(f)). |
| Booking a meeting | The data you enter in the calendar: name, email and reason for the meeting. | Organising and holding the meeting. | Pre-contractual steps at your request (Art. 6(1)(b) GDPR). |
| Web analytics | Browsing data and cookie identifiers, in aggregate. | Understanding how the website is used in order to improve it. | Consent (Art. 6(1)(a) GDPR), only if you accept analytics cookies. |
| Clients | Contact and billing details. | Providing the contracted service, invoicing and meeting legal obligations. | Performance of a contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)). |
Mandatory form fields are marked as such; without them the request cannot be handled. No automated decisions or profiling with legal effects take place.
3. How long data are kept
- Requests and enquiries that do not lead to an engagement: as long as needed to handle them and at most two years from the last contact.
- Marketing communications: until you withdraw your consent.
- Clients: for the duration of the relationship and then for the periods required by law (for example tax and commercial law).
- Analytics data: the period configured in Google Analytics, at most 14 months.
4. Who else may process your data
Data are not disclosed to third parties unless required by law. Service providers process them on the controller’s behalf (processors), under contract and only for that purpose:
- Raiola Networks (Spain): website hosting.
- Private server contracted by the controller, where form submissions are received and stored.
- Brevo (France): sending the confirmation email for requests.
- TidyCal (United States): booking calendar, when you choose to book a meeting.
- Google (Google Analytics and Google Tag Manager): web analytics, only with your consent. Google LLC participates in the EU-US Data Privacy Framework.
- External accountancy firm: accounting and tax management for clients.
If you write via WhatsApp, the conversation is handled through WhatsApp (Meta) under its own terms.
5. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw any consent given, at any time by writing to email (see the contact page). Proof of identity will only be requested if there is reasonable doubt about it.
If you believe your data have not been processed correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
6. Minors
The services are aimed at businesses and professionals. Data of children under 14 are not knowingly processed.
7. Security
Appropriate technical and organisational measures are applied to protect data, such as encrypted communications (HTTPS) and restricted access to information.
8. Changes to this policy
This policy may be updated to reflect legal changes or changes to the website. The version in force is always the one published on this page, with its update date.