ARRA Asesores · go to home page Client area

Privacy policy

Last reviewed: 4 October 2026

This policy explains how we process the personal data you provide through this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights.

1. Data controller

Controller
ARRA Asesores, S.L.
Tax ID (NIF)
B88585617
Address
Calle Carpinteros, 12, 28670 Villaviciosa de Odón, Madrid
Email
[email protected]

2. What data we process

  • The data you give us in forms, by email or in the chat: name, company, email address, phone number and the content of your enquiry.
  • If you are a client, those needed to provide the service you have contracted.
  • Technical browsing data, such as your IP address or device type, when needed for the security of the website or when you accept it in the cookie settings.

If you provide us with other people’s data, you must have informed them beforehand.

The data marked as required in the forms is needed to deal with your request. We do not take automated decisions that affect you.

We publish Google reviews word for word, with the name shown on Google. If you wrote one and want us to remove it, write to us.

3. Why we process your data, on what legal basis and for how long

Responding to your enquiries and proposal requests
Legal basis: the pre-contractual measures you request from us (art. 6.1.b GDPR). Retention period: while we handle your enquiry and, afterwards, for the limitation periods of any liability that may arise.
Knowing which campaign or link each request comes from
Basis: our legitimate interest in measuring our advertising (Art. 6(1)(f) GDPR). Period: the same as the request.
Providing the contracted services
Legal basis: the contract and compliance with legal obligations, including tax, commercial and anti-money laundering obligations (art. 6.1.b and 6.1.c GDPR). Retention period: for the duration of the relationship and, thereafter, the statutory periods, which may be up to ten years (Law 10/2010).
Sending you the newsletter and marketing communications
Legal basis: your consent (Art. 6.1.a GDPR), which you can withdraw at any time. If you are already a client, we may inform you about services similar to those you have contracted (Art. 21.2 of Law 34/2002), and you can object in each communication. Retention period: until you withdraw your consent or object.
Client satisfaction surveys
Legal basis: our legitimate interest in improving the service (Art. 6(1)(f) GDPR). Retention period: for as long as the relationship lasts.
Protecting forms against automated submissions and abuse
Legal basis: our legitimate interest in the security of the website (Art. 6(1)(f) GDPR). Retention: only as long as strictly necessary for that check.
Analytics and advertising
Legal basis: your consent, collected through the cookie panel (art. 6.1.a GDPR). Details are in the cookie policy.

4. Who we share your data with

We do not share your data with third parties unless legally required to: for example, with the Spanish Tax Agency, the courts or other public authorities.

In our work we rely on providers that process data on our behalf, under a data processing agreement (art. 28 GDPR):

  • Website hosting and security (LucusHost and Cloudflare).
  • Email and work tools (Microsoft 365).
  • Forms and support chat (Typeform and Tawk.to).
  • Client management and sending communications (HubSpot).
  • Tools that transfer form data to our management systems (Zapier).
  • Cookie consent management (CookieYes).
  • Analytics and advertising, only with your consent (Google, Meta and Microsoft Clarity).

These providers may include automation and artificial intelligence tools, which process data with the same safeguards.

5. International transfers

Some of these providers may process data outside the European Economic Area, mainly in the United States. In that case they do so with GDPR safeguards: companies certified under the EU-US Data Privacy Framework or standard contractual clauses approved by the European Commission. You can ask us for information at [email protected].

6. Chat with artificial intelligence

The chat on this website may be answered by an artificial intelligence assistant. We tell you so when the conversation opens. Do not include especially sensitive data in the chat, such as health data or bank account numbers.

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw any consent you have given, by writing to [email protected] or to our office, with the reference ‘Data protection’. If we have reasonable doubts about your identity, we may ask you to prove it.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Changes to this policy

We may update this policy to reflect changes in the law or in our services. The date of the latest revision appears at the top of the page.