Data controller
The controller responsible for processing your data is:
Data we process
- Contact data: when you write to us or call us, the information you voluntarily provide (name, e-mail, phone number, content of your message).
- Technical logs: IP address, browser type, pages visited and timestamp, automatically generated by the server.
- Audience measurement: browsing data collected by Google Analytics (pages viewed, visit duration, referral source, device type, approximate location).
We do not collect sensitive data and only ask for the minimum information necessary to handle your request.
Purposes & legal basis
Cookies & audience measurement
This site places no advertising cookies and does not embed any advertising network or social pixel. It uses Google Analytics to measure its audience: audience measurement cookies are set and browsing data (pages viewed, visit duration, referral source, device type, approximate location) is sent to Google. Full details, and how to object, are provided in our Cookie Policy.
Recipients & processors
Your data is handled by the firm and is never sold or transferred to third parties for commercial purposes. It may be processed by our technical service providers acting as data processors, in particular Cloudflare, Inc. for the delivery and security of the site and Google Ireland Limited (Google Analytics) for audience measurement, strictly within the scope of their duties.
Transfers outside Andorra
When data passes through a provider located outside Andorra or the European Union (for example our content delivery provider, or Google for audience measurement), such transfer is governed by appropriate safeguards (standard contractual clauses and/or a recognised data protection framework), in accordance with applicable regulations.
Retention period
Contact data is retained for as long as necessary to handle your request and, where applicable, for the duration of the relationship and any applicable statutory retention periods. Technical logs are kept for a limited period for security purposes.
Security
We implement appropriate technical and organisational measures (secure hosting, restricted access, encryption of communications via HTTPS) to protect your data against any unauthorised access, alteration, or disclosure.
Your rights
In accordance with the GDPR and Andorran qualified law 29/2021, you have the right of access, rectification, erasure, restriction, objection, and data portability. You may exercise these rights at any time by contacting us via the contact form.
You also have the right to lodge a complaint with the competent supervisory authority: the Agència Andorrana de Protecció de Dades (APDA) in Andorra and, for residents of the European Union, the national authority (in France, the CNIL).
Anti-money laundering
Personal data collected through our forms may be used to comply with the due diligence obligations laid down by Andorran Law 14/2017. Such data are kept for the statutory period set by that law. The exercise of certain rights (access, erasure, objection) may be restricted to the extent required by these legal obligations.
Updates
This policy may be updated to reflect changes in law or in our practices. The version in force is the one published on this page.