Privacy policy
Last updated: . Provisional text pending legal review. This is a translation: in the event of any discrepancy, the Spanish version prevails.
Data controller
- Controller: Arkvia, S.L. (in formation)
- Tax ID (NIF): [pending: tax ID (NIF)]
- Address: Carrer Mas Xervanda, 15, 17857 Sant Joan les Fonts (Girona)
- Data protection contact: info@arkviahq.com
- Data protection officer: not appointed
What data we process
- If you write to us using the form: your full name, company, email address, phone number (if you give it) and your message; also the page you are writing from, the plan you are interested in and, if you arrive from a campaign, its parameters (UTM), and the date and time you accept this policy.
- To protect the form against abusive submissions: an encrypted identifier of your connection, calculated from your IP address, which cannot be used to recover it. We never store your IP address.
- If you book a demo in the calendar: your name, your email address, the day and time you choose and whatever you write in the booking. Cal.com collects this on our behalf.
- If you email us: your message and your contact details.
- Visitor statistics: which pages are viewed, which website visitors arrive from, the country and the type of device and browser, always in aggregate. We do not use cookies for this and cannot tell who you are.
What we use it for and on what legal basis
| Purpose | Legal basis |
|---|---|
| Responding to your request for information or a demo and, if you ask, preparing a proposal for you | Your consent (Art. 6(1)(a) of the General Data Protection Regulation, GDPR), which you give by ticking the box on the form or by booking. You can withdraw it at any time, without affecting anything done before. |
| Preventing abusive form submissions (limiting submissions per connection) | Legitimate interest in the security of the website (Art. 6(1)(f) GDPR). |
| Knowing how many visits the website gets and which pages work | Legitimate interest in improving the website (Art. 6(1)(f) GDPR), with aggregate data that does not identify you. |
We do not make automated decisions or build profiles with your data, and we will not send you commercial communications you have not asked for.
How long we keep it
- Form requests: 12 months from when you write to us, if you do not become a client. After that period they are deleted automatically. If you sign up, they become part of the contractual relationship and its own legal retention periods.
- Notifications we receive in our inbox, emails and demo bookings: the same 12-month period.
- Form submission counter (to prevent abuse): deleted after 24 hours.
- Visitor statistics: Umami keeps the aggregate data for a maximum of 6 months.
Who processes data on our behalf
These providers process data only to provide their service to us and following our instructions (data processors). We do not sell or pass on your data to anyone, unless required by law.
| Provider | Purpose | Where | Safeguard |
|---|---|---|---|
| Amazon Web Services (AWS) | Hosting the website and sending the internal notification of each request | Ireland (EU) | Data processing agreement |
| Supabase | Database where the form requests are stored | Ireland (EU) | Data processing agreement |
| Google (Google Workspace) | Email inbox where we receive request notifications and your messages | EU and US | Data processing agreement and EU-U.S. Data Privacy Framework |
| Cal.com | Calendar for booking the demo | US | Data processing agreement and EU-U.S. Data Privacy Framework |
| Umami | Visitor statistics, without cookies and without identifying you | Germany (EU) | Data processing agreement |
International transfers
Cal.com and Google may process data in the United States. Both are certified under the EU-U.S. Data Privacy Framework, which the European Commission considers adequate. If any other provider were to access data from outside the European Union (for example, to give us technical support), it would do so under the standard contractual clauses approved by the European Commission.
Your rights
You can ask for access to your data, have it rectified or erased, object to or restrict its processing, or receive it in a format you can take elsewhere (portability), and you can withdraw your consent at any time. Write to us at info@arkviahq.com stating which right you wish to exercise; we will reply within one month at most.
If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).
Cookies
What is stored in your browser is explained in the cookie policy.