Privacy Policy

At ARCA, we are committed to complying with Spanish and European regulations on personal data protection. We ensure full compliance with the obligations set out in the General Data Protection Regulation (GDPR) (EU) 2016/679 of April 27, as well as in the Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD and GDD).

In accordance with these regulations, we inform you that the use of our website may require the provision of certain personal data through registration or contact forms or by sending emails. These data will be processed by ARCA, who acts as the Data Controller.

Collection and Processing of Personal Data

Personal data is any information that can identify an individual, such as name, email, address, phone number, NIF/NIE, among others. Additionally, when a User visits our website, certain data such as the IP address may be stored for technical reasons.

At ARCA, we only collect the necessary data to provide the contracted services or to adequately respond to the User’s request for information. We are committed to not using the data for purposes other than those for which they were collected.

Purpose of Data Processing

Purpose: To respond to information requests made through our contact forms.

Legal basis: The User’s consent, which can be revoked at any time.

Data transfer: The data will be processed through servers managed by fly.io, who acts as the Data Processor.

User Registration Forms

Purposes:

  • Management of User registration on our website.
  • Sending commercial communications related to our services.
  • Legal basis: The User’s consent and legitimate interest for sending communications.
  • Data transfer: The data will be processed through servers managed by fly.io.

Comments

  • Purpose: To post comments or reviews on the website.
  • Legal basis: The User’s consent, which can be revoked at any time.
  • Data transfer: The data will be processed through servers managed by fly.io.

Minors

Only individuals over the age of 14 can provide personal data on this website. For minors under the age of 14, parental or guardian consent is required to process personal data. To contract our services, the individual must be over 18 years old unless emancipated.

Security Measures

We have adopted technical and organizational measures to protect personal data against loss, misuse, alteration, unauthorized access, and theft. Additionally, the website uses SSL encryption to ensure the secure transmission of personal data.

Exercise of User Rights

Users can exercise their rights to access, rectification, erasure, restriction, objection, and data portability, as provided by the applicable regulations. To do so, they must contact us at gdpr@arca.bot, indicating their name, surname, and the right they wish to exercise.

Data Transfers

We will not transfer personal data to third parties, except when necessary for the provision of a service, such as to shipping companies, or when required by law.

Data Retention

Personal data will only be processed for as long as necessary to fulfill the purpose for which it was collected or until the User withdraws their consent. In the case of registered users, data will be retained until the contractual relationship ends.

Social Media

ARCA has a presence on social media and is responsible for the processing of personal data of its followers. The purpose of this processing is to keep followers informed about our activities and offers. The processing is based on the consent of the individual, which can be revoked at any time.

Confidentiality

All information provided by the User will be considered confidential and will not be used for purposes other than those established in this Privacy Policy.