Privacy policy

Who is the controller

IdeAnd Consulting SL, with registered address at Passatge d'Europa 1, edifici El Bolet, 4a planta, AD500 Andorra la Vella (Principat d'Andorra). For any question about your data: consulting@ideand.ad or +376 860 560.

What data we process

Only the data you provide when you contact us or engage our services. We do not buy databases or obtain your data from third parties.

• Identification and contact details: name, email address, telephone number and, if you are writing on behalf of a company, its name and your position.
• The content of your enquiry: what you tell us about your situation and what you want to resolve.
• If you become a client, the data needed to provide the service and comply with our legal, accounting and anti-money laundering obligations.
• If you use the client area: your login username and the information about your company that we already process to provide you with the service (accounting, documents, requests, quotes and invoices). The area displays it to you; it does not collect new data, except what you write in a request.
• To protect access to the client area, failed login attempts, stored in encrypted form: we do not keep either the email address or the IP address in plain text, and we discard them after 24 hours.

What we use it for

Each purpose has its own legal basis:

• Responding to your enquiry and preparing a proposal for you: performance of a contract or of pre-contractual steps taken at your request.
• Providing the contracted service and managing the relationship: performance of the contract.
• Giving you access to the client area and keeping your session open: performance of the contract.
• Protecting the client area against attempts at unauthorised access: our legitimate interest in the security of the service and of your data.
• Complying with legal, tax, accounting and anti-money laundering obligations: compliance with a legal obligation.
• Sending you information about regulatory updates or services: your consent, which you may withdraw at any time without affecting anything done previously.

How long we keep it

For as long as the relationship lasts and, afterwards, for the periods required by tax, accounting and anti-money laundering regulations. When those periods expire, we delete or anonymise the data.

If your enquiry does not lead to an engagement, we keep your contact details for a maximum of two years so we can resume the conversation if you come back, and then we delete them.

Who else may access it

We do not sell or transfer your data. It is accessed only by the providers we need in order to work, under a data processing agreement and solely to provide their service to us: the provider that hosts this site and receives the form, the automation tool that transfers your enquiry to our system, the management system where we keep client files, the email service we use to reply to you, and email and office software for internal use.

Some of these providers process data outside Andorra. When this happens, we require appropriate contractual safeguards for that transfer.

We also disclose data when required by law: to the tax authorities, CASS or competent authorities within the scope of their functions.

The chat assistant on this website runs on an artificial intelligence provider, Anthropic, which processes the messages you write on its servers, outside Andorra, in order to generate responses. It does not use them to train its models and keeps them only for the limited period set out in its terms for business customers. We do not store the conversation: only if you choose to leave us your details does a summary of it accompany your enquiry, so the adviser does not have to ask you to repeat it. Please do not write sensitive data or identity documents in the chat.

Your rights

Llei 29/2021 grants you the following rights, which you can exercise at any time:

• Access to the data we hold about you (art. 18).
• Rectification of any data that is inaccurate or incomplete (art. 19).
• Erasure, when the data is no longer necessary or you withdraw your consent (art. 20).
• Restriction of processing in the cases provided for (art. 22).
• Portability, to receive them in a structured and commonly used format (art. 23).
• Objection to processing in the situations provided for by law (art. 24).
• Not to be subject to decisions based solely on automated processing (art. 25).

How to exercise them and where to complain

Write to us at consulting@ideand.ad stating which right you wish to exercise. We will respond within one month, which may be extended by a further two months if the request is complex, in which case we will inform you of the reason (art. 15.3).

If you consider that we have not handled your request correctly, you may lodge a complaint with the Agència Andorrana de Protecció de Dades (APDA), the competent supervisory authority (art. 61).

Security

We apply technical and organisational measures to protect your data, and we work on systems with access control and traceability. Should a security breach occur that poses a risk, we will notify the APDA without undue delay and, where possible, within 72 hours (art. 36), and we will inform you when the law requires it.

Changes to this policy

If we change how we process data, we will update this page and indicate the date of the latest revision. Significant changes are communicated visibly.