Privacy Policy
Privacy Policy
Last updated: June 2026
1. Data Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Arriba Digital S.L.U.
Carrer Joan March 1
07640 Ses Salines
Illes Balears
Spain
NIF: B88784616
Email: info@arriba-digital.com
Website: https://arriba-digital.com
2. Purpose of Data Processing
We process personal data only to the extent necessary to provide and operate our website, respond to inquiries, comply with legal obligations, and protect our legitimate business interests.
The legal bases for processing personal data are:
- Article 6(1)(a) GDPR (consent)
- Article 6(1)(b) GDPR (performance of a contract or pre-contractual measures)
- Article 6(1)(c) GDPR (legal obligations)
- Article 6(1)(f) GDPR (legitimate interests)
3. Website Access and Server Log Files
When you visit our website, information is automatically collected by the hosting provider and stored in server log files. These may include:
- IP address (where possible, anonymized)
- Date and time of access
- Browser type and version
- Operating system used
- Referrer URL
- Pages visited
- Amount of data transferred
This information is processed to ensure the security, stability, and proper functioning of the website.
The legal basis is Article 6(1)(f) GDPR.
4. Cookies
Our website may use technically necessary cookies required for the operation and security of the website.
These cookies do not require consent under applicable data protection laws.
If additional cookies are introduced in the future, such as analytics or marketing cookies, users will be informed through an appropriate consent mechanism before such cookies are placed.
5. Email Communication
If you contact us by email, we will process the information you provide in order to respond to your inquiry and, where applicable, establish or perform a contractual relationship.
The legal basis is Article 6(1)(b) GDPR and Article 6(1)(f) GDPR.
The data will be stored only for as long as necessary to process your request or comply with legal retention obligations.
6. Disclosure of Data
We do not sell, rent, or otherwise disclose personal data to third parties unless:
- disclosure is required by law;
- it is necessary for the fulfillment of a contract;
- you have given your explicit consent; or
- disclosure is necessary to protect our legitimate interests.
7. International Data Transfers
As a rule, personal data is processed within the European Economic Area (EEA).
Should personal data be transferred to countries outside the EEA, such transfers will only take place in accordance with Chapter V GDPR and subject to appropriate safeguards.
8. Data Retention
Personal data is retained only for as long as necessary for the purposes for which it was collected and to comply with applicable legal obligations.
After the applicable retention periods have expired, the data will be deleted or anonymized.
9. Data Security
We implement appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.
These measures are reviewed regularly and adapted to technological developments where appropriate.
10. Your Rights
Under the GDPR, you have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent at any time with future effect
To exercise your rights, please contact:
11. Right to Lodge a Complaint
You have the right to lodge a complaint with a competent supervisory authority if you believe that the processing of your personal data violates applicable data protection law.
In Spain, the competent authority is the Agencia Española de Protección de Datos (AEPD).
12. Children's Privacy
This website is not directed at children under the age of 18.
We do not knowingly collect personal data from minors.
13. Automated Decision-Making
We do not use automated decision-making or profiling within the meaning of Articles 22 GDPR.