Privacy Policy

1. Data controller

• Name: AA2 Servicios Tecnológicos, S.L.
• Tax ID (CIF): B22888325
• Address: Calle 200, 80, La Cañada, 46182 Paterna (Valencia)
• Contact email: contacto@aa2.es

AA2 has not appointed a Data Protection Officer. For any question about your data, write to us at the contact email.

2. Data we process

• Contact form: name, company, email address, phone number (optional), service of interest (optional) and the message you write to us. Name, company, email and message are required.
• Technical connection data: IP address, browser and request data, which the hosting server (Vercel) records when it serves the site and processes the form.
• Bookings: the data you provide when you book a meeting with Microsoft Bookings.
• Visit statistics: aggregated visit data (page viewed, origin and browser and device data) that Vercel Web Analytics measures without cookies and without identifying you.
• Analytics with cookies: only if you accept Microsoft Clarity (see the Cookies Policy).

You provide the data yourself, except for the technical connection data, which is generated when you visit the site. We do not process special categories of data (health, political opinions, religion, etc.) and we do not make automated decisions with your data.

3. Purpose and legal basis for processing

Purpose	Legal basis
Handling and answering the enquiry you send through the contact form	Your request (art. 6.1.b GDPR) and our legitimate interest in answering you (art. 6.1.f GDPR)
Managing meeting bookings through Microsoft Bookings	Your request (art. 6.1.b GDPR)
Site security and Vercel server logs (IP and technical data)	Legitimate interest (art. 6.1.f GDPR)
Aggregated visit statistics (Vercel Web Analytics), without cookies	Legitimate interest (art. 6.1.f GDPR) in knowing how the site is used
Analysis of site usage with Microsoft Clarity, only if you accept analytics cookies	Consent (art. 6.1.a GDPR and art. 22.2 LSSI-CE)
Compliance with legal obligations where there is a contractual relationship	Legal obligation (art. 6.1.c GDPR)

4. Retention period

• If there is no contractual relationship: 12 months from the last contact, then deletion.
• If there is a contract: up to 6 years, in accordance with article 30 of the Spanish Commercial Code.
• Visit statistics and analytics: cookie-free statistics are kept in aggregated form for the periods set by Vercel. Clarity data is kept only while you maintain your consent and for the periods set by that tool (see the Cookies Policy).

5. Recipients and processors

We do not share your data with third parties, except where required by law. To provide the service we use providers that act as data processors, under our instructions:

• Vercel Inc. (USA): site hosting, running the form function and visit statistics (Vercel Web Analytics).
• Resend, Inc. (USA): sending the email with the form content.
• Microsoft: Microsoft 365 (mailbox contacto@aa2.es) and Microsoft Bookings (bookings). Microsoft Clarity, if you enable analytics.

6. International transfers

Some of these providers are located in the USA. Transfers are made under the EU-US Data Privacy Framework when the provider is certified and, failing that, under standard contractual clauses. You can ask us for a copy of these safeguards by writing to contacto@aa2.es.

7. Your rights

Under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), you can exercise the following rights:

• Access: obtain confirmation of whether we process your data and access it.
• Rectification: request the correction of inaccurate data.
• Erasure: request the deletion of your data.
• Objection: object to processing based on legitimate interest.
• Restriction: request the restriction of processing in certain circumstances.
• Portability: receive your data in a structured, commonly used format.
• Withdrawal of consent: at any time, without affecting the lawfulness of the processing carried out before.

To exercise them, write to us at contacto@aa2.es stating which right you want to exercise and attaching a copy of an identification document.

If you believe the processing does not comply with the regulations, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Security measures

AA2 has adopted the technical and organisational measures needed to guarantee the security and integrity of personal data and to prevent its alteration, loss, unauthorised processing or access, taking into account the state of the art, the nature of the data and the risks to which it is exposed.

9. Client area

The AA2 client area is governed by its own privacy information.

10. Changes

AA2 may update this Privacy Policy to adapt it to changes in legislation or case law. The current version is the one published on the site at any given time.