1. USER INFORMATION
ANDUBAY S.L., as Data Controller, informs you that, in accordance with Regulation (EU) 2016/679 of 27 April (GDPR) and Organic Law 3/2018 of 5 December on the protection of personal data and guarantee of digital rights (LOPDGDD), we will process your data as reflected in this Privacy Policy.
In this Privacy Policy we describe how and why we collect your personal data, what we do with it, who we share it with, how we protect it, and your choices regarding the processing of your personal data.
This Policy applies to the processing of your personal data collected by the company for the provision of its services. By accepting the terms of this Policy, you consent to the processing of your personal data as defined herein.
2. CONTACT
Company Name: ANDUBAY S.L.
Trade Name: ANDUBAY
Tax ID: B66599333
Address: C/Pablo Iglesias 56, L’Hospitalet de Llobregat, Barcelona
Email: rgpd@andubay.com
3. KEY PRINCIPLES
We have always been committed to providing our services with the highest level of quality, which includes treating your data securely and transparently. Our principles are:
- Principle of transparency, loyalty and lawfulness: The express consent of the user is needed to be able to process personal data.
- Principle of minimization: Only the data essential to carry out the services requested by the user will be collected.
- Principle of limitation of time: Personal data will be destroyed once the purpose for which they were collected has been fulfilled.
- Principle of confidentiality and integrity: Personal data will be processed in such a way as to ensure adequate security of such data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, by applying appropriate technical or organizational measures.
4. COLLECTION AND PROCESSING OF YOUR PERSONAL DATA
The types of data that may be requested and processed are:
- Identifying information.
We also automatically collect data about your visit to our website as described in the cookie policy.
Whenever we request your personal data, we will clearly inform you what personal data we collect and for what purpose. In general, we collect and process your personal data for the purpose of:
- To provide information, services, products, relevant information and news in the sector.
- Sending communications.
5. LEGITIMACY
In accordance with applicable data protection regulations, your personal data may be processed provided that:
- You have given us your consent for the processing of your data. Of course, you may withdraw your consent at any time.
- Due to legal requirements.
- Because there is a legitimate interest that is not undermined by your privacy rights, such as your status as a customer.
- Because it is necessary for the provision of some of our services through a contractual relationship between you and us.
6. COMMUNICATION OF PERSONAL DATA
The data may be shared with companies related to ANDUBAY S.L. for the provision of various services. The company will not transfer data to any third party, except when legally required to do so.
7. YOUR RIGHTS
Regarding the collection and processing of your personal data, you can contact us at any time to:
- Access your personal data and any other information indicated in Article 15.1 of the GDPR.
- Rectify your personal data that is inaccurate or incomplete in accordance with Article 16 of the GDPR.
- Delete your personal data in accordance with Article 17 of the GDPR.
- Limit the processing of your personal data in accordance with Article 18 of the GDPR.
- Request the portability of your data in accordance with Article 20 of the GDPR.
- Object to the processing of your personal data in accordance with Article 21 of the GDPR.
You also have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe that the processing does not comply with current regulations.
8. LEGAL INFORMATION
This Policy is subject to periodic review and may be modified by the company at any time. When this occurs, we will notify you of any changes and ask you to review the latest version of our Policy and confirm your acceptance.
The requirements of this Policy supplement, and do not replace, any other existing requirements under applicable data protection law, which will prevail in any case.

