Privacy policy
Who processes your data
Antharis Group, S.L., NIF B93904621, registered at Calle El Drago, 10 · 38660 Adeje, Santa Cruz de Tenerife. Contact: contacto@antharis.es
What we collect and what for
From the contact form: name, company, email address and the description of the process you tell us about.
We use it to reply to you and to prepare the conversation you asked for.
Legal basis: your consent, given by ticking the box on the form.
Along with the message we also keep the IP address it was sent from and the browser. They serve two purposes: being able to show that you gave your consent, and protecting the form against abuse. They’re kept with the message and for the same length of time.
Legal basis: legitimate interest in being able to show consent and in protecting the form.
We don’t send marketing using this data. If it were ever to be used for that, a separate and specific consent box would be needed.
Who it’s shared with
To run the service we use providers that process data on our behalf, under a data processing agreement:
| Provider | What for | Location |
|---|---|---|
| Hostinger International Ltd. (Cyprus) | Site hosting and the server where the form is processed | Frankfurt (Germany); its backups, in Lithuania |
| Supabase | Record of messages received | European Union (Frankfurt, Germany) |
| Google (Workspace) | Company email | United States |
Google is a US company. The data transfer relies on the EU-U.S. Data Privacy Framework, the European Commission’s adequacy decision, in which it is listed as a participant.
We don’t sell or pass your data to anyone else.
How long we keep it
Two years from the last contact, unless you ask us to delete it sooner. If a project comes out of the conversation, it’s kept for the duration of the contract and after that for whatever period tax and company law requires.
Your message is kept in more than one place, and each has its own period:
- The record of messages received: two years from the last contact. It’s deleted automatically.
- The notification that reaches the company mailbox: the same period. We delete it ourselves.
- The server that processes the form, only if something fails while processing it: it keeps a technical record of the failure, which is deleted periodically.
- That server’s backups: taken every week, and the last two are kept, so deleted data can remain in them for about two more weeks.
Your rights
You can ask us at any time to give you access to your data, correct it, delete it, restrict or object to its processing, and to provide it in portable form. You can also withdraw your consent whenever you want, without that affecting anything done beforehand.
To exercise them, email contacto@antharis.es saying which right you want to exercise.
If you think we haven’t handled your request properly, you can complain to the Agencia Española de Protección de Datos (www.aepd.es), which is the supervisory authority, as this is a Spanish company.
Our clients’ data
One clarification that doesn’t belong on this page but is worth stating:
When we work on a project, your company’s data is governed by the service contract and the data processing agreement we sign with you, not by this policy. That sets out which providers are involved, where each thing is processed and for how long. You get it in writing before we start.
Security
We apply technical and organisational measures to protect your data. It travels encrypted, and the database where messages are stored also encrypts it at rest. No measure removes the risk entirely, and we won’t say otherwise.
Changes
If this policy changes, we’ll publish the updated version at this same address with its date.
Last updated: pending publication
This is a courtesy translation. In case of discrepancy, the Spanish version prevails.