Privacy Policy

Last updated: March 2026

1. Data Controller

The data controller for personal data collected through this website is:


Andtech Consulting

Address: Encamp, Andorra (AD200)

Email: info@andtechconsulting.com


Andtech Consulting is a company incorporated in the Principality of Andorra, subject to Andorran data protection regulations.

2. Applicable Legislation

Personal data processing is carried out in accordance with Llei 29/2021, del 28 d'octubre, qualificada de protecció de dades personals (Law 29/2021, qualified law on personal data protection) of the Principality of Andorra, as well as any complementary regulations that may apply.


The competent supervisory authority is the APDA (Agència Andorrana de Protecció de Dades), based in Andorra la Vella. More information is available at www.apda.ad.


Additionally, Andtech Consulting follows best practices in data protection, aligning with the principles of the EU General Data Protection Regulation (GDPR) to ensure the highest level of protection for all users.

3. Data We Collect

Through this website, we collect the following personal data:


Contact form:

  • Full name
  • Email address
  • Company name (optional)
  • Message / inquiry

    • Browsing data (cookies):

  • IP address
  • Browser and device type
  • Pages visited and time spent
  • Web analytics data (Google Analytics, if the user gives consent)

    • We do not collect specially sensitive data (health data, sexual orientation, political opinions, etc.).

    4. Purpose of Processing

    Personal data collected is processed for the following purposes:


  • Inquiry management: responding to information requests submitted through the contact form.
  • Commercial communication: contacting the user regarding the services offered, always with their prior consent.
  • Website improvement: analyzing website usage to improve its performance and user experience.
  • Legal compliance: fulfilling applicable legal obligations.

    • 5. Legal Basis

    Data processing is based on:


  • Consent: by submitting the contact form or accepting cookies, the user gives express consent for data processing.
  • Legitimate interest: for website improvement and service delivery.
  • Legal obligation: when processing is necessary to comply with legal obligations.

    • 6. Data Retention

    Personal data will be retained for the time necessary to fulfill the purpose for which it was collected:


  • Contact form data: retained for a maximum of 12 months from the last communication, unless a contractual relationship is established.
  • Cookie data: according to the periods indicated in the cookie policy (section 8).

    • After these periods, data will be securely deleted or anonymized.

    7. Data Recipients

    Personal data will not be shared with third parties except when required by law. However, the following service providers, acting as data processors, may have access to the data:


  • Hosting and cloud service providers for website hosting.
  • Google Analytics (if the user consents to analytics cookies) for web traffic analysis.
  • Email providers for communication management.

    • These providers are subject to confidentiality and data processing agreements that ensure data protection.

    8. Cookie Policy

    This website uses cookies. Cookies are small text files stored on the user's device when visiting a website.


    Types of cookies used:


  • Necessary cookies: essential for the website to function (language preference, visual theme). No consent required.
  • Analytics cookies: allow analysis of website usage (Google Analytics). Only activated with user consent.
  • Marketing cookies: allow showing relevant advertising. Only activated with user consent.

    • Users can manage their cookie preferences at any time through the cookie banner or by clearing cookies from their browser settings.

    9. User Rights

    In accordance with Llei 29/2021, users have the following rights regarding their personal data:


  • Right of access: obtain confirmation of whether their data is being processed and access it.
  • Right to rectification: request correction of inaccurate or incomplete data.
  • Right to erasure: request deletion of data when it is no longer necessary for the purpose for which it was collected.
  • Right to object: object to data processing in certain circumstances.
  • Right to data portability: receive data in a structured, commonly used format and transmit it to another controller.
  • Right to restriction of processing: request restriction of processing in certain circumstances.

    • To exercise any of these rights, please send a request to:


    info@andtechconsulting.com


    Including "Exercise of data protection rights" in the subject line and attaching a copy of your identity document.


    We will respond to your request within a maximum of 30 days.


    If you believe your rights have not been properly addressed, you may file a complaint with the Agència Andorrana de Protecció de Dades (APDA) at www.apda.ad.

    10. Data Security

    Andtech Consulting implements appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction, including:


  • Encryption of communications via HTTPS/TLS.
  • Access control to information systems.
  • Regular backups.
  • Regular security reviews.

    • 11. International Transfers

    In the event that personal data is transferred outside the Principality of Andorra, we ensure that adequate safeguards are applied in accordance with Andorran legislation, including standard contractual clauses or other mechanisms recognized by the APDA.

    12. Changes to This Policy

    Andtech Consulting reserves the right to modify this privacy policy at any time. Any changes will be published on this page with the last updated date. We recommend reviewing this policy periodically.

    13. Contact

    For any inquiries regarding this privacy policy or the processing of your personal data, please contact us at:


    info@andtechconsulting.com

    Encamp, Andorra (AD200)