Andalight Experiences
Last updated: May 2025
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), we inform you that the data controller for your personal data is:
CompanyAndalight ExperiencesTax IDPending ministerial resolution — will be updated once availableContact emailinfo@andalight.esPhone+34 634 42 01 27
Andalight Experiences only collects the personal data that you voluntarily provide to us through the contact form available on this website. We do not collect data from minors under 14 years of age without verifiable consent from their legal guardians.
| Data | Source | Required |
|---|---|---|
| Name | Contact form | Yes |
| Message / enquiry | Contact form | No |
| IP address | Browsing (web server) | Automatic |
| Technical device data | Browsing (server logs) | Automatic |
Technical data (IP, browser type, operating system) is automatically recorded for security and server operation reasons, and is not used to create user profiles or for commercial purposes.
We process your data exclusively for the purposes described below, each supported by the corresponding legal basis in accordance with Article 6 of the GDPR:
| Purpose | Legal basis | Retention period |
|---|---|---|
| Responding to your enquiry or information request | Consent of the data subject (Art. 6.1.a GDPR) | Until resolved + 1 year |
| Managing pre-contractual or contractual relationship | Performance of a contract or pre-contractual measures (Art. 6.1.b GDPR) | Duration of relationship + 5 years |
| Compliance with legal obligations | Legal obligation (Art. 6.1.c GDPR) | As required by applicable law |
| Server security and operation (IP logs) | Legitimate interest (Art. 6.1.f GDPR) | Maximum 12 months |
We do not use your data to build commercial profiles, we do not make automated decisions with legal effects on you, and we do not use your data for direct marketing purposes unless you expressly request it and provide your consent.
As our services may be contracted by users from outside the European Union, we inform you that your data could be accessible from third countries only if the technology infrastructure providers we use (web hosting, mail server) have servers outside the European Economic Area (EEA).
In such cases, Andalight Experiences guarantees that such transfers are carried out with the appropriate safeguards provided for in the GDPR, such as Standard Contractual Clauses approved by the European Commission, or towards countries with a recognised Adequacy Decision.
If you wish to obtain detailed information about the safeguards applicable to a specific transfer, you may request it via info@andalight.es.
Andalight Experiences does not sell, rent or disclose your personal data to third parties for commercial purposes. Your data may only be communicated to third parties in the following circumstances:
| Recipient | Reason | Safeguards |
|---|---|---|
| Web hosting provider | Technical storage of form data | Data processing agreement (Art. 28 GDPR) |
| Email service provider | Sending and receiving communications | Data processing agreement (Art. 28 GDPR) |
| Public authorities and administrations | Compliance with legal obligations or judicial requirements | Legal obligation (Art. 6.1.c GDPR) |
All providers acting as data processors have committed to the confidentiality and security obligations required by current regulations.
In accordance with the GDPR, you have the right to exercise at any time the following rights regarding your personal data:
To exercise any of the rights described, you may contact Andalight Experiences through the following channels, stating your full name, the right you wish to exercise and, if possible, a copy of a document proving your identity:
Emailinfo@andalight.esPhone+34 634 42 01 27
We will respond to your request within a maximum of one month from its receipt. This period may be extended by two additional months in cases of particular complexity, of which we will inform you in advance.
If you are not satisfied with our response, you have the right to lodge a complaint with the competent supervisory authority in your country.
Andalight Experiences has adopted the necessary technical and organisational measures to ensure the security and integrity of the personal data we process, as well as to prevent its loss, alteration, unauthorised access or unauthorised processing.
However, we inform you that no Internet data transmission system can guarantee absolute security, so we recommend that you take your own precautions when sharing information online.
Andalight Experiences reserves the right to modify this Privacy Policy to adapt it to legislative, case law or business developments. Any relevant change will be communicated on this same page, updating the last revision date indicated in the header.
We recommend that you consult this page periodically to stay informed about how we process your personal data. Continued use of the website after the publication of changes implies acceptance of the updated policy.