Privacy Policy

Last updated: February 2026

1. Data Controller

In accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD), we inform you that the personal data you provide will be processed by:

2. For what purpose do we process your data?

At Adviral we process the information provided by interested persons for the following purposes:

• Contact management and customer service: Handling requests for information, questions or free audit requests that you send us through our web forms or email.
• Provision of services: If you hire our marketing services, managing the administrative, tax and accounting relationship.
• Commercial communications (Newsletter): Only if you have given us your express consent, we will send you information about news, articles from our blog and promotions.

3. What is the legal basis for processing?

The legal basis that allows us to process your data depends on your interaction with us:

• Consent of the data subject: This is the basis for answering your inquiries sent via form or email, as well as for sending commercial communications if you have subscribed.
• Performance of a contract: Required to manage the agency service if you become a client.
• Legitimate interest: To carry out satisfaction surveys or ensure network security.
• Legal Obligation: To comply with tax and accounting regulations (e.g. invoicing).

4. How long will we keep your data?

Personal data will be kept for as long as the commercial relationship continues or you do not request its deletion. Once the relationship ends, we will proceed to block the data.

This means the data will be stored in restricted form, available exclusively to judges and courts, the Public Prosecutor’s Office or the competent authorities, during the legal limitation periods for liabilities (generally between 4 and 6 years). After this time, it will be permanently deleted.

5. Recipients: Who do we share your data with?

Your data will not be disclosed to third parties except where legally required. However, to provide our services we use technology providers who act as data processors under strict confidentiality agreements:

• Web hosting service providers.
• Email marketing and customer management platforms.
• Administrative and accounting services.

International Transfers

We use services from technology providers such as Google LLC (for analytics and advertising) that may involve international data transfers to the US. These transfers are carried out under the EU-US Data Privacy Framework (DPF), ensuring an adequate level of protection in accordance with European regulations.

6. Your Rights (ARSULIPO)

As a user, you have the right to exercise control over your personal information:

• Access: Know whether we are processing your data and obtain a copy.
• Rectification: Correct inaccurate data.
• Erasure (Right to be forgotten): Request that we delete your data when it is no longer necessary.
• Restriction: Ask that processing be halted in certain circumstances.
• Portability: Receive your data in a structured format.
• Objection: Object to processing, especially if it is for marketing.

To exercise these rights, you can send an email to Info@adviral.es attaching a copy of your ID. You also have the right to lodge a complaint with the Spanish Data Protection Agency if you consider that we have not processed your data correctly.

7. Data Security

Adviral is committed to fulfilling its obligation of confidentiality regarding personal data and its duty to safeguard it, adopting the necessary measures to prevent its alteration, loss, processing or unauthorized access, taking into account at all times the state of technology.