Andera is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights under the EU General Data Protection Regulation (GDPR) and applicable Spanish data protection law.
1. Who We Are
The data controller responsible for your personal data is:
Andera RE S.L.
Madrid, Spain
Email: contact@andera.io
Website: www.andera.io
If you have any questions about this policy or how we handle your data, please contact us at the email address above.
2. What Data We Collect
Data you provide directly
When you complete the contact form on our website, we collect:
- First and last name
- Email address
- Company name (if provided)
- Your message and area of interest
Data collected automatically
When you visit our website, we and our third-party service providers may automatically collect:
- IP address and approximate location (country/city level)
- Browser type, operating system, and device information
- Pages visited, time on site, and navigation behaviour
- Referring website or traffic source
- Professional data inferred from your LinkedIn profile (if you are logged into LinkedIn during your visit)
3. How We Use Your Data
We use your personal data for the following purposes:
- To respond to your enquiry — when you submit our contact form, we use your details to get back to you. Legal basis: legitimate interests / performance of a pre-contractual relationship.
- To manage our business relationships — we store contact and company information in our CRM (HubSpot) to track our professional interactions. Legal basis: legitimate interests.
- To analyse website traffic — we use Google Analytics 4 to understand how visitors use our site, helping us improve content and user experience. Legal basis: consent (via our cookie banner).
- To understand our professional audience — we use the LinkedIn Insight Tag to receive anonymised demographic data about visitors (job title, industry, seniority). Legal basis: consent (via our cookie banner).
4. Third-Party Services
We use the following third-party services that may process your data:
HubSpot (CRM & Form Processing)
Form submissions are stored in HubSpot, a customer relationship management platform. HubSpot is headquartered in the United States and processes data under Standard Contractual Clauses. See HubSpot's Privacy Policy.
Google Analytics 4
We use Google Analytics 4 to collect anonymised usage data about visits to our website. Google may process data in the United States under Standard Contractual Clauses. IP anonymisation is enabled. See Google's Privacy Policy.
LinkedIn Insight Tag
We use LinkedIn's Insight Tag to receive aggregate, anonymised demographic data about our website visitors via LinkedIn's Campaign Manager platform. LinkedIn may process data in the United States. See LinkedIn's Privacy Policy.
CookieYes
We use CookieYes to manage cookie consent on our website. CookieYes records your consent preferences. See CookieYes's Privacy Policy.
5. How Long We Keep Your Data
- Contact form submissions — retained in our CRM for up to 3 years from last contact, or until you request deletion.
- Analytics data — Google Analytics data is retained for 14 months by default.
- Cookie consent records — retained for 1 year.
6. Your Rights
Under GDPR, you have the following rights regarding your personal data:
- Right of access — you can request a copy of the data we hold about you.
- Right to rectification — you can ask us to correct inaccurate data.
- Right to erasure — you can ask us to delete your data ("right to be forgotten").
- Right to restrict processing — you can ask us to limit how we use your data.
- Right to object — you can object to processing based on legitimate interests.
- Right to data portability — you can request your data in a structured, machine-readable format.
- Right to withdraw consent — where processing is based on consent (e.g. cookies), you can withdraw at any time via our cookie settings.
To exercise any of these rights, please contact us at contact@andera.io. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es.
7. International Transfers
Some of our third-party service providers (HubSpot, Google, LinkedIn) are based outside the European Economic Area, primarily in the United States. Where data is transferred outside the EEA, we rely on Standard Contractual Clauses approved by the European Commission to ensure your data is protected to the same standard as within the EU.
8. Cookies
We use cookies and similar tracking technologies on our website. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. We encourage you to review this policy periodically.
10. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:
Andera RE S.L.
Madrid, Spain
contact@andera.io