LEGAL

Legal notice and privacy policy

Last updated: October 2026

This English version is provided for convenience. In case of any discrepancy, the Spanish version prevails, as it is the one with legal validity.

ALEBIA ANALYTICS, S.L. provides, through the website www.alebia.es, this privacy policy in order to inform you in detail about how we process your personal data and protect your privacy and the information you provide to us. If we make changes to it in the future, we will let you know through the website or by other means so that you can learn about the new privacy conditions introduced.

In compliance with Regulation (EU) 2016/679, the General Data Protection Regulation, and Organic Law 3/2018 of 5 December on Personal Data Protection and the guarantee of digital rights, we inform you of the following:

Data controller

Owner: ALEBIA ANALYTICS, S.L. · Tax ID (NIF): B04933149

Registered office: CALLE Luis Braille, 7, OVIEDO, ASTURIAS (Spain)

Email: info@alebia.es

Website: www.alebia.es

For what purpose do we process your personal data?

At ALEBIA ANALYTICS, S.L. we collect and process your personal information, in general, to manage the relationship we have with you. The main purposes we have identified are the following:

• Management and contracting of the products and services offered by our company
• Communication
• Handling the requests for information, suggestions and complaints you may send us
• Keeping you informed about events, offers, products and services that may be of interest to you through different communication channels, provided that you have given your consent.
• Management of the employment relationship, in the case of our employees.
• Management of the commercial relationship with our suppliers
• Management of personnel recruitment

How do we collect your information?

We collect your personal information through different means, but you will always be informed at the time of collection by means of information clauses about the data controller, the purpose and legal basis of the processing, the recipients of the data and the retention period of your information, as well as the way in which you can exercise your data protection rights.

In general, the personal information we process is limited to identification data (first name and surname, date of birth, address, national ID number, telephone and email), contracted services and payment and billing data.

In personnel management and recruitment, we collect academic and professional data so that we can meet the obligations arising from maintaining the employment relationship or, where applicable, so that you can join our team.

ALEBIA ANALYTICS, S.L. uses social networks, and this is another way of reaching you. The information gathered through the messages and communications you post may contain personal information that is available online and accessible to the public. These social networks have their own privacy policies explaining how they use and share your information, so ALEBIA ANALYTICS, S.L. recommends that you read them before using them to confirm that you agree with the way your information is collected, processed and shared.

Through the contact form on this website we collect the data you voluntarily provide (name, email, organisation and message) in order to deal with your request for information or for a demonstration. The legal basis for the processing is your consent, which you give by ticking the box accepting this privacy policy before sending the form and which you may withdraw at any time. Once sent, the message reaches our mailbox (info@alebia.es).

Through our website we collect personal information related to your browsing through the use of cookies. To find out clearly and precisely which cookies we use, what their purposes are and how you can configure or disable them, see our Cookie Policy.

User responsibility

By providing us with your data through electronic channels, the user guarantees that they are over 14 years of age and that the data provided to ALEBIA ANALYTICS, S.L. are true, accurate, complete and up to date. To this end, the user confirms that they are responsible for the truthfulness of the data communicated and that they will keep this information duly updated so that it reflects their real situation, being responsible for any false or inaccurate data they may provide, as well as for any direct or indirect damages that may arise.

How long do we keep your information?

At ALEBIA ANALYTICS, S.L. we only keep your information for the period of time necessary to fulfil the purpose for which it was collected, to comply with the legal obligations imposed on us and to deal with any liabilities that may arise from the fulfilment of the purpose for which the data were collected.

If you wish to join our team and apply for one of our positions, the data provided will become part of our job bank and will be kept for the duration of the selection process and for a maximum of 5 years or until you exercise your right to erasure.

In any event, and as a general rule, we will keep your personal information for as long as there is a contractual relationship binding us or you do not exercise your right to erasure and/or restriction of processing, in which case the information will be blocked and not used beyond its retention, for as long as it may be necessary for the exercise or defence of claims or for any liability that may arise and need to be dealt with.

To whom do we disclose your data?

For the operation of this website we rely on the following providers, who act as data processors on behalf of ALEBIA ANALYTICS, S.L.: Web3Forms (operated by Web3Creative), which receives the contact form data and forwards it to our mailbox, and Netlify, Inc., which hosts the website and may process technical data of visits, such as the IP address.

In general, at ALEBIA ANALYTICS, S.L. we do not share your personal information, except for those disclosures we must make on the basis of legal obligations.

Likewise, your personal information will be available to the Public Administrations, Judges and Courts, to deal with any liability arising from the processing.

International data transfers

Some of the providers mentioned process data outside the European Economic Area (EEA). Specifically, Web3Forms is operated by Web3Creative from India and relies on third-party infrastructure (Amazon Web Services, Cloudflare and Hetzner, as well as an anti-spam service in the United States that receives the IP address and email of the person submitting the form), and Netlify, Inc. provides the hosting service from the United States. In the case of Web3Forms, transfers from the EEA are covered by the standard contractual clauses approved by the European Commission, incorporated into its data processing agreement. Web3Forms keeps the messages it receives for a maximum of three years. You can consult its privacy policy and its data processing agreement.

What are your rights regarding the processing of your data and how can you exercise them?

Data protection regulations allow you to exercise your rights of access, rectification, erasure and data portability, and to object to and restrict the processing, as well as not to be subject to decisions based solely on the automated processing of your data, where applicable.

These rights are characterised by the following:

• Exercising them is free of charge, unless the requests are manifestly unfounded or excessive (e.g. repetitive), in which case ALEBIA ANALYTICS, S.L. may charge a fee proportionate to the administrative costs incurred or refuse to act
• You may exercise the rights directly or through your legal or voluntary representative
• We must respond to your request within one month, although, taking into account the complexity and number of requests, this period may be extended by a further two months.
• We are obliged to inform you of the means to exercise these rights, which must be accessible, and we cannot deny you the exercise of the right solely because you opt for another means. If the request is submitted by electronic means, the information will be provided by these means where possible, unless you ask us to do otherwise.
• If ALEBIA ANALYTICS, S.L. does not act on the request, it will inform you, at the latest within one month, of the reasons for not acting and of the possibility of lodging a complaint with a Supervisory Authority

To make it easier to exercise them, here are the links to the request form for each of the rights (in Spanish):

• Form to exercise the right of access
• Form to exercise the right of rectification
• Form to exercise the right to object
• Form to exercise the right to erasure (“right to be forgotten”)
• Form to exercise the right to restriction of processing
• Form to exercise the right to data portability
• Form to exercise the right not to be subject to automated individual decisions

To exercise your rights, ALEBIA ANALYTICS, S.L. makes the following means available to you:

• By a written, signed request addressed to ALEBIA ANALYTICS, S.L., CALLE Luis Braille, 7, OVIEDO, ASTURIAS (Spain), Ref. Exercise of Rights (LOPD).
• By sending a scanned, signed form to the email address info@alebia.es, stating “Exercise of Rights LOPD” in the subject line.

In both cases, you must prove your identity by enclosing a photocopy or, where applicable, a scanned copy of your national ID or equivalent document, so that we can verify that we only reply to the data subject or their legal representative, in which case supporting documentation of the representation must be provided.

Likewise, and especially if you consider that you have not obtained full satisfaction in the exercise of your rights, we inform you that you may lodge a complaint with the national supervisory authority, the Spanish Data Protection Agency (Agencia Española de Protección de Datos), C/ Jorge Juan, 6, 28001 Madrid.

How do we protect your information?

At ALEBIA ANALYTICS, S.L. we are committed to protecting your personal information.

We use reasonably reliable and effective physical, organisational and technological measures, controls and procedures aimed at preserving the integrity and security of your data and guaranteeing your privacy.

In addition, all staff with access to personal data have been trained and are aware of their obligations regarding the processing of personal data.

All these security measures are reviewed periodically to ensure their suitability and effectiveness.

However, absolute security cannot be guaranteed and no security system is impenetrable. Therefore, should any information being processed and under our control be compromised as a result of a security breach, we will take appropriate measures to investigate the incident, notify the Supervisory Authority and, where applicable, those users who may have been affected so that they can take appropriate measures.