Privacy policy

Techmind Academy, SLU processes your personal data in accordance with Andorran Law 29/2021 of 28 October on the protection of personal data (LQPD) and, when you contact us from the European Union, with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR). This policy explains what data we process, why, for how long and what rights you have.

1. Data controller

• Controller: Techmind Academy, SLU (trading as Techmind)
• NRT: L719284B
• Address: Carrer Doctor Nequi, 7, AD500 Andorra la Vella (Principality of Andorra)
• Email: [email protected]

We have not appointed a data protection officer, as our activity does not require one. For any privacy question, email us at [email protected].

2. Data we process

• Contact form: name, company or institution (optional), email, area of interest, your message and the language of the page. Our form provider also logs the IP address and time of submission to filter spam.
• Emails you send us directly: your address and the content of the message.
• Browsing: when you visit the site, our hosting provider processes your IP address and technical browser data to serve the pages and protect them against attacks. Visit statistics are aggregated: they use no cookies and cannot identify you.

Please do not include special category data, such as health or political opinions, or other people’s data without their permission in your message.

3. Purposes and legal basis

• Answering your enquiry and, if you ask us to, preparing a proposal. Legal basis: your consent, given by ticking the box on the form or by emailing us, and taking steps at your request before entering into a contract.
• Managing our relationship with clients if we reach an agreement. Legal basis: performance of the contract and compliance with our legal obligations, such as tax and accounting.
• Keeping the site secure and understanding its use in aggregate. Legal basis: our legitimate interest in protecting and improving the site without identifying anyone.

These legal bases are set out in Article 6 of the GDPR and their equivalents in the LQPD. We do not make automated decisions or build profiles, and we will not send you marketing communications unless you expressly ask us to.

4. Retention

• Enquiries that do not lead to a contract: up to one year from our last exchange, unless you ask us to delete them sooner.
• Clients: for as long as the relationship lasts and afterwards for the applicable legal and tax limitation periods.
• Copy held by the form provider: Web3Forms keeps submissions for up to three years. If you exercise your right to erasure, we will also ask it to delete them.
• Technical security logs: kept by our hosting provider for short periods, solely to protect the service.

5. Recipients

We do not sell or share your data with third parties unless required by law. To provide our services we rely on providers that process data on our behalf under a data processing agreement:

• Web3Creative (Web3Forms), India: delivery of contact form messages. It uses sub-processors for hosting and spam filtering, such as Amazon Web Services, Cloudflare, Hetzner (European Union), CleanTalk and Automattic (Akismet), the last two in the United States.
• Microsoft (Microsoft 365): the email service where we receive and answer your messages.
• Cloudflare, Inc.: website hosting, content delivery, security and aggregated visit statistics.

6. International transfers

Andorra is covered by a European Commission adequacy decision (Decision 2010/625/EU), so data can flow between the European Union and Andorra with an equivalent level of protection.

Some of our providers process data outside Andorra and the European Economic Area:

• Web3Forms (India) and its sub-processors in the United States: transfers are covered by the standard contractual clauses approved by the European Commission (Implementing Decision (EU) 2021/914).
• Microsoft and Cloudflare: both are certified under the EU-US Data Privacy Framework and also apply standard contractual clauses.

You can ask us for more information about these safeguards at[email protected].

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time, and withdraw your consent without affecting the lawfulness of prior processing. Email us at [email protected] stating which right you wish to exercise. If we have reasonable doubts about your identity, we may ask you to verify it. We will reply within one month at the latest.

If you believe we have not handled your request properly, you can lodge a complaint with the Andorran Data Protection Agency (www.apda.ad) or, if you live in the European Union, with the supervisory authority of your country, such as the Spanish Data Protection Agency (www.aepd.es).

8. Security

We apply technical and organisational measures appropriate to the risk, such as encrypted connections (HTTPS), restricted access to data and providers that offer security guarantees.

9. Minors

Our services are aimed at companies, institutions and professionals. We do not knowingly collect data from children under 16.

10. Cookies

This site uses no cookies that require your consent. See our cookie policy for details.

11. Changes to this policy

We may update this policy to reflect changes in the law or in our services. The date of the latest update is shown at the top of the page.