Privacy policy
Anvipartners respects the privacy of people who interact with its website and services. This policy explains which data we collect, for what purposes, and the rights available to users under Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).
Data controller
Controller: Ángel Álvarez Martínez, trading as Anvipartners, NIF 47315569S, address Calle Marquesa de Gondomar 4, 28903 Getafe, Madrid, Spain.
Contact: contacto@anvipartners.com.
Data we collect
If you write to us through a form: your name, your company’s name, your email address, your phone number if you give it, whatever you tell us, the page you are writing from, the first page you saw on your visit and the website you arrived from (only its domain, for example www.google.co.uk). If you arrived from an advert or a link with campaign parameters, also which campaign you came from.
If you accept analytics cookies, browsing data from Google Analytics, which we only ever see in aggregate, and from Microsoft Clarity: how you move around each page — clicks, scrolling and pointer movement — and a replay of the visit, with anything you type into forms hidden. If you accept marketing cookies, the Meta pixel collects which pages you view, when, and whether you arrived from a Facebook or Instagram advert, together with a browser identifier. From the record of your cookie decision: a random identifier, the date, the categories you accepted and the country.
If you subscribe to the newsletter (available on the Spanish edition of the site): your email address, the topics you mark as priorities, when you agreed to receive it and with which wording, the page you subscribed from, your country (inferred from the connection; we do not store the IP address) and when you confirmed or unsubscribed.
We do not request special category data. If you provide it in free-text messages, we will ask you to delete it.
Purposes of processing
To reply to your enquiry and, if we work together, to manage the relationship, send you project communications and comply with our legal obligations.
If you subscribe, to send you the newsletter and to write to you when we have something useful for your business, including information about our services, based on the topics you mark. We only use what you give us when subscribing; we do not buy data or match it with other sources. Writing to us through a form does not subscribe you.
To know which channel each enquiry comes through, so that we can decide where to invest. To measure how the site is used and see where people get stuck on a page, so that we can fix it, only if you accept it.
If you accept marketing cookies, to measure whether an advert ends in an enquiry: when you submit the form, your email address and your phone number are sent to the advertising platform turned into a code by a one-way hash function (SHA-256), so that it can match the enquiry to the advert that brought it. The platform does not receive the readable data, but it can match that code to an account it already holds with the same email address or phone number. Without that permission, they are not sent.
If you accept marketing cookies, to know how many visits our adverts on Facebook and Instagram bring in, using the Meta pixel. Without that permission, the pixel does not load.
We do not carry out automated profiling with significant legal effects on users.
Legal basis
Replying to your enquiry: taking pre-contractual steps at your request (Art. 6(1)(b) GDPR). The checkbox on the form also records that you have read this policy.
Clients: performance of the contract (Art. 6(1)(b)) and legal obligations under tax and commercial law (Art. 6(1)(c)).
Non-essential cookies and the sending of hashed data to advertising platforms: your consent (Art. 6(1)(a)), which you can withdraw whenever you like from “Cookie settings”, in the footer.
Newsletter and email communications: your consent (Art. 6(1)(a) GDPR and Art. 21 of the Spanish LSSI-CE), given by ticking the box and confirming from the link we send you. You can withdraw it at any time from the unsubscribe link in any email or by writing to us.
Record of your cookie decision: the obligation to be able to demonstrate consent (Arts. 6(1)(c) and 7(1) GDPR).
Retention period
Enquiries that do not lead to an engagement: twelve months from the last exchange.
Clients: for as long as the relationship lasts and, afterwards, for the statutory periods; six years for commercial documentation (Art. 30 of the Código de Comercio).
Newsletter: for as long as you remain subscribed. If you do not confirm the subscription, the sign-up is deleted after thirty days. If you unsubscribe, we keep the address and the date for one year, so that we do not write to you again and can evidence it, and then delete it.
Record of your cookie decision: while it remains in force and for up to three years afterwards, so that we can evidence it. Google Analytics data: the period configured in the tool, fourteen months at most. Microsoft Clarity: thirty days for visit replays and thirteen months for aggregate usage data. Meta pixel: ninety days for its cookies; how long Meta keeps the data afterwards is for Meta to decide, under its own policy.
Recipients and processors
We do not sell or disclose personal data, except where required by law. The following process it on our behalf, as processors: Vercel (hosting of the website and of our CRM, where we record each message in order to answer it and follow it up), Google (Google Workspace email, which also sends the newsletter, Google Analytics and, with your permission, Google Ads), Microsoft (Microsoft Clarity, with your analytics permission) and Supabase (our CRM database, the newsletter subscriber list and the record of cookie decisions).
With your marketing permission, the Meta pixel sends data about your visit to Meta Platforms Ireland Ltd. For that collection and transmission we are joint controllers with Meta, under its Controller Addendum; what Meta does with the data afterwards is its own responsibility and is explained in its Privacy Policy. You can exercise your rights with us or with Meta.
Some of these providers are in the United States — Google, Meta, Microsoft and Vercel — and the data may be processed there. The transfer is covered by the EU-US Data Privacy Framework, which they have signed up to, or by the European Commission’s standard contractual clauses.
Your rights
You may exercise at any time the rights of access, rectification, erasure, objection, restriction and portability by emailing contacto@anvipartners.com with the subject 'GDPR rights' and proof of identity.
You have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that processing does not comply with the rules.
Changes to this policy
We may update this policy to reflect regulatory or operational changes. The current version is always published at this same URL with a date indication.