1. Controller
Andorsoft, SA
Company registration number: SA 132
Av. Fiter i Rossell, 4, Ed. Centre de Negoci, AD700 Escaldes-Engordany, Principality of Andorra
+376 800 750 · comercial@andorsoft.ad
Data protection dpd@andorsoft.ad
2. Processing, purposes and legal bases
| Processing | Purpose and data | Legal basis | Retention |
|---|---|---|---|
| Enquiries and demonstrations | Identity, contact, company and message to respond and prepare proposals. | Requested pre-contractual steps. | Up to 12 months after last contact, unless a contract or legal duty applies. |
| Clients and billing | Contract, support, invoicing and payment. | Contract and legal duties. | During the relationship and applicable statutory periods. |
| Newsletter | Email and evidence of consent. | Withdrawable consent. | Until you unsubscribe; evidence is retained as needed to defend claims. |
| Analytics and cookies | Online identifiers and browsing to measure and improve the site. | Cookie consent banner. | As shown in the panel, up to the recommended 25-month maximum. |
| .ad domains | Identity, contact, NRT/passport and technical data. | Contract and .ad registry duties. | During management and applicable statutory periods. |
| Recruitment | Identity, contact, CV and experience. | Pre-contractual steps or consent. | Up to 12 months unless hired or withdrawn. |
3. Recipients and processors
Hosting, email, maintenance, security, analytics, commercial management and domain registry providers may access data under contract. Authorities may receive data where required. We do not sell personal data.
4. International transfers
For processing outside Andorra we use an adequacy decision, standard contractual clauses or another LQPD safeguard. Ask dpd@andorsoft.ad for details.
5. Rights and complaints
You may request access, rectification, erasure, objection, restriction, portability and withdrawal of consent at dpd@andorsoft.ad. You may complain to the Andorran Data Protection Agency, Doctor Vilanova 15-17, AD500 Andorra la Vella.
6. Children
Our services do not target children. Consent for anyone under 16 must be given or authorised by a legal representative.
7. Automated decisions
Website forms do not produce legal effects through decisions based solely on automated processing.
8. Security and incidents
We apply risk-based access control, encryption, backups, traceability and incident procedures.
9. Changes
We review this policy when processing, providers or law changes.