Privacy Policy
In accordance with GDPR (EU Regulation 2016/679) and LOPDGDD (Ley Orgánica 3/2018)
Data controller
Data we collect and why
| Data | Source | Purpose | Legal basis |
|---|---|---|---|
| Name, email | Booking form | Fulfill free consultation | GDPR Art. 6(1)(b) — contract |
| Company, message | Booking form (optional) | Context for consultation | GDPR Art. 6(1)(b) — contract |
| Name, email, company, message | Google Calendar event | Schedule consultation | GDPR Art. 6(1)(b) — contract |
| IP, browser, device | Server logs | Security and abuse prevention | GDPR Art. 6(1)(f) — legitimate interest (infrastructure protection) |
Third-party data processors
| Processor | Country | Purpose | Safeguard |
|---|---|---|---|
| Google LLC | USA | Calendar, Meet | EU-US Data Privacy Framework |
| Resend Inc. | USA | Sending email confirmations | EU-US Data Privacy Framework |
| Vercel Inc. | USA | Website hosting | EU-US Data Privacy Framework |
International data transfers
Data is transferred to US-based processors certified under the EU-US Data Privacy Framework (European Commission adequacy decision, July 2023).
Data retention
| Data | Retention period |
|---|---|
| Booking and contact data | 6 months after consultation date |
| Calendar events | 6 months after consultation date |
| Server logs | 90 days |
Your rights (GDPR Art. 15–22)
- 1Access your personal data
- 2Rectify inaccurate data
- 3Erase your data (right to be forgotten)
- 4Restrict processing
- 5Data portability
- 6Object to processing
- 7Withdraw consent (where consent is the legal basis — Art. 7(3) GDPR)
To exercise your rights, email alex@avkgroup.org. Response within 30 days.
You have the right to lodge a complaint with AEPD (www.aepd.es).
Necessity of data provision
Name and email are required to book the consultation and send a Google Calendar invitation. Without this data, booking is not possible. Company and message fields are optional and do not affect service delivery.
Automated decision-making
We do not use profiling or automated decision-making.
Google data usage (OAuth)
We use Google Calendar API (scope: calendar.events) solely to create events for booked consultations. Google user data is not shared with third parties for advertising.
Last updated: February 2026