Skip to main content

Privacy Policy

Last updated: 25 September 2026.

1. Data Controller

Identity: AHCEBRIAN S.L.
CIF: B44962678
Postal Address: Plaza del Niño Jesús, 3, 28009, Madrid, España
Email: ahcebrian@ahcebrian.com

2. Purpose of processing

To answer the enquiries and requests for information we receive through the contact form, by email or by phone, and to send you the information you ask for.

To manage our business relationships with client companies, suppliers and prospective clients: in our customer relationship management tool (CRM) we record the professional contact details of the people we deal with, the email correspondence we exchange with them, notes of our conversations and the follow-up of business opportunities.

We do not take automated decisions or build profiles with legal effects on you. Nor do we measure whether you open our emails: we do not use tracking pixels.

3. Data we process and where it comes from

Identification and professional contact details (name, position, company, email, phone number and public professional profile), the content of the emails you exchange with our team and their attachments, and the related notes and business opportunities.

We obtain them from you (form, email, meetings), from the company you work for or from public professional sources, such as your company’s website. We only store the content of emails from people registered as contacts in the CRM; for all other emails in our mailboxes we only keep the sender, subject and date, for a maximum of 30 days.

4. Legal basis

Requests for information are processed to take pre-contractual steps at your request and, where applicable, to perform the contract between us (Article 6(1)(b) GDPR).

The professional contact details of people working at client companies, suppliers or prospective clients, and our business correspondence with them, are processed on the basis of our legitimate interest in maintaining and developing business-to-business relationships (Article 6(1)(f) GDPR and Article 19 of Spanish Organic Law 3/2018). You may object to this processing at any time.

5. Data retention

CRM data is kept for as long as the business relationship lasts and for two years after the last contact. After that period, emails are deleted automatically, unless there is an open business opportunity.

For emails that are not linked to any contact, only the sender, subject and date are kept, and they are deleted after 30 days. Backups are kept for 30 days. If you ask us to erase your data, we delete your contact record and your emails are no longer linked to it, so they are removed within that same period.

Data we must keep because of a legal obligation (for example, tax or accounting) will be kept for the periods required by law.

6. Recipients and data processors

We do not disclose your data to third parties unless required by law. To provide our services we rely on providers that process data on our behalf, under a data processing agreement and only on our instructions:

  • Supabase (database and authentication; servers in the European Union).
  • Cloudflare (website hosting, file storage and backups).
  • Modal (processing of CRM email; European Union region).
  • Raiola Networks (email server; Spain).
  • Resend (sending the website’s automatic emails, such as the notice of a received form).
  • Anthropic (the Claude artificial intelligence assistant, which our staff may use to consult and prepare work in the CRM).

Some of these providers are companies based in the United States. Where an international data transfer may take place, it is covered by the EU-U.S. Data Privacy Framework or by the standard contractual clauses approved by the European Commission.

7. Rights

Anyone has the right to obtain confirmation as to whether or not AHCEBRIAN S.L. is processing personal data concerning them.

Data subjects have the right to access their personal data, to request the rectification of inaccurate data or, where appropriate, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only keep it for the exercise or defence of claims. They may also request the portability of the data they have provided to us.

On grounds relating to their particular situation, data subjects may object to the processing of their data based on legitimate interest. AHCEBRIAN S.L. will stop processing the data, except for compelling legitimate grounds or for the exercise or defence of possible claims.

To exercise these rights, write to us at ahcebrian@ahcebrian.com stating which right you wish to exercise. If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).