Last updated: April 2026
Privacy policy
At Alastia we handle your personal data with the same rigour we apply to our clients' systems. This policy explains what data we collect, why, and what rights you have.
Data controller
Alastia SLU · NRT L-720150-X · Carrer Prat de la Creu 96, 4-1, AD500 Andorra la Vella · info@alastia.com. The controller of the data you submit through this site is Alastia SLU, a company incorporated in the Principality of Andorra.
Purposes
We process the data you enter in the contact form for the sole purpose of responding to your enquiry and, where appropriate, initiating a commercial relationship. We do not use your data for advertising and do not share it with third parties for commercial purposes.
Legal framework and basis
Alastia is based in Andorra, so this policy is governed by Llei 29/2021 qualificada de protecció de dades personals and its regulations. For EU residents, the rights recognised by Regulation (EU) 2016/679 (GDPR) are also honoured. Andorra has had an EU adequacy decision since 2010. The processing is based on your consent (art. 13 of Llei 29/2021 / art. 6.1.a GDPR), given by ticking the corresponding box, and on Alastia's legitimate interest in attending to your enquiry.
Retention period
We keep your data for as long as necessary to handle your enquiry and, afterwards, for the period legally required by Andorran tax and commercial regulations. After that period, we delete the data.
Recipients and processors
Your data is processed with the support of technical providers primarily located in the EU or offering equivalent safeguards: Resend (transactional email), Vercel (hosting) and Microsoft 365 (corporate mailbox). Providers that may process data outside the EU do so under approved standard contractual clauses or equivalent mechanisms.
Your rights
You can access, rectify, erase, limit processing, object to, and request portability of your data. Exercise these rights by writing to info@alastia.com. If you consider we have not handled your request correctly, you can lodge a complaint with the Andorran Data Protection Agency (APDA · apda.ad). EU residents may also contact the supervisory authority in their country of residence.
Policy changes
We may update this policy when services or applicable regulations change. The current version will always be published on this page.