Privacy policy

1. Data controller

The controller of the personal data collected through this website is:

Field	Value
Owner	Santi Sánchez Canals, trading under the business name Desplega
NRT	F-219871-U
Address	C. Puial, 29, Baixos 1, AD500 Andorra la Vella, Principality of Andorra
Trade register	929288 A
Email	info@desplega.dev
Phone / WhatsApp	+376 813 282
Website	desplega.dev

For any privacy enquiry or to exercise your rights, you can write to info@desplega.dev.

Desplega has not appointed a data protection officer (DPO) nor does it keep a record of processing activities, since, given its activity and volume, the LQPD does not require it.

2. Applicable regulations

We process your data in accordance with:

Law 29/2021, of 28 October, on the protection of personal data (LQPD).
The Regulation implementing Law 29/2021, approved by Decree 391/2022, of 28 September.
The guides and recommendations of the Andorran Data Protection Agency (APDA), including the Guide on the use of cookies, privacy policy and legal notice.

The LQPD is inspired by Regulation (EU) 2016/679 (GDPR). When we process data of people located in the European Union in the context of offering our services, we also apply the equivalent principles and safeguards of the GDPR. Andorra has an adequacy decision from the European Commission, which recognizes a level of protection comparable to that of the EU.

3. What data we process, for what purpose and on what legal basis

We only collect the data you provide directly and the minimum necessary for the technical operation of the website.

Activity	Data	Purpose	Legal basis (LQPD / GDPR)
Contact form	Name, email, subject and message	Answer your enquiry and, if you request it, prepare a quote	Consent when submitting the form and application of pre-contractual measures at your request (art. 6.1 a) and b) GDPR)
Email or WhatsApp	The data you include (name, phone, email, message content)	Handle the communication	Consent and pre-contractual measures
Client relationship	Identifying, contact, billing and project data	Provide the contracted service, invoice and comply with tax and accounting obligations	Performance of the contract and compliance with legal obligations
Website operation	IP address, browser type, date and time of access (server logs)	Serve the website, ensure its security and prevent abuse	Legitimate interest in the security of the service

We do not make automated decisions or create profiles with your data. We do not use it to send advertising without your prior and explicit consent.

We do not request or process special categories of data (sensitive data), such as those relating to health, ethnic origin, political opinions or beliefs. We ask that you do not include them in your messages.

The fields marked with an asterisk (*) in the form are mandatory; if you do not complete them, we will not be able to reply to you. If you provide us with data of other people, you are responsible for having informed them beforehand.

4. Retention, recipients and transfers

How long we keep the data

Contact enquiries without a contract: up to 3 months after the last communication, and then they are deleted.
Clients: for the duration of the relationship and, afterwards, for the periods required by Andorran tax, accounting and commercial regulations, and the limitation period for possible liabilities.
Technical server logs: the limited time established by the hosting provider for security purposes.

When a law requires us to keep the data beyond the purpose for which it was collected, we will keep it blocked and only process it to comply with that obligation. Once those periods have ended, we will delete it.

We do not sell or transfer your data to third parties, and it is processed confidentially in accordance with Law 29/2021, on the protection of personal data (LQPD), and the regulations that develop it.

We may disclose data to public authorities when required by law.

If you contact us via WhatsApp or visit our LinkedIn profile, these platforms process your data according to their own privacy policies (Meta Platforms and LinkedIn Corporation, respectively).

International transfers

Desplega does not foresee international transfers related to the provision of its services.

5. Your rights

You can exercise at any time, free of charge, the rights that the LQPD grants you:

Access: find out what data of yours we process.
Rectification: correct inaccurate or incomplete data.
Erasure: ask us to delete your data.
Restriction of processing: ask us to suspend its use in certain cases.
Portability: receive the data you have provided us in a structured format.
Objection: object to processing based on legitimate interest.
Withdraw consent, without this affecting the lawfulness of the prior processing.

To exercise them, send a request to info@desplega.dev indicating the right you wish to exercise. Normally it will be enough for us to verify your identity by proportionate means —for example, that the request comes from the email address you provided us—; we will only ask you for additional identification if there are reasonable doubts about your identity. We will respond within one month, extendable in the cases provided for by law.

Complaint to the supervisory authority

If you consider that we have not properly handled your rights, you can lodge a complaint with the Andorran Data Protection Agency (APDA): carrer Doctor Vilanova, edifici del Consell General, planta -5, AD500 Andorra la Vella · tel. +376 808 115 · apda@apda.ad · www.apda.ad. If you reside in the European Union, you can also contact the supervisory authority of your country.

6. Security

We process your data with the strictest duty of confidentiality. We have applied technical and organizational measures to prevent its alteration, loss, misuse or unauthorized access: encrypted connection (HTTPS), restricted access to systems and providers that offer security guarantees.