Privacy policy

This policy explains what personal data we process when you visit www.aico.es or contact us, what we use it for and what rights you have. It complies with Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), and Law 34/2002 (LSSI-CE).

Data controller

Detail	Information
Controller	AICO ASESORES INTERNACIONALES DE CONGRESOS, S.L. (AICO Event Production)
Tax ID (CIF)	B07591126
Address	Carrer Can Valero, 12, 07011 Palma (Illes Balears)
Email	info@aico.es
Telephone	971 739 250

We have not appointed a data protection officer because, given our activity and the volume of data we process, we are not required to do so (Article 37 GDPR and Article 34 LOPDGDD). For any question about privacy you can write to us at info@aico.es.

What data we process and where it comes from

Data you give us. This website does not store the data you send us. When you write to us at info@aico.es, call us or use the form on the contact page, we receive the data you choose to include. The form sends it to us by email through Resend and sends you a copy at the address you provide; the website does not keep it. It is normally your name, company, email address, telephone number and the details of your enquiry or event. We ask that you do not send us especially sensitive data (health, beliefs, etc.) or data about other people without their permission.

Client and supplier data. If we end up working together, we process the contact details of the people at your company, the details of the assignment and the invoicing data.

Browsing data. When you visit the website, the server automatically records technical data such as your IP address, browser and the pages requested. In addition, only if you accept, we use Google Analytics to obtain usage statistics (we explain this in the cookie policy).

We do not make automated decisions or build profiles with legal or similarly significant effects on you.

What we use your data for and on what legal basis

Purpose	Legal basis
Replying to your enquiries and preparing quotations	Taking pre-contractual steps at your request (Art. 6.1.b GDPR) or, if you write to us on behalf of a company, our legitimate interest in dealing with those who contact us (Art. 6.1.f GDPR)
Managing the relationship with clients and suppliers: delivery of services, invoicing, collections and payments	Performance of the contract (Art. 6.1.b GDPR) and compliance with legal, tax and accounting obligations (Art. 6.1.c GDPR)
Sending you commercial information about our services	Your consent (Art. 6.1.a GDPR and Art. 21 LSSI-CE). If you are already a client, we may send you information about services similar to those you hired from us (Art. 21.2 LSSI-CE), and you can always object
Keeping the website secure and working (server logs)	Our legitimate interest in protecting the website and preventing abuse (Art. 6.1.f GDPR)
Obtaining website usage statistics with Google Analytics	Your consent, which you give in the cookie notice (Art. 6.1.a GDPR and Art. 22.2 LSSI-CE)

The data we ask you to include to deal with an enquiry or an assignment is what is necessary to do so. If you do not provide it, we may not be able to reply to you or provide the service.

Commercial communications

We will only send you commercial information by email or other electronic means if you have given us your consent or if you are a client and it concerns services similar to those you hired from us. Every communication will include a simple, free way to unsubscribe. You can also ask at any time by writing to info@aico.es.

How long we keep the data

Data	Period
Enquiries and quotation requests	The time needed to reply to you and, if we do not end up working together, up to 1 year to deal with possible follow-ups
Clients and suppliers	For as long as the relationship lasts and afterwards for the legal periods: 6 years for accounting records and invoices (Article 30 of the Commercial Code) and 4 years for tax purposes (General Tax Law), in addition to the limitation period for possible liabilities
Sending commercial information	Until you withdraw your consent or object
Technical server logs	The limited time set by our hosting provider for its logs
Google Analytics statistics	14 months, the period configured in Google Analytics

Once these periods have passed, we delete the data or anonymise it. Where the law requires, we keep it blocked, available only to judges, courts and public authorities, until liabilities lapse.

Who we share the data with

We do not sell or transfer your data to third parties for their own purposes. We only disclose it:

• To the Tax Agency, banks and other bodies when necessary to comply with legal obligations or manage collections and payments.
• To judges, courts and authorities when a rule obliges us to.

In addition, some providers process data on our behalf (data processors), under a contract that obliges them to use it only to provide us with their service and to protect it:

Provider	Service	Location
Vercel Inc.	Website hosting. Processes the IP address and technical data of visits in the server logs	United States
Google Ireland Limited	Google Analytics, only if you accept analytics cookies	European Union, with possible access from the United States by Google LLC
Resend (Plus Five Five, Inc.)	Sending the contact form emails: your enquiry to AICO and the copy we send you	United States
Google Ireland Limited (Google Workspace)	AICO email: receiving and managing the emails you send us	European Union, with possible transfers to the United States
External advisers (accountants, tax or legal)	Accounting, tax and legal management of clients and suppliers	Spain

International transfers

Vercel Inc., Resend (Plus Five Five, Inc.) and Google LLC are based in the United States or may process data there. These transfers are covered by the EU-US Data Privacy Framework in the case of participating companies, which the European Commission considers to offer an adequate level of protection, and by the standard contractual clauses approved by the European Commission, which these providers include in their data processing contracts. You can ask us for more information about these safeguards at info@aico.es.

Your rights

You can exercise these rights over your data at any time:

• Access: find out whether we process your data and obtain a copy.
• Rectification: correct inaccurate or incomplete data.
• Erasure: ask us to delete your data when it is no longer necessary, among other cases.
• Objection: object to our processing your data, for example to send you commercial information.
• Restriction: ask us to keep the data but stop using it while a claim is being resolved.
• Portability: receive the data you gave us in a commonly used format or have us send it to another company.
• Withdrawing your consent when the processing is based on it, without affecting what was done before. For analytics cookies you can do this from the “Cookie settings” link in the footer of the website.

To exercise them, write to us at info@aico.es or by post to Carrer Can Valero, 12, 07011 Palma, stating which right you want to exercise. If we have reasonable doubts about your identity, we may ask you for additional information to confirm it. We will reply within one month, extendable by two further months in complex cases, and we will let you know if that applies.

If you consider that we have not handled your rights properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan, 6, 28001 Madrid.

Minors

This website is aimed at businesses and professionals. If you are under 14, do not send us personal data without the consent of your parents or guardians.

Security

We apply appropriate technical and organisational measures to protect your data against loss, unauthorised access or misuse: the website runs on an encrypted connection (HTTPS), we limit access to the data to the people who need it and we work with providers that offer security guarantees.

Changes to this policy

We may update this policy if the way we process data or the regulations change. The current version is always the one published on this page, with its last-updated date. If the change is significant, we will make it clearly visible on the website.

See also the legal notice and the cookie policy.