Amaia Zubia Ltd · amaiazubia.com · Last updated: May 2025
1. Introduction
Welcome to the website of Amaia Zubia Ltd (“we,” “our,” or “the Company”). By accessing or using our website at amaiazubia.com (“the Site”), you agree to the terms set out in this Privacy Policy.
We are committed to protecting your personal data in full compliance with the General Data Protection Regulation (GDPR) and any applicable national data protection laws. This policy explains what personal information we collect, how we use it, and what rights you have in relation to it.
2. Data Controller
The data controller responsible for your personal information is:
When you interact with our Site — for example, by completing a contact form or requesting information about our services — we may collect the following personal data:
Full name
Phone number
Company name
Job title
Email address
We collect only the information strictly necessary to respond to your enquiry and provide our services. We do not collect sensitive personal data as defined under Article 9 of the GDPR.
4. Legal Basis for Processing
We process your personal data on the following legal grounds under the GDPR:
Consent (Article 6(1)(a)): By submitting your information through our contact forms, you give us your explicit consent to process your data for the purposes described in this policy.
Legitimate interests (Article 6(1)(f)): We may process your data to respond to your enquiries and improve our services, where our interests are not overridden by your rights.
Legal obligation (Article 6(1)(c)): We may process your data where required by applicable law or regulation.
5. How We Use Your Information
Your personal data is used exclusively for the following purposes:
To respond to your enquiries and communicate with you about our services.
To tailor and improve your experience on our Site.
To fulfil any contractual obligations arising from an agreement between you and Amaia Zubia Ltd.
To comply with applicable legal and regulatory requirements.
We will not use your data for automated decision-making or profiling.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal requirements. Once your data is no longer required, it will be securely deleted or anonymised.
7. Sharing with Third Parties
We do not sell, rent, or trade your personal data. We will not share your information with third parties except in the following circumstances:
With your prior explicit consent.
When required by law, court order, or a competent regulatory authority.
With trusted service providers who process data strictly on our behalf (e.g. hosting providers, email platforms). These parties are contractually bound to keep your data confidential and may not use it for their own purposes.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures are reviewed and updated on a regular basis.
Please note that no method of transmission over the internet or electronic storage is entirely secure. While we strive to protect your data using commercially reasonable means, we cannot guarantee absolute security.
9. International Data Transfers
If your personal data is transferred outside the European Economic Area (EEA), we will ensure that appropriate safeguards are in place in accordance with GDPR requirements, such as Standard Contractual Clauses or applicable adequacy decisions. We will only transfer your data to countries or organisations offering an adequate level of protection.
10. Your Rights Under the GDPR
As a data subject, you have the following rights in relation to your personal data:
Right of access: You may request a copy of the personal data we hold about you.
Right to rectification: You may ask us to correct any inaccurate or incomplete data.
Right to erasure: You may request deletion of your personal data under certain circumstances.
Right to restriction: You may ask us to limit how we process your data.
Right to data portability: You may request your data in a structured, machine-readable format.
Right to object: You may object to processing based on legitimate interests.
Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at hello@amaiazubia.com. We will respond within 30 days in accordance with GDPR requirements.
You also have the right to lodge a complaint with your local data protection supervisory authority if you believe your data has not been handled in compliance with applicable law.
11. Cookies
Our Site may use cookies and similar tracking technologies to enhance your browsing experience and analyse visitor behaviour. For detailed information on the cookies we use and their purposes, please refer to our Cookie Policy available on the Site.
You can manage your cookie preferences at any time through your browser settings or our cookie consent tool.
12. Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time. Any changes will take effect immediately upon publication on the Site. We encourage you to review this page periodically. The date at the top of this document indicates when the policy was last revised.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact us:
