1. Controller
AYMAR INNOVATIONS, S.L. controls the data collected on this site. Contact admin@aymaragents.com.
2. Data and source
We process the information entered in the form: professional profile, identity, contact, company, portfolio, goal and message. We do not request special-category data.
3. Purpose and legal basis
We use the data to analyse and answer the request, prepare a commercial conversation and take pre-contractual steps. The basis is your request and the explicit consent shown in the form.
4. Recipients and subprocessors
| Category | Providers | Location / transfer | Safeguard |
|---|---|---|---|
| Contact form | Formspree (Statamic LLC) | United States | EU-US Data Privacy Framework (DPF) and/or standard contractual clauses |
| Generative AI models | OpenAI, Google (Gemini), Anthropic (Claude), DeepSeek and Ollama (self-hosted engine on our own infrastructure) | United States and European Union depending on the provider; China for DeepSeek | Standard contractual clauses; reinforced with supplementary measures for the transfer to China; no transfer for self-hosted Ollama |
| Messaging channels | Meta Platforms Ireland Ltd. (WhatsApp Business Platform, Messenger and Instagram Direct); Telegram | Ireland (EU) and United States (Meta group); Telegram does not publish a verifiable processing location | Standard contractual clauses and other Chapter V mechanisms offered by Meta; for Telegram, a point flagged for legal review |
| Payments | Stripe Payments Europe, Ltd. and the Stripe group | Ireland (EU); group entities in the United States | EU entity for European processing; standard contractual clauses for group transfers |
| Hosting and infrastructure | Cloud infrastructure provider for this site and for the platform | Depends on the service; the final location of the platform's production infrastructure is pending confirmation | Standard contractual clauses or another GDPR Chapter V mechanism as applicable |
| Transactional email | Platform's transactional email provider | Pending final selection for production | The GDPR Chapter V safeguards for the provider chosen will be required |
To run this site and, where relevant, the Aymar Agents platform, we rely on these external providers, who act as processors (or independent controllers for payment providers); their actual involvement depends on whether you visit us as a site visitor or access the platform as a partner. When you access the platform as a partner, your account and your clients' accounts are hosted and processed with these same subprocessors; the full detail, by provider and purpose, is set out in our Data Processing Agreement (DPA).
5. Retention
We retain the request while handling it and then only for periods needed to address liability. Contacts without a commercial relationship are deleted or reviewed periodically.
6. Rights
You may request access, correction, deletion, restriction, objection and portability at admin@aymaragents.com, and complain to the Spanish Data Protection Agency.
7. End-customer data
In the service, partners and clients determine their processing. Aymar normally acts as processor for end-customer data and controller for its own partners and users, as set by the contract and DPA.
8. AI and decisions
This form makes no automated decision with legal effect. A person performs the commercial assessment.
9. Security
We apply measures aimed at minimising access, exposure and retention. No system is absolutely secure; incidents will be managed under applicable law.
10. Changes
We update this policy when the form, providers or legal bases change, and show the revision date.
11. Data processing agreement (DPA)
The data processing agreement (DPA), under article 28 GDPR, is part of these terms and is published at legal/dpa. It governs the processing of each partner's end-customer data when using the Aymar Agents platform.
12. Web analytics
We may use our own self-hosted analytics tool (Umami) to see which pages get the most visits. It uses no cookies and generates no identifiers that could single you out, so it does not amount to processing personal data under the GDPR. See our cookie policy for more detail.