1. WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?

The data controller and owner of the website ARKIA NOVA VENTURES SL (hereinafter, ARKIA) or of this LANDING PAGE is the commercial company with registered office at C. DE SÁNCHEZ PACHECO, 82, CHAMARTÍN, 28002, (MADRID), with Tax ID B22502397, registered with the Commercial Registry of Madrid, volume 32,253, page 104, sheet number M-580.569.

We inform you that the personal data collected through ARKIA’s website and the landing page created by it, and through which users browse, will be incorporated into a database owned by ARKIA.

ARKIA has adopted all the technical and organizational measures necessary to comply with the requirements of the current data protection regulations, especially the EU General Data Protection Regulation (GDPR) in relation to the processing of personal data carried out.

Contact details regarding data protection are as follows:


2. WHAT TYPE OF PERSONAL DATA DO WE PROCESS AND FOR WHAT PURPOSE?

2.1. Types of personal data we process

In compliance with data protection regulations, ARKIA will only process personal data that are strictly necessary, minimizing data processing. We may carry out the following data processing activities and collect and process the following categories of personal data:

a. Users: Name, email address, telephone number, and message provided when contacting us by phone or email.
b. Users: Data collected through our platform in CPI and MVAS campaigns if the user clicks on informational banners (IP, user agent and other anonymous data, event data).
c. Users: Data collected through the acceptance of cookies on our website or landing page, if the user accepts them.
d. Users – Social networks: Identifying data of the user on the social network and data voluntarily shared by the user.
e. Users – Websites/Landing pages: IP address, browser type, operating system, source website, and browsing behavior. With your permission, we may also receive location data.
f. ARKIA clients and suppliers: Name, tax ID or company identification data and position (if applicable), contact address, email, and phone number.
g. ARKIA employees: Identifying data from CVs, working time records, and other data related to the management of the company’s human resources.

2.2. Purposes of processing personal data

Your personal data will only be used for the following purposes:

  • To carry out the necessary administrative and commercial procedures, as well as to comply with applicable legal obligations.
  • To provide services according to the specific needs of clients, in order to fulfill contracts entered into.
  • To send commercial information and newsletters about new services offered on the website and within the sector.
  • To manage filing, system updates, protection and safeguarding of information and company databases.
  • To transfer data to third parties with whom contracts have been signed for commercial, contractual, administrative, marketing, and/or operational purposes.
  • To provide services contracted by the user.
  • To send promotional information by electronic means.
  • To provide information requested by the user through the contact form.

Likewise, data collected during your browsing activity are processed in order to provide access to the website’s online content, respond to user requests, keep statistical records of visits (IP addresses, browser data, country, accessed pages, etc.), develop better services and products, optimize our offering, improve customer service efficiency, and enhance the design and content of our websites.

With regard to our employees, we process their personal data for human resources management and for compliance with applicable legal and contractual obligations.

In accordance with the LSSICE, ARKIA does not engage in SPAM practices and therefore does not send commercial emails without the necessary legal basis. In any case, you may always withdraw your consent to receive our communications.

We will not process your personal data for purposes other than those described, except where legally required or by court order.
You will not be subject to decisions based solely on automated processing that produce effects on your data.


3. WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR DATA?

The legal basis that legitimizes the processing of your personal data is your express consent, granted for the purposes described above, which will be requested when you request information or when you check the corresponding box when providing your data for the provision of our services.

If you contract our services, a contractual relationship will be established with ARKIA, which will constitute the legal basis for processing your personal data for the execution of that contractual relationship and, where applicable, for compliance with legal obligations.

For the processing of data of our clients, suppliers, or employees, the legal basis will be the execution of the contractual relationship, compliance with legal obligations, or, where applicable, ARKIA’s legitimate interest.


4. DATA RETENTION PERIOD – How long will we keep your data?

Personal data will be retained for as long as necessary to manage the requested information, provide requested services, fulfill any contractual relationship, or comply with legal obligations.

Employee data will be retained for the duration of the employment relationship and thereafter for the legally established periods.

Once the data are no longer necessary for the purposes for which they were collected, they will be permanently deleted. However, data may be retained for longer periods if required to comply with legal or regulatory obligations or for the statute of limitations of legal or contractual liabilities.

Data provided for recruitment processes will be retained for a maximum of one year. After that period, if the candidate has not joined ARKIA or is not involved in an active recruitment process, the data will be deleted.


5. TO WHOM WILL YOUR DATA BE DISCLOSED?

Within ARKIA, your personal data will be processed by duly authorized personnel. Where necessary, they may also be processed by third parties to fulfill the purposes indicated above.

Categories of recipients include:

a. Data processors such as IT providers, consultants, advisors, and auxiliary service providers.
b. Social network providers.
c. Public entities and authorities, solely for compliance with legal obligations.
d. Other providers to whom data may be disclosed, such as financial institutions or insurance companies.

All recipients will have previously signed confidentiality agreements and will process the data in accordance with data protection regulations and professional secrecy obligations.


6. WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE YOUR DATA?

To exercise your data protection rights, please send an email to info@wearearkia.com, indicating the right you wish to exercise in the subject line and attaching a copy of your national ID or passport.

Your rights include:

  • Right of access
  • Right to rectification
  • Right to erasure (right to be forgotten)
  • Right to data portability
  • Right to restriction of processing
  • Right to object
  • Right not to be subject to automated decision-making or profiling

These rights are subject to the conditions and limitations established by applicable law.


7. COMPLAINT TO THE SUPERVISORY AUTHORITY

If you believe that ARKIA has violated your data protection rights, you may file a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos – AEPD):

  • Address: Calle Jorge Juan, 6, 28001 Madrid
  • Phone: 901 100 099 / 912 663 517
  • Website: https://www.aepd.es

8. APPLICABLE LAW AND JURISDICTION

This Privacy Policy is governed by Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018, and Law 34/2002 on Information Society Services and Electronic Commerce.

Users are expressly subject to Spanish law and jurisdiction, and the Courts of Madrid shall have jurisdiction over any disputes arising from the use of this website.


9. ADDITIONAL INFORMATION – SOCIAL NETWORKS

ARKIA has a presence on social networks. The processing of data of followers or users interacting with ARKIA’s official social media profiles will be governed by this policy and by the privacy policies of each respective social network.

ARKIA may use these data to manage its social media presence, inform users about activities, products, or services, and for any other purpose permitted by the social network’s regulations.

ARKIA reserves the right to remove inappropriate content without prior notice.


SECURITY MEASURES

ARKIA has implemented appropriate technical and organizational security measures to ensure the confidentiality, integrity, and security of personal data.

ARKIA performs regular backups but is not responsible for accidental data loss caused by users. Data restoration services are included only when the loss is attributable to ARKIA.


LANGUAGE

The applicable language of this Privacy Policy is English. In the event of discrepancies between versions, the Spanish version shall prevail.


10. UPDATES

This Privacy Policy was last updated in January 2026 and may be updated at any time. We recommend reviewing it regularly.