Privacy policy

Who is the controller of your data?

Azahar Data Insights, S.L. is the controller of the personal data collected through azahardata.com.

• Identity: Azahar Data Insights, S.L.
• Trading name: Azahar Data Insights
• Tax identification number (NIF): B22711154
• Address: Avenida José Jornet Navarro 1, Bloque A, Escalera 2, planta 5, puerta C — 03005 Alicante
• Email:info@azahardata.com
• Telephone:+34 618 902 030
• Activity: biostatistics and data science consultancy for the healthcare and life sciences sector

Registered in the Registro Mercantil de Alicante (Alicante Commercial Registry), sección 8, hoja A-199176, inscripción 1.ª, dated 9 July 2025.

For any matter relating to the processing of your data, you can write to us at info@azahardata.com.

What personal data do we collect?

Depending on the channel you use and the service you request, we may process:

• Identification data: first name and surnames.
• Contact data: email address, telephone number, and the entity or organisation you belong to.
• Professional data: job title, type of entity, field of the project and any other information you provide in the pre-qualification form.
• Contractual data: those needed to formalise and invoice the services contracted.
• Browsing data: IP address, device type, browser, traffic source and activity on the website, as described in the cookie policy.

The forms on this website are not intended to collect health data or identifiable information about patients or study participants. Please do not include that type of information in the free-text fields. If we receive it unsolicited, we delete it.

Where a project requires the processing of special categories of data within the meaning of Article 9 of Regulation (EU) 2016/679 (GDPR), the conditions of that processing and the allocation of responsibilities between the parties are governed by the relevant contractual documentation, separately from this policy.

On what legal basis do we process your data?

• Your consent, for contact through the website's forms, subscription to our content and the use of cookies that are not necessary.
• The performance of a contract or the taking of steps prior to entering into a contract, to prepare proposals and to provide the services you commission from us.
• Compliance with legal obligations relating to tax, accounting and commercial law.
• Our legitimate interest, to protect the website against abuse and fraudulent use, and to maintain the record of commercial activity.

For what purposes do we process your data?

Contact form. We use your email address and the data you provide to answer your enquiry and to send you the information you ask for.

Pre-qualification form and appointment booking. We collect information about your project to assess whether we can help you and, where appropriate, to offer you the option of booking a meeting directly. This form applies an automated filter, which is described in the next section.

Content subscription form. If you subscribe, we use your email address solely to send you our content and news. You can unsubscribe at any time.

Contact via WhatsApp. This website includes a button that opens a WhatsApp conversation with our business number. If you use it, we process your telephone number and the content of the messages to deal with your enquiry.

Client relationship management. We process the data needed to prepare proposals, provide the services contracted, invoice and comply with our legal obligations.

Automated filter in the qualification form

The pre-qualification form applies an automated filter which, based on your answers about the type of project, its stage and its scope, determines whether you are offered the option of booking a meeting directly or are directed to the general contact form.

This filter does not take any decision that produces legal effects concerning you or similarly significantly affects you: it only routes your enquiry to the most appropriate channel. It never results in your exclusion, because you always have alternative ways of contacting us: the general form, the WhatsApp button, and the email address and telephone number published on this website.

If you would like us to review your case manually, outside the filter, write to us at info@azahardata.com and we will do so.

We do not carry out profiling for advertising purposes, nor do we disclose your information to advertisers.

How long do we keep your data?

Enquiries and contact data: for as long as necessary to deal with your request and for one additional year for follow-up purposes, unless you ask us to erase them sooner.

Qualification form and appointment data: for the duration of the commercial relationship and, if no relationship is formalised, for two years from the last contact.

Subscription data: for as long as your subscription remains active. You can unsubscribe at any time using the link included in every mailing; communications stop immediately. After you unsubscribe, we keep only the minimum data needed to prove that you requested it and to avoid adding you again by mistake.

Client data: for the duration of the contract and, afterwards, for the periods required by the applicable legislation. As a guide: four years for tax obligations (Articles 66 et seq. of the Ley General Tributaria, Spain's General Tax Act), five years for personal actions with no specific limitation period (Article 1964 of the Código Civil, the Spanish Civil Code) and six years for accounting books and records (Article 30 of the Código de Comercio, the Spanish Commercial Code).

Cookies: for the period stated for each one in the cookie policy.

To which recipients do we disclose your data?

To provide the services necessary for our activity, we use the following providers, which may process data on behalf of Azahar Data Insights or as independent controllers, depending on the service and their own contractual terms:

• Web hosting: Raiola Networks, with servers in the European Union.
• Email and office software: Google Workspace, provided by Google Ireland Limited. This is the provider that hosts the enquiries you send us by email.
• Web analytics: Google Analytics and Google Tag Manager, provided by Google Ireland Limited, subject to prior consent.
• Appointment management: Google Calendar, provided by Google Ireland Limited. Synchronisation takes place from our server.
• Video conferencing and meeting transcription:
  Google Meet, provided by Google Ireland Limited, on the terms set out in the
  meeting recording policy
  .
• Internal management of contacts and documentation: Notion Labs.
• Messaging: WhatsApp, provided by WhatsApp Ireland Limited. Meta processes those data under its own terms and as an independent controller, not on our behalf.

The individuals or companies in charge of the technical maintenance of the website may also occasionally access the systems, subject to confidentiality obligations.

We do not disclose your data to third parties for purposes other than those described, unless required by law.

International data transfers

Some of the providers listed may transfer data to the United States.

In the case of Google services, the transfer is based on the adequacy decision for the EU-US Data Privacy Framework, under which Google LLC is listed as certified.

For the other providers, transfers are based on that same adequacy decision where the provider is certified, or on the Standard Contractual Clauses approved by the European Commission, supplemented by the additional measures necessary to ensure a level of protection equivalent to that required by the GDPR.

What are your rights?

You have the right to obtain confirmation as to whether we are processing personal data concerning you and, where that is the case, to:

• Access your personal data.
• Request the rectification of inaccurate or incomplete data.
• Request their erasure.
• Request the restriction of their processing.
• Object to the processing.
• Request the portability of your data.

If you have given your consent for a specific purpose, you can withdraw it at any time, without affecting the lawfulness of the processing carried out before its withdrawal.

To exercise these rights, write to us at info@azahardata.com stating which right you wish to exercise. You do not need to send us a copy of your identity document: we will only ask you for additional information to verify who you are if there are reasonable doubts about your identity. If you find it convenient, you can use the forms prepared by the Agencia Española de Protección de Datos (AEPD), Spain's data protection authority.

You also have the right to lodge a complaint with the AEPD at aepd.es, for example if you consider that we have not dealt with your request properly.

Confidentiality and security of data

We apply technical and organisational measures appropriate to the level of risk of the processing, in accordance with Article 32 of the GDPR, to prevent the alteration, loss, or unauthorised processing of or access to your data. The transmission of data between your browser and this website is encrypted by means of an SSL certificate.

Anyone authorised by Azahar Data Insights to process data—including partners, collaborators and providers—is subject to a duty of confidentiality, whether contractual or legal.

We cannot guarantee that the internet is absolutely impregnable, nor, therefore, rule out fraudulent access by third parties.

Security breaches

If we detect a security breach affecting your personal data, we will notify it to the AEPD on the terms of Article 33 of the GDPR. If it is likely to result in a high risk to your rights and freedoms, we will also inform you without undue delay, as provided for in Article 34.

Accuracy of data

You are responsible for the truthfulness and accuracy of the data you provide to us, and you undertake to keep them up to date. By using the forms on this website, you agree to provide complete and correct information.

Withdrawal of consent

Any consent you have given can be withdrawn at any time by notifying us at info@azahardata.com. Withdrawal will not have retroactive effect and will not affect the lawfulness of prior processing.

Changes to this policy

We may amend this policy to adapt it to legislative or case-law developments, or to changes in the tools we use. Changes will be published on this page reasonably in advance of their entry into force.

This privacy policy was last updated on 15 October 2026.