Privacy Policy (Website)

Who is the data controller?

Personal data you provide through this site are processed by Amb Tu, an Andorra-law company with registered office at Carrer Callaueta no. 8, 1st floor, apt. 2a, AD500 Andorra la Vella (Principality of Andorra), phone +376 82 72 74, email info@ambtu.ad. In this notice, “Amb Tu” or “the Controller”.

If published under internal policy after legal review, this block will add the full trading name, tax identification number and contacts for any appointed data protection officer (DPO).

What personal data may we process?

In accordance with the LQDP and related norms, typical categories aligned with deployed channels include:

Identity and contact — name and surname, company, role, email and phone supplied via forms, email or calendar;

Technical data — IP address, approximate regional browser settings, session or device identifiers, server logs where needed for diagnostics and proportionate security;

Relationship data — your stated interest or preferences;

Content attached to your message.

Unless expressly agreed elsewhere with appropriate basis, this corporate site normally does not process special-category data health or political affiliation.

Do we use cookies?

Cookies and similar technologies may operate on this domain. Below is an outline — full wording (types, processors and how to revoke optional cookies) sits in our dedicated cookies policy:

Full text: Cookie Policy.

For what purposes and on what lawful bases?

This summary describes this marketing website — it does not replace Records of Processing Activities:

• Handle enquiries, book demos and follow up with proportionate B2B outreach. Legitimate interests, pre-contractual measures when you initiate contact or performance of contract;
• Keep the web secure and maintain logs that support incident-handling proportionately. Legitimate interest in security or legal obligations;
• Deliver the products and services subscribed by the enterprise customer. Contract performance, with Amb Tu acting as processor where instructed by the customer's controller role;
• Marketing emails/newsletters unless strictly ancillary to baseline service. Express consent, never defaulted on, freely revocable;
• Non-essential cookies. Consent via banner / first-layer controls per the Cookie Policy;

Teams must document precedence if several lawful bases may legitimately coexist for the same workflow.

How long do we retain data?

Data remain only as long as needed for declared purposes;

After ordinary periods, Amb Tu deletes or pseudonymises them unless longer retention stems from tax, statutory or contractual archiving;

Mandatory legal holds entail restriction/blocked archives excluded from promotional use;

Who may receive the data?

As a baseline, absent another basis we will not gratuitously disclose identifiable data;

a) processors supplying hosting, transactional email infrastructure or tooling, under written contracts or binding instructions;

b) competent public authorities wherever law commands disclosure;

c) other recipients that materialise within specific collaborations — disclosed here as those projects crystallise;

Do we transfer personal data abroad?

Some vendors operate infrastructure outside Andorra. When that constitutes international transfer, safeguards follow the LQDP, including customary instruments (adequacy conclusions, contractual clauses etc.).

If a destination arguably lacks equivalence, Amb Tu complements this page with understandable risk information per counsel.

What are your privacy rights?

Under applicable Andorran law you may pursue access, rectification, erasure or restriction of processing, portability and objection, as applicable;

Contact info@ambtu.ad. Identity checks may reasonably request a proportional ID snippet;

If unsatisfied exercising rights, escalate to APDA pursuant to procedural rules.

Can I withdraw consent?

When processing relies on consent, you may withdraw it as easily as granting it;

Withdrawal does not negate lawfulness beforehand unless law forbids reliance on overriding grounds (claims, statutory duties, justified security retention).

How do we protect your data?

Amb Tu enforces confidentiality and deploys proportional technical and organisational measures, including procurement diligence and access controls calibrated to evolving risk.

Changes to this policy?

We may revise this page to reflect statutory, feature or banner updates. Meaningful lawful basis / cookie alterations will seek fresh granular notices or configurations compliant with the LQDP.