PRIVACY POLICY

1.- Who is the data controller?

The data controller of the information you provide is Aby Marketing Dreams SL, VAT ESB65209801, with registered office at Hijas de la Caridad 108, 48003, Bilbao, Spain.

Data Controller: ABY MARKETING DREAMS SL

Address: Hijas de la Caridad 108, 48003, Bilbao.

VAT: ESB65209801

Contact: contacto@aby.group

Website: https://aby.group

Data Protection Officer Contact: dpo@aby.group

2.- For what purpose do we collect your personal information?

In accordance with Regulation (EU) 2016/679, General Data Protection Regulation, and Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, Aby collects your personal data for the specific purposes listed below:

• To adequately address your contact and subscription requests through our website form, as well as your requests for information, suggestions, and possible complaints.
• To provide you with the best service, manage data maintenance, and the professional, commercial, and/or contractual relationship established with us, including billing and delivery.
• To conduct surveys, statistics, market research, and commercial prospecting to evaluate service quality, market trends, consumer habits, profile analysis, sales evolution analysis, and support business and investment decision-making.
• To send you commercial communications and keep you informed about services, products, offers, promotions, opportunities, events, or relevant news via email, instant messaging systems such as WhatsApp or Telegram, postal mail, phone calls, SMS, or push notifications, unless you object using the methods provided. You may unsubscribe via the link in our messages or by writing to bajas@aby.group.
• If consent is given, to transfer your data to sponsors or clients of Aby so they may send you commercial offers. This includes data aggregation and duplication necessary for the intended purposes. We ensure third parties comply with the GDPR.
• To comply with legal obligations and verify compliance with contractual obligations, including fraud prevention.

3.- What personal data do we process?

You are not required to provide personal data to browse our website. We only collect data if you contact us through our form or by email. In that case, we will only collect data necessary to identify you and manage our communication and any resulting relationship.

• Identification and contact data: name, surname, date of birth, full address, gender, email address, phone number, and other requested data.
• Commercial information data.
• Browsing, traffic, and location data.

Additionally, we may process:

• Economic, academic, professional, and sociological profile data from third-party databases.
• Commercial interest data from email marketing campaigns.

Aby does not collect data from minors. By accepting this policy, you confirm that you are over 18 and the data provided is truthful and up to date. If you provide data from third parties, you guarantee their consent.

4.- What is the legal basis for processing your data?

The legal basis includes your freely given, informed, and unambiguous consent, legitimate interest, or pre-contractual/contractual relationships. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5.- How long do we retain your data?

• Contact data: retained for 30 days to respond to your request.
• Data related to services: retained during the contractual relationship.
• Data may also be retained post-relationship to comply with legal obligations or defend claims.
• If based on consent, data is processed until you withdraw it. Blocked data may be kept during limitation periods for claims.

Blocked data will only be accessible to courts and competent public authorities.

6.- Who may receive your data?

We may share your data with categories such as:

• Consulting, auditing, financial, and banking services.
• Mailing, logistics, and distribution services.
• IT, cloud, storage, and destruction services.
• Legal and compliance authorities.
• Advertising and marketing agencies.
• Energy sector companies for commercial purposes.

Transfers may occur inside or outside the EEA. In such cases, Aby ensures adequate safeguards are in place.

7.- What are your rights?

You may exercise the following rights:

• Access
• Rectification
• Erasure
• Objection
• Restriction
• Portability
• Not to be subject to automated decisions

To exercise these rights, send a written request with a copy of your ID to Aby Marketing Dreams SL, Hijas de la Caridad 108, 48003, Bilbao, Spain or email us at bajas@aby.group. You may also file a complaint with the Spanish Data Protection Agency at www.aepd.es or contact our DPO at dpo@aby.group.

8.- Where is your data stored?

Your data is stored on servers located within the European Union. No international transfers are currently made.

9.- Changes to this policy

This privacy policy is reviewed annually or whenever legal or operational changes occur. We will notify you of material changes via email and may request your renewed consent.

10.- Commercial Communications

Participants in promotions who provide consent may receive advertising from companies in the sectors below, through any provided communication channels. Example categories:

Commercial offers may also be included with prize deliveries. You may withdraw consent at any time by writing to bajas@aby.group.

This privacy policy was last updated in MAY 2025.