Privacy Policy

This policy sets out how the personal information of all persons who interact with AZOLLA EFKT S.L through this website will be processed and protected. Please read all sections of the Legal Notice, the Cookie Policy and this Privacy Policy before using this website.

In accordance with the provisions of Regulation EU 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), www.azollaprojects.com informs you that, by accepting this Privacy Policy, you give your express, informed, free and unequivocal consent for the data you provide to be processed by AZOLLA EFKT S.L as data controller, applying the security, technical and organisational measures provided for in current legislation.

Data controller

What personal data do we collect?

The data we collect depends on the form or service you use on the website. In general terms, we may collect the following categories of personal data:

Contact form — Farmer or Agricultural Business profile

• Identification data: first name, surname.
• Professional data: organisation (if applicable), role or position.
• Contact data: email address, telephone number.
• Farm data: location, autonomous community, hectares, type of agricultural activity, farming practice, interests (biodiversity, energy and fertiliser savings, carbon farming).
• Participation data: willingness to take part in research projects (paid or unpaid).

Contact form — Company, Organisation or Public Administration profile

• Identification data: first name, surname.
• Professional data: organisation, position (which may correspond to an executive or technical role, a public office or a governing body).
• Contact data: email address, telephone number.
• Organisation data: industry sector (including private company, public administration, foundation, NGO and others), size of the organisation, city, autonomous community.
• Interest data: areas of interest (regenerative insetting, carbon credits, footprint calculation, climate or ESG strategy, territorial coordination or multi-actor projects, training, others), optional information about the organisation's carbon footprint and climate targets.
• Participation data: willingness to take part in research projects (paid or unpaid).

Contact form — Other enquiries

• Identification data: first name, surname.
• Professional data: organisation.
• Contact data: email address.
• Contextual data: type of contact (press, institutional collaboration, employment, investment, general information, others), area of interest, free-text message.

Browsing data (all visitors)

• IP address, device type and identification, browser type, access domain, browsing data and activity on the website, collected through Google Analytics (see Cookie Policy).

For what purposes do we process your data?

• To handle your enquiry or request submitted through the contact forms.
• Commercial management and lead follow-up: to contact you in order to respond to your enquiry, assess the possibility of collaboration, and send you proposals or quotations where appropriate.
• Assessment of participation in research projects where you have so indicated on the form.
• Internal analysis of contact profiles in order to improve our services and communication.
• Statistical analysis of website use through Google Analytics, in order to improve the user experience and the content offered.
• Compliance with legal obligations (accounting, tax, commercial) where the relationship results in the provision of services.

On what legal basis do we process your data?

• Consent of the data subject (art. 6.1.a GDPR): for the processing of data provided voluntarily in the contact forms and for the installation of non-technical cookies.
• Performance of a contract or pre-contractual measures (art. 6.1.b GDPR): where the enquiry leads to negotiation or the provision of professional services.
• Compliance with legal obligations (art. 6.1.c GDPR): retention of commercial, tax and accounting documentation in accordance with applicable legislation.
• Legitimate interest (art. 6.1.f GDPR): to protect the website and its users against abuse, fraud or improper use, as well as for the internal analysis of leads for the purpose of improving the service.

How long do we keep your data?

• Enquiries and leads not converted into clients: we will keep your data for a maximum of 3 years from the last contact, unless you request its deletion earlier.
• Clients: throughout the contractual relationship and for up to 6 years after its termination, in compliance with the obligations to retain commercial documentation (art. 30 of the Spanish Commercial Code) and tax records.
• Browsing data (Google Analytics): according to the tool's current configuration (maximum 14 months by default).
• Cookies: according to the periods indicated in the Cookie Policy.

Once these periods have elapsed, the data will be blocked and subsequently deleted, unless a longer legal retention obligation applies.

Who do we share your data with? Data processors

In order to provide services necessary for the development of our activity, AZOLLA EFKT S.L uses the following types of external providers as data processors, all of them with data processing agreements (DPAs) or Standard Contractual Clauses (SCCs) that guarantee compliance with the GDPR:

• Cloud service providers for information storage, forms and email (EU and USA).
• Website hosting provider (USA).
• Providers of internal team communication and management tools (EU and USA).
• Providers of artificial intelligence tools for internal tasks (USA), with a signed DPA and with no use of data for model training.
• Provider of statistical analysis of website use (USA), with IP anonymisation.

AZOLLA EFKT S.L maintains data processing agreements or Standard Contractual Clauses approved by the European Commission with these providers, guaranteeing a level of protection equivalent to that required by European legislation.

Apart from the data processors mentioned, your data will not be disclosed to third parties, except where legally required. If you wish to know the specific identity of the providers used, you may request it in writing at correu@azollaprojects.com.

International data transfers

Some of the providers mentioned are located in the United States. These international transfers are carried out under the following safeguards:

• EU-US Data Privacy Framework (DPF): adequacy framework approved by the European Commission (Adequacy Decision of 10 July 2023) which guarantees a level of protection equivalent to the European one for certified companies.
• Standard Contractual Clauses (SCCs): clauses approved by the European Commission (Implementing Decision (EU) 2021/914) establishing contractual data protection safeguards.

What are your rights?

As the data subject, you have the following rights:

• Access: to obtain confirmation as to whether we process personal data concerning you and, where applicable, to access it.
• Rectification: to request the correction of inaccurate data.
• Erasure ("right to be forgotten"): to request the deletion of your data when it is no longer necessary for the purposes for which it was collected.
• Restriction of processing: to request that the processing of your data be restricted in certain circumstances.
• Objection: to object to the processing of your data on grounds relating to your particular situation.
• Portability: to receive your data in a structured, commonly used and machine-readable format, and to transmit it to another controller.
• Withdrawal of consent: to withdraw the consent given at any time, without this affecting the lawfulness of processing carried out before withdrawal.
• Complaint to the Supervisory Authority: to lodge a complaint with the Spanish Data Protection Agency (https://www.aepd.es/es) if you consider that your rights have been infringed.

To exercise any of these rights, you may write to correu@azollaprojects.com indicating the right you wish to exercise and attaching a copy of your ID card or equivalent document proving your identity. We will respond within a maximum period of one month from receipt of the request.

Data security

AZOLLA EFKT S.L undertakes to use and process your personal data respecting its confidentiality, and adopts all the technical and organisational measures necessary to prevent its alteration, loss, unauthorised processing or access, in accordance with the provisions of current data protection legislation.

The website has an SSL certificate (HTTPS protocol) that guarantees the encryption of data in transit between the server and the user's browser.

Access to the systems where the data is stored is restricted to authorised personnel under confidentiality obligations. External providers that process data on behalf of AZOLLA EFKT S.L are subject to the same confidentiality and security obligations.

However, AZOLLA EFKT S.L cannot guarantee the absolute impenetrability of the Internet or of its systems, and therefore accepts no responsibility for possible breaches caused by fraudulent access by third parties outside our control.

Notification of security breaches

In the event of a security breach affecting personal data, AZOLLA EFKT S.L will notify the Spanish Data Protection Agency within a maximum of 72 hours and, where applicable, the data subjects affected, in accordance with articles 33 and 34 of the GDPR.

Minors

The services offered through this website are aimed exclusively at persons over 16 years of age. AZOLLA EFKT S.L does not intentionally collect personal data from minors. If we become aware that we have collected data from a minor without valid consent, we will proceed to delete it immediately.

Accuracy of the data

As a user, you are responsible for the truthfulness and accuracy of the data you send to AZOLLA EFKT S.L, and you guarantee its accuracy, currency and authenticity, undertaking to keep it up to date.

Changes to the Privacy Policy

AZOLLA EFKT S.L reserves the right to modify this policy in order to adapt it to legislative or case-law developments or sector practices. Changes will be announced on this page with reasonable notice before they take effect. The date of the last update is indicated at the end of this document.

Last updated: August 2026.