1. Introduction

Averroa (“we”, “us”, or “our”) is a digital transformation consultancy based in Madrid, Spain. We provide expert-led technology consulting, program management, AI, and digitalization services across Europe and the Middle East.

This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website, engage our services, or interact with us in any capacity. We are committed to handling your data responsibly, transparently, and in compliance with the General Data Protection Regulation (GDPR – EU 2016/679) and other applicable laws.

2. Data We Collect

We only collect information necessary to provide our services and maintain effective communication. This may include:

  • Personal information: Name, email address, company name, job title, phone number.

  • Professional data: Project details, industry focus, areas of interest, communication preferences.

  • Website usage data: Pages visited, browser type, device, and IP address (for analytics and security).

  • Cookies and analytics data: Used to improve website performance and personalize experience (see section 7).

  • Contractual and billing information: For clients and partners engaging in formal agreements.

We do not collect or process sensitive personal data (such as health, ethnicity, or political opinions) unless required by law or explicitly consented to.

3. How We Use Your Data

We process personal data solely for legitimate business purposes, including:

  • Providing consulting services, resources, and communications related to Averroa’s work.

  • Managing client relationships, contracts, and project delivery.

  • Responding to inquiries, requests, and partnership proposals.

  • Improving our website, content, and marketing communications.

  • Sending newsletters or insights (only if you opt-in).

  • Ensuring compliance with legal, financial, or security obligations.

We never sell, rent, or exchange your data with third parties for marketing purposes.

4. Legal Basis for Processing

Averroa processes personal data based on one or more of the following grounds:

  • Contractual necessity: To perform a service or fulfill an agreement.

  • Legitimate interest: To operate and improve our business, ensure cybersecurity, or maintain client relationships.

  • Consent: When you subscribe to updates, newsletters, or marketing communications.

  • Legal obligation: To comply with applicable laws or government requests.

5. Data Sharing and International Transfers

We may share limited data with:

  • Service providers who support Averroa’s operations (e.g., hosting, analytics, communications).

  • Consultants or partners involved in delivering Averroa engagements, under strict confidentiality agreements.

  • Authorities or regulators when required by law.

If data is transferred outside the European Economic Area (EEA), we ensure equivalent protection through EU-approved Standard Contractual Clauses or adequacy decisions.

6. Data Retention

We retain personal data only as long as necessary to fulfill the purpose for which it was collected:

  • Client and project records: up to 7 years after engagement closure.

  • Marketing communications: until you withdraw consent or unsubscribe.

  • Website analytics: anonymized after 26 months.

After retention periods expire, data is securely deleted or anonymized.

7. Cookies and Tracking Technologies

Our website uses cookies to enhance functionality and analyse usage patterns.
You can manage cookie preferences through your browser or our on-site cookie banner.

Types of cookies used:

  • Essential: Enable core site functionality.

  • Analytics: Help us understand visitor behaviour (Google Analytics, etc.).

  • Functional: Remember preferences or improve experience.

We do not use invasive tracking or behavioural advertising cookies.

8. Your Rights

Under GDPR, you have the right to:

  • Access your personal data.

  • Correct inaccurate information.

  • Request deletion (“right to be forgotten”).

  • Restrict or object to processing.

  • Data portability (receive a copy in structured format).

  • Withdraw consent at any time.

  • Lodge a complaint with a supervisory authority (Agencia Española de Protección de Datos – AEPD in Spain).

To exercise these rights, contact us at privacy@averroa.com.

9. Data Security

Averroa applies strong technical and organizational measures to protect personal data, including:

  • Encrypted communications (HTTPS, secure mail).

  • Access control and authentication protocols.

  • Regular security audits and data minimisation practices.

  • Limited data access based on ORBIT™ role structure (only relevant personnel handle client-related information).

10. Third-Party Links

Our website may contain links to external resources or partners. We are not responsible for the privacy practices of these third-party websites. We encourage users to review their respective privacy policies.

11. Updates to This Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. The latest version will always be available on this page.

12. Contact Us

For questions or requests regarding this Privacy Policy or your personal data, contact:

Averroa Digital Consulting S.L.
Calle Aramayona, Madrid, Spain
Email: privacy@averroa.com
Website: https://averroa.com

1. Introduction

Averroa (“we”, “us”, or “our”) is a digital transformation consultancy based in Madrid, Spain. We provide expert-led technology consulting, program management, AI, and digitalization services across Europe and the Middle East.

This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website, engage our services, or interact with us in any capacity. We are committed to handling your data responsibly, transparently, and in compliance with the General Data Protection Regulation (GDPR – EU 2016/679) and other applicable laws.

2. Data We Collect

We only collect information necessary to provide our services and maintain effective communication. This may include:

  • Personal information: Name, email address, company name, job title, phone number.

  • Professional data: Project details, industry focus, areas of interest, communication preferences.

  • Website usage data: Pages visited, browser type, device, and IP address (for analytics and security).

  • Cookies and analytics data: Used to improve website performance and personalize experience (see section 7).

  • Contractual and billing information: For clients and partners engaging in formal agreements.

We do not collect or process sensitive personal data (such as health, ethnicity, or political opinions) unless required by law or explicitly consented to.

3. How We Use Your Data

We process personal data solely for legitimate business purposes, including:

  • Providing consulting services, resources, and communications related to Averroa’s work.

  • Managing client relationships, contracts, and project delivery.

  • Responding to inquiries, requests, and partnership proposals.

  • Improving our website, content, and marketing communications.

  • Sending newsletters or insights (only if you opt-in).

  • Ensuring compliance with legal, financial, or security obligations.

We never sell, rent, or exchange your data with third parties for marketing purposes.

4. Legal Basis for Processing

Averroa processes personal data based on one or more of the following grounds:

  • Contractual necessity: To perform a service or fulfill an agreement.

  • Legitimate interest: To operate and improve our business, ensure cybersecurity, or maintain client relationships.

  • Consent: When you subscribe to updates, newsletters, or marketing communications.

  • Legal obligation: To comply with applicable laws or government requests.

5. Data Sharing and International Transfers

We may share limited data with:

  • Service providers who support Averroa’s operations (e.g., hosting, analytics, communications).

  • Consultants or partners involved in delivering Averroa engagements, under strict confidentiality agreements.

  • Authorities or regulators when required by law.

If data is transferred outside the European Economic Area (EEA), we ensure equivalent protection through EU-approved Standard Contractual Clauses or adequacy decisions.

6. Data Retention

We retain personal data only as long as necessary to fulfill the purpose for which it was collected:

  • Client and project records: up to 7 years after engagement closure.

  • Marketing communications: until you withdraw consent or unsubscribe.

  • Website analytics: anonymized after 26 months.

After retention periods expire, data is securely deleted or anonymized.

7. Cookies and Tracking Technologies

Our website uses cookies to enhance functionality and analyse usage patterns.
You can manage cookie preferences through your browser or our on-site cookie banner.

Types of cookies used:

  • Essential: Enable core site functionality.

  • Analytics: Help us understand visitor behaviour (Google Analytics, etc.).

  • Functional: Remember preferences or improve experience.

We do not use invasive tracking or behavioural advertising cookies.

8. Your Rights

Under GDPR, you have the right to:

  • Access your personal data.

  • Correct inaccurate information.

  • Request deletion (“right to be forgotten”).

  • Restrict or object to processing.

  • Data portability (receive a copy in structured format).

  • Withdraw consent at any time.

  • Lodge a complaint with a supervisory authority (Agencia Española de Protección de Datos – AEPD in Spain).

To exercise these rights, contact us at privacy@averroa.com.

9. Data Security

Averroa applies strong technical and organizational measures to protect personal data, including:

  • Encrypted communications (HTTPS, secure mail).

  • Access control and authentication protocols.

  • Regular security audits and data minimisation practices.

  • Limited data access based on ORBIT™ role structure (only relevant personnel handle client-related information).

10. Third-Party Links

Our website may contain links to external resources or partners. We are not responsible for the privacy practices of these third-party websites. We encourage users to review their respective privacy policies.

11. Updates to This Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. The latest version will always be available on this page.

12. Contact Us

For questions or requests regarding this Privacy Policy or your personal data, contact:

Averroa Digital Consulting S.L.
Calle Aramayona, Madrid, Spain
Email: privacy@averroa.com
Website: https://averroa.com