Legal
Privacy policy
How we process the personal data you provide under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on personal-data protection and digital rights.
- Data controller
- ALLÓ The Agency, S.L.
- Tax ID
- B67855502
- Address
- Via Augusta, 158 – 5th floor – Door 2, 08006 Barcelona (Spain)
- Data protection contact
- allo@allotheagency.com
Data we collect
We collect information you voluntarily provide when requesting a consultation, contacting us or submitting an application. This may include your name, company, role, email, phone, project information, professional area, links to a portfolio, LinkedIn profile or website, and any message you choose to share. We do not ask for special-category data; please do not include it in an application.
How we use it
Consultation data is used to respond, prepare the conversation and, where relevant, draft a proposal. Application data is used to assess your profile and contact you if it fits a current or upcoming opportunity. We do not use it for automated profiling or decisions based solely on automated processing.
Legal basis
For commercial enquiries, the basis is the consent given when submitting the form and steps taken at your request before entering into a contract. For spontaneous applications, it is your consent to assess and retain your profile for the stated purpose. You may withdraw consent at any time without affecting processing that was lawful before withdrawal.
How long we keep it
Commercial enquiries are kept while they are handled and, if a relationship begins, for the periods required by law to address possible liabilities. If no contract is formed, they are deleted when no longer needed. Applications are kept for no more than 12 months after receipt, unless you withdraw consent earlier or an open recruitment process justifies keeping them while it is completed. According to its public documentation, FormSubmit temporarily retains a copy of each submission for no more than 30 days.
Recipients and form delivery
Forms are sent through FormSubmit to ALLÓ's inbox and may be stored temporarily by that provider for no more than 30 days. The technical providers listed below may also process data. Before these services remain in production, ALLÓ must verify and document the processing agreement, the actual processing location and, where applicable, safeguards for international transfers.
Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to allo@allotheagency.com and proving your identity. If you believe processing does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency at www.aepd.es.
Security
We apply reasonable technical and organisational measures to protect data against loss, misuse and unauthorised access.
Data processors
We use providers that may process data on behalf of ALLÓ The Agency, S.L. These arrangements must be governed by a data-processing agreement under Article 28 GDPR:
| Provider | Service | Where data is processed |
|---|---|---|
| Google Ireland Limited | Email and productivity tools (Google Workspace) | European Union, with transfers to the United States covered by the EU–US Data Privacy Framework |
| Google Ireland Limited | Tag management (Google Tag Manager), only after cookies are accepted | European Union, with transfers to the United States covered by the EU–US Data Privacy Framework |
| Netlify, Inc. | Website hosting | United States, with transfers covered by standard contractual clauses |
| FormSubmit | Delivery of forms to ALLÓ's inbox and temporary storage of copies for no more than 30 days | United States; the transfer mechanism must be verified contractually before publication |
Data is not disclosed to third parties beyond these providers unless required by law.