Privacy policy
Last update: February 2026
Data controller
ARIMA Software Design S.L (“ARIMA”) is responsible for processing the personal data collected through this website.
- Tax ID: B75091801
- Registered office: Mikeletegi 69, Piso 1, 20009 Donostia-San Sebastián (Gipuzkoa)
- General email: arima@arima.eu
- Privacy email: dpo@arima.eu
- Phone: +34 943 598 099
- Corporate information: Inscrita en el Registro Mercantil de Gipuzkoa, al folio 10 del tomo 2.613 de inscripciones, hoja SS-35.720, inscripción 1ª.
If you have any questions about this policy, please contact us at dpo@arima.eu.
Purposes and lawful basis
We process personal data in accordance with Regulation (EU) 2016/679 (“GDPR”) and the Spanish Organic Law 3/2018. Main purposes and lawful bases are:
Enquiries and contact requests
We use your details to manage questions, information requests or quotes received via forms, email or telephone. The lawful bases are your consent (art. 6.1.a GDPR) and our legitimate interest in replying (art. 6.1.f GDPR). We process identification data, contact details and the information you include in your message.
Recruitment and talent
If you send us your CV or application, we will evaluate your profile and inform you about professional opportunities. The lawful basis is your explicit consent (art. 6.1.a GDPR).
Business and supplier relationships
To deliver our services, manage clients, partners and suppliers and comply with legal duties. The lawful bases are performance of a contract (art. 6.1.b GDPR) and compliance with legal obligations (art. 6.1.c GDPR).
Third-party functional services
We display the map in the contact section through Google Maps. This service is only enabled if you grant consent for functional cookies (art. 6.1.a GDPR). See the cookie policy for details.
Recipients and processors
We do not share your data with third parties unless there is a legal obligation. Some service providers (hosting, mailing tools and technology providers such as Google LLC for Google Maps) act as data processors and access the information under our instructions. We sign data processing agreements with each of them.
When our providers are located outside the European Economic Area we ensure appropriate safeguards such as Standard Contractual Clauses are in place.
Retention periods
Data are stored only for the time strictly necessary:
- Queries and requests: 12 months after the last interaction, unless a contractual relationship is initiated.
- Applications: 24 months from the last update of your profile.
- Clients and suppliers: for the duration of the contractual relationship and thereafter for the statutory limitation periods (e.g. 6 years for accounting records).
- Functional cookies: according to the periods stated in the cookie policy.
Your rights
You may exercise the following rights:
- Access: obtain confirmation of whether we process your data and receive a copy.
- Rectification: request correction of inaccurate or incomplete data.
- Erasure: ask for deletion when data are no longer needed or consent is withdrawn.
- Objection: object to processing based on our legitimate interests.
- Restriction: request temporary limitation in certain circumstances.
- Portability: receive your data in a structured format and transmit them to another controller.
- Not to be subject to automated decisions: including profiling, where applicable.
How to exercise your rights
Please email dpo@arima.eu indicating which right you wish to exercise and attach proof of identity. If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Updates
We may update this policy to reflect regulatory changes or new processing activities. The latest version will always be available on this page.
For further information about cookies and similar technologies, please read our cookie policy.