Privacy Policy

1. Who is responsible

The controller for the current website is SCABG — Spain–Central Asia Business Gateway. Privacy enquiries and requests may be sent to info@spaincentralasia.com.

2. Data we may process

We process only the limited data needed for the current site and communications.

• Information you choose to send by email, such as your name, organisation, contact details, message and attachments.
• Basic technical and security information generated when the site is delivered, such as request time, IP address, browser or device information, requested page and security events.
• Your cookie and local-storage preference record, including the policy version, timestamp and category choices.

3. Purposes and legal bases

• To respond to enquiries and take steps you request before possible project or commercial discussions. The legal basis is taking pre-contractual steps at your request and, where relevant, our legitimate interest in handling professional enquiries.
• To operate, maintain and secure the site, prevent abuse and diagnose technical issues. The legal basis is our legitimate interest in providing a reliable and secure website.
• To meet applicable legal obligations and respond to lawful requests from authorities. The legal basis is compliance with a legal obligation.
• Optional analytics or marketing would rely on your consent. No analytics, advertising or behavioural profiling tool is currently active.

4. Recipients and service providers

Personal data may be made available only to hosting, IT and email providers where necessary to deliver the site or handle your message, and to professional advisers or public authorities where required by law. SCABG does not sell personal data.

5. International transfers

A service provider may process data outside the European Economic Area when its location or infrastructure requires this. Where applicable, transfers will rely on an adequacy decision, Standard Contractual Clauses or another safeguard permitted by data-protection law.

6. Retention

• Email enquiries are kept only as long as needed to handle the enquiry and any resulting relationship, plus applicable legal limitation periods.
• Technical and security logs are kept only as long as reasonably needed for operation and security and normally no longer than 12 months, unless an incident requires longer preservation.
• Consent and preference records are kept for no more than 24 months. After the relevant period, data is deleted or anonymised unless law requires continued retention.

7. Your rights

Depending on the circumstances, you may request access, rectification, erasure, restriction, objection and portability of your personal data, and withdraw consent at any time without affecting processing already carried out. Send your request to info@spaincentralasia.com. We may ask for information needed to verify identity.

Submit a complaint to the Spanish Data Protection Agency (AEPD) →

8. Automated decisions and profiling

SCABG does not use the current website to make decisions based solely on automated processing and does not carry out behavioural profiling.

9. Security and third-party links

Reasonable technical and organisational measures are used to protect data. No internet service can be guaranteed completely secure. Links to third-party websites are governed by those third parties’ own privacy information.

10. Changes to this policy

This policy reflects the current website functionality. It will be reviewed and updated if SCABG introduces web forms, user accounts, analytics, advertising, new processors or other material processing activities. The date above shows the latest revision.