Privacy Policy

1. Introduction and Scope

A3 Marketingis a web agency committed to protecting the privacy of our website visitors and clients. We are the **Data Controller** for the personal data processed in accordance with this policy.

This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website, a3marketing.se, or engage with our services. As we operate in Spain/Sweden and primarily serve a European audience, we adhere to the **General Data Protection Regulation (GDPR)** and relevant European national data protection laws.

3. Personal Data We Collect

The data we collect depends on your interaction with us:

• Information You Voluntarily Provide: This includes **Identity & Contact Data** (Name, email, phone, company name) when you fill out contact forms, sign up for services, or email us. It also includes **Professional Data** (project details, budget, business goals) necessary for service delivery.
• Information Collected Automatically: When you visit a3marketing.se, we collect **Technical & Usage Data** such as your IP address, browser type, operating system, the pages you visit, and timestamps. This is gathered via server logs and analytics tools.
• Cookies and Tracking Technologies: We use cookies to collect information about your browsing behavior. See Section 5 for more details.

4. How and Why We Use Your Personal Data

We process your data based on one of the following **Legal Bases** under GDPR: **Contractual Necessity**, **Legitimate Interests**, or **Consent**.

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies. We are committed to using a **Consent Management Platform (CMP)** to obtain your explicit consent for non-essential cookies.

• Strictly Necessary Cookies: Essential for the core function of the site (e.g., security, remembering your cookie preference). These do not require consent.
• Performance/Analytics Cookies: Used to understand how visitors interact with the website, allowing us to measure and improve performance (e.g., Google Analytics). These require your **Consent**.
• Functional Cookies: Used to provide enhanced personalization and features (e.g., remembering your language preference). These require your **Consent**.

You can manage your cookie preferences at any time by clicking the cookie consent button/banner on our site.

6. Sharing and International Data Transfers

Sharing Your Data

We do not sell your personal data. We only share it with:

• **Service Providers/Data Processors:** Third-party companies providing essential services like hosting, email, payment processing, and analytics. They are bound by contract to only process data according to our instructions.
• **Legal Compliance:** Law enforcement or regulatory bodies when legally required to do so.

International Transfers

We primarily store and process your data within the European Economic Area (EEA). If data is transferred outside the EEA, we ensure an adequate level of protection is maintained by using **Standard Contractual Clauses (SCCs)** or relying on an **Adequacy Decision** by the European Commission.

7. Data Security and Retention

Data Security

We implement robust technical and organizational security measures, including encryption and access control, to protect your personal information against unauthorized access, loss, or misuse.

Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for. For client contract data, we typically retain it for the duration of the service contract plus years to meet legal, accounting, and tax requirements.

8. Your Data Protection Rights (GDPR)

Under the GDPR, you have the following rights. To exercise any of these, please use the contact details in Section 2:

• **Right of Access:** Request a copy of the data we hold about you.
• **Right to Rectification:** Have incomplete or inaccurate data corrected.
• **Right to Erasure:** Ask us to delete your personal data (the 'right to be forgotten').
• **Right to Restrict Processing:** Request the suspension of processing your data in certain scenarios.
• **Right to Data Portability:** Request the transfer of your data to you or a third party.
• **Right to Object:** Object to processing based on legitimate interests.
• **Right to Withdraw Consent:** Withdraw your consent at any time where processing is based on consent.

9. Complaints and Policy Changes

Complaints

If you have a complaint about our data processing, we encourage you to contact us first. You also have the right to lodge a complaint with the relevant supervisory authority in Sweden:

**Integritetsskyddsmyndigheten (IMY)** (Swedish Authority for Privacy Protection) - www.imy.se

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any material changes by updating the **"Effective Date"** at the top of this policy.