Privacy Policy

Last updated: January 2025

1. USER INFORMATION

ANOTHER LEVEL – THE MINDING AGENCY (hereinafter, “Another Level”, “we”, “our” or the “Agency”), as responsible for the Website, in accordance with Regulation (EU) 2016/679 of April 27, 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and the free movement of such data, makes this Privacy Policy available to users.

Data Controller Identity:

• Company Name: Another Level – The Minding Agency
• Trade Name: Another Level | ALTMA
• Tax ID: [TO BE COMPLETED]
• Registered Office: [ADDRESS TO BE COMPLETED]
• Phone: [PHONE TO BE COMPLETED]
• Contact Email: info@anotherlevel.pro
• Website: https://anotherlevel.pro

2. PRINCIPLES APPLICABLE TO DATA PROCESSING

In processing your personal data, we will apply the following principles that comply with GDPR requirements:

• Principle of lawfulness, fairness and transparency: We will always require your consent for processing your personal data for one or more specific purposes that we will inform you about in advance with complete transparency.
• Principle of data minimization: We will only request data strictly necessary in relation to the purposes for which we require them.
• Principle of storage limitation: Data will be kept for no longer than necessary for the purposes of processing.
• Principle of integrity and confidentiality: Your data will be processed ensuring adequate security of personal data, including protection against unauthorized or unlawful processing.
• Principle of accuracy: Data must be accurate and up to date.
• Principle of accountability: The Data Controller will be responsible for compliance with regulations.

3. CATEGORIES OF PERSONAL DATA

The categories of data processed at Another Level are:

• Identifying data: name, surname, email, phone
• Professional data: company, position, industry sector
• Browsing data: IP address, cookies, website usage data
• Economic and transaction data: data necessary for service billing
• Communication data: communication history, queries and requests

4. LEGAL BASIS FOR DATA PROCESSING

The legal basis for processing your personal data may be:

• Data subject consent: For sending commercial communications and newsletters.
• Contract execution: For providing consultancy and digital marketing services.
• Legitimate interest: For improving our services and website usage analysis.
• Legal obligation compliance: To comply with our tax and commercial obligations.

5. PROCESSING PURPOSES

Personal data collected will be processed for the following purposes:

5.1. Service Management

• Provision of digital strategy and marketing services
• Data analysis and market research
• UX design and digital project development
• Marketing campaign implementation
• Personalized strategic consulting

5.2. Communications

• Responding to your queries and information requests
• Sending quotes and commercial proposals
• Managing appointments and meetings schedule
• Sending newsletters and valuable content about digital marketing
• Information about new services and success cases

5.3. Analysis and Improvement

• Statistical analysis of website usage
• User experience improvement
• Content personalization according to your interests

6. DATA RETENTION PERIOD

Personal data will be retained for the following periods:

• Customer data: Throughout the contractual relationship and up to 6 years after termination for tax obligations.
• Prospective customer data: For 2 years from last contact, unless you authorize us to keep them longer.
• Browsing data: For 1 year for analysis and service improvement purposes.
• Newsletter subscriber data: Until you request unsubscription or revoke consent.
• CVs and applications: For 1 year from receipt.

7. DATA RECIPIENTS

Your personal data may be communicated to:

• Public Administrations: In compliance with legal obligations (Tax Agency, Courts and Tribunals).
• Financial institutions: For payment and collection management.
• Essential service providers:
  • Hosting and cloud storage services
  • Email marketing platforms (Mailchimp, SendGrid)
  • Web analytics tools (Google Analytics, Hotjar)
  • CRM and customer management (HubSpot, Salesforce)
  • Social media management platforms

All our providers have signed corresponding data processor agreements and guarantee GDPR compliance.

8. INTERNATIONAL TRANSFERS

Some of our providers may be located outside the European Economic Area. In these cases, we ensure they have:

• European Commission adequacy decision
• EU-approved standard contractual clauses
• Privacy Shield certification or equivalent mechanism

9. DATA SUBJECT RIGHTS

As a data subject, you have the right to:

• Right of access: Know what personal data we are processing.
• Right of rectification: Modify incorrect or incomplete data.
• Right of erasure: Request deletion of your data when no longer necessary.
• Right to object: Object to data processing for certain purposes.
• Right to restriction: Request processing limitation in certain circumstances.
• Right to portability: Receive your data in structured and commonly used format.
• Right not to be subject to automated decisions.
• Right to withdraw consent: At any time, when processing is based on consent.

To exercise any of these rights, you can contact us through:

• Email: info@anotherlevel.pro
• Postal mail: [ADDRESS TO BE COMPLETED]

You must attach a copy of your ID or equivalent identification document. We will respond to your request within a maximum period of one month.

If you consider that your rights have not been properly addressed, you may file a complaint with the Spanish Data Protection Agency (www.aepd.es).

10. DATA SECURITY

Another Level has adopted all necessary technical and organizational measures to guarantee the security and integrity of personal data, as well as to prevent loss, alteration and/or access by unauthorized third parties. These measures include:

• SSL encryption in all communications
• Updated firewall and antivirus systems
• Restricted access control to personal data
• Regular backups
• Staff training on data protection
• Security incident response protocols

11. MINORS’ DATA

This website is not directed at minors under 14 years of age. We do not knowingly collect information from minors without consent from their parents or legal guardians.

12. COOKIES

This website uses first-party and third-party cookies to improve browsing experience. For more information, see our Cookie Policy.

13. SOCIAL MEDIA

Another Level is present on social media. Data processing that individuals do through social media will be governed by the terms of use of such platforms.

When you visit our social media profiles, we will apply this Privacy Policy to everything under our control.

14. PRIVACY POLICY MODIFICATIONS

Another Level reserves the right to modify this Privacy Policy to adapt it to legislative or jurisprudential developments. Changes will be published on this page with sufficient notice.