PRIVACY POLICY

The Government of Andorra is committed to protecting your privacy and developing technology that provides you with the safest experience on the website. This privacy statement applies to the websites https://www.anc.ad and https://www.csirt.ad, and governs the collection and use of data.

By using these websites, you accept the privacy policies and consent to the practices described in this statement.

Who is responsible for the data?

We inform you that any personal data you provide through these websites will be processed by the Government in its capacity as data controller. The Government is the owner of these websites.

What data do we collect?

In compliance with Law 29/2021, of October 28, on the protection of personal data (hereinafter “LQDP”) and its implementing regulations, users of these websites are informed about the data collected (data entered in forms by the user and automatic data (cookies) for statistical processing).

Visiting these websites does not imply that the user provides personal data. If provided, such data may be processed by the Government as the data controller and will be stored and processed within the territory of Andorra.

When forms are used to collect personal data, the identification of the user is considered accurate, since it is the user who voluntarily enters the data into the forms available on our websites and applications.

The voluntary or mandatory nature of the fields or responses will be indicated with an asterisk (*). Refusing to provide required data will result in the requested service or information not being provided. Voluntary data may also be provided to better deliver the requested service or information.

In addition to the data provided by the user, the Government will collect connection and browsing data through cookies or other tools. You can find a detailed explanation of these cookies at the following link: Cookies

For what purpose do we process your data?

The Government may process your personal data for the purposes described below, provided you give your consent in part or in full: sending information and alerts.

We will process your personal data for the following purposes:

PURPOSE  More Information
 

1. To handle requests or queries made through the contact channel.

 

  We only process the personal data strictly necessary to manage or respond to your request.

 
 

2. Usability and quality analysis to improve navigation.

 

  

When accessing the websites, we inform you that we will process your browsing data for analytical and statistical purposes—to understand how users interact with the website in order to improve it, and to respond to user suggestions.

 

* The checkboxes must not be pre-checked. It is the user who decides freely, specifically, and informedly to consent to all or part of these purposes

How long will we keep your data?

The Government will retain your personal data for the time necessary to fulfill the purposes mentioned above. If there is legislation requiring the Government to retain your personal data, it will be stored for that additional period, but will be blocked and processed only to ensure its preservation. Once those periods end, personal data will be deleted.

Will we share your data?

As a general rule, your data will not be shared with third parties unless we have your express consent to do so.

To fulfill the above purposes—and only when necessary—your personal data may be shared with:

  1. Data processors working on behalf of the Government who need to process your personal data in connection with the relevant purpose. They will do so in accordance with the instructions of the Government, its privacy policy, and any appropriate security and confidentiality measures it establishes.
  2. Competent public administrations, in cases provided for by law and for the purposes defined therein.

Will your data be transferred outside Andorra?

The data will remain in Andorra. If service requirements make it necessary for data to be transferred outside Andorra, it will be processed from EU countries that ensure an adequate level of protection.

  • If data is transferred to countries that do not guarantee such protection, the risks involved must be clearly specified.

What rights do you have?

In compliance with the LQDP and its implementing regulations, the Government informs you that you have the rights of access, rectification, erasure, and objection concerning your personal data, as recognized by the relevant legislation. To exercise these rights, you must send a written and signed communication to the email address dpd.anc@govern.ad, attaching a copy of your passport or another national identity document.

If you believe your rights have been violated—especially if your requests have not been satisfactorily addressed—you may file a complaint with the Andorran Data Protection Agency.

Can you withdraw consent?

The GOVERNMENT informs users that they have the following rights under the applicable regulations:

  1. The right to access your personal data to know which data is being processed and the operations carried out with it.
  2. The right to rectify any inaccurate or incomplete personal data. By providing your data, you guarantee that it is accurate and agree to inform us of any changes. Any loss or damage caused to the website, data controller, or third parties due to inaccurate or incomplete data will be your sole responsibility. As a general rule, only provide your own data, not that of third parties.
  3. The right to request the deletion of personal data when it is no longer necessary for the purposes for which it was collected, or when we no longer have legal grounds to process it—unless there is a legal obligation to retain it or legitimate grounds prevail.
  4. The right to request the restriction of the processing of your personal data, allowing temporary suspension or extended storage as needed.

What security measures protect your data?

The Government guarantees that the processing of your personal data is subject to the strictest confidentiality, and that the necessary technical and organizational measures have been put in place to ensure the security of your data and prevent alteration, misuse, loss, theft, or unauthorized access or processing.

Possible changes to the privacy policy

The Government reserves the right to amend this privacy policy to adapt it to future legislative or jurisprudential developments, as well as to future uses of users’ personal data.

If we make changes, we will notify you through various means such as email. In any case, we suggest you review this privacy policy periodically for minor changes or interactive improvements. It will always be available as a permanent information point on our websites.