Skip to content
Client area

Privacy policy

Last reviewed: 24 September 2026.

BDR Informàtica i Comunicacions, SLU provides information on the collection of personal data through this website, how it is processed and the related rights, in accordance with the applicable data protection legislation.

Applicable legislation

  • Law 29/2021 of 28 October on the protection of personal data (LQPD) of the Principality of Andorra
  • Decree 391/2022 of the Principality of Andorra approving the Regulation implementing the LQPD
  • Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), to the extent applicable

1. Scope

This policy applies to people who interact with BDR through this website, to users of its services and to anyone whose personal data is processed in the course of that relationship.

2. Data controller

BDR Informàtica i Comunicacions, SLU
Registered office: Passeig de l'Arnaldeta de Caboet, 11, 2-2, AD700 Escaldes-Engordany, Principality of Andorra
Tax number (NRT): L-707599-R
Contact: info@bdrinformatica.com

Data protection officer (DPO): Win2win, SLU, DPDextern@win2win.ad.

Representative in the European Union: Compliance Gap Mitigation, calle Ferraz 28, 2º izquierda, 28008 Madrid (Spain).

3. How personal data is obtained

Data is mainly provided directly by the user. It may also be obtained from third parties who contract services on the user's behalf, from suppliers, from images published on the website, from emails received or from cookies.

4. Purposes and legal basis

  • Supplier management: contact, quotes and invoices (basis: contract and legitimate interest).
  • Customer relations: management of service contracts (basis: performance of the contract).
  • Quotes and services: offers and provision of services (basis: consent and legal obligation).
  • Handling requests: management of enquiries and complaints (basis: consent and legitimate interest).
  • Functional cookies: ensuring the website works properly (basis: legitimate interest).
  • Analytics cookies: only with your express consent, as explained in the Cookie policy. We do not use advertising cookies.
  • Security incidents: mandatory notification in the event of high risk (basis: legal obligation).

5. Disclosure of data

Data is not disclosed to third parties except at the user's request, where there is a legal obligation or where it is necessary to provide the service (for example, technical providers, with appropriate safeguards). Google LLC, a United States provider, only receives data if you accept analytics cookies, tick the reCAPTCHA box when recovering your password or press the button to show the map on the contact page, as explained in the Cookie policy. Any international transfer complies with the applicable legislation.

6. Data retention

Data is kept for as long as necessary for the purpose of the processing and while legal liabilities may arise. Once that period has passed, the data is deleted, anonymised or blocked.

7. User rights

Users may exercise the following rights at any time:

  • Access to their personal data
  • Rectification of inaccurate data
  • Erasure of data
  • Restriction of processing
  • Objection to processing
  • Data portability
  • The right not to be subject to automated decisions

Consent may be withdrawn at any time, without retroactive effect.

Exercising your rights: by post to the address given in section 2, or by email to DPDextern@win2win.ad. Users may lodge a complaint with the Andorran Data Protection Agency (APDA).

8. User responsibilities

Users guarantee that the data they provide is accurate, undertake to keep it up to date and are liable for any damage arising from false or inaccurate data. They must not provide third-party data without justification or without informing those persons beforehand. Parental authorisation is required for anyone under 16.

9. Data security

BDR applies legal, technical and organisational measures to protect personal data: a record of processing activities, risk analysis, access restrictions, staff training and contractual clauses with suppliers. In the event of a security breach involving high risk, those affected will be notified.

10. Changes to this policy

This policy will be updated whenever necessary. Substantial changes will be notified in advance. We recommend reviewing this page periodically.

Contact for privacy matters: DPDextern@win2win.ad

BDR Informàtica i Comunicacions, SLU, NRT L-707599-R
Passeig de l'Arnaldeta de Caboet, 11, 2-2, AD700 Escaldes-Engordany, Andorra
soporte@bdrinformatica.com