Privacy policy.

Last updated: September 2026

At Aséko, we talk about automation and AI all day long. So you can imagine how seriously I take data protection. This policy explains what I do with the information you entrust to me.

1. Data controller

The controller of the personal data collected on this website is:

• Rose-Orlane Casseus, autónoma in Spain
• NIF: Z0864543R
• Calle Ten Bel 12, 38630 Costa del Silencio, Arona (Tenerife), Spain
• GDPR contact: hello@aseko.agency

2. What data I collect

2.1. Contact form

When you send me a message via the contact form or by email: your name, your email address, and the content of your message.

2.2. Newsletter

When you sign up for the newsletter: your email address only.

2.3. Digital and AI marketing diagnostic

When you complete the free diagnostic: your first name, last name (optional), company (optional), email, and your answers to the questionnaire (used to create your personalized report).

2.4. Booking a discovery call

When you book a call through Calendly: your name, your email, and the time slot you chose.

2.5. Site navigation

If you accept analytics cookies: anonymized browsing data via Google Analytics (page views, duration, device, country). No directly identifying data is collected at this stage.

3. Why I collect this data (purposes)

• Reply to your messages and support you on your project
• Send you the newsletter you signed up for
• Create and send your personalized digital and AI marketing diagnostic
• Schedule and organize our calls and meetings
• Improve the site and understand how it's used (analytics)
• Meet my legal obligations (invoicing, accounting)

4. Legal basis for processing

• Consent for the newsletter and analytics cookies (you can withdraw it at any time)
• Performance of a contract or pre-contractual measures for contact requests, diagnostics, and call bookings
• Legitimate interest for the security and proper functioning of the site
• Legal obligation for the retention of billing data

5. How long I keep your data

• Contact messages: 3 years from the last exchange
• Newsletter: until you unsubscribe (link included in every email)
• Diagnostic: 3 years, then automatic deletion
• Client data (contracts, invoices): in accordance with Spanish law, up to 6 years for accounting documents
• Analytics cookies: 14 months maximum

6. Who I share your data with

I never sell your data. Period. I use technical service providers who process certain data on my behalf, strictly within the scope of the service they provide:

Provider	Role	Location
Netlify	Website hosting	United States (standard contractual clauses)
MailerLite	Newsletter delivery	European Union (Lithuania)
Resend	Transactional emails (diagnostic)	United States (standard contractual clauses)
Calendly	Call bookings	United States (standard contractual clauses)
Google Analytics 4	Traffic analytics (with consent)	European Union (Google Ireland)
Behold	Public Instagram feed display	European Union

For transfers outside the European Union, the providers involved have signed the European Commission's standard contractual clauses, which guarantee a level of protection equivalent to GDPR.

7. Your rights

GDPR grants you rights over your data. You can exercise:

• Right of access: know what data I hold about you
• Right to rectification: correct inaccurate data
• Right to erasure: request deletion of your data
• Right to restriction: limit the use of your data
• Right to portability: get your data back in a readable format
• Right to object: refuse a specific processing
• Right to withdraw consent at any time (newsletter, cookies)

To exercise any of these rights, write to me at hello@aseko.agency. I reply within 30 days maximum.

8. Complaints to a supervisory authority

If you believe the processing of your data doesn't comply with regulations, you can file a complaint with:

• Agencia Española de Protección de Datos (AEPD), Spain, www.aepd.es
• Or the supervisory authority in your country of residence (for example, the CNIL in France, the ICO in the UK)

9. Data security

The site is served over HTTPS. Data submitted through forms is encrypted in transit. The listed providers meet industry security standards. I do not store any sensitive data (passwords, banking details) on the site.

10. Cookies

Cookie usage is covered by a dedicated policy, available here: Cookies policy.

11. Changes to this policy

This policy may evolve. The last-updated date appears at the top of the document. In case of substantial changes, I'll notify you by email if you're subscribed to the newsletter.