Privacy policy

Controller

The controller is AAIA. The operational contact is info@aaia.ad. Final registry data will be added once formalised.

Purposes

• Respond to enquiries submitted through the form.
• Manage member, partner and institutional pre-registrations.
• Prepare communications related to AAIA activity when relevant.

Legal basis

Processing is based on the data subject's consent and on requested pre-contractual or associative steps.

Retention and recipients

Data will be kept for as long as necessary to respond and manage the relationship. It will not be sold to third parties. Technical providers may be used for hosting or email delivery.

Rights

You may request access, rectification, erasure, objection, restriction or portability by writing to info@aaia.ad.

Artificial intelligence assistant

The assistant is optional. Before starting, a notice asks you to accept the processing needed to answer your questions. When you send a message, it and the recent conversation context are sent to OpenAI to generate a response, together with AAIA's public information. Do not enter sensitive data, private documents or other people's personal data. AAIA does not save a chat history or record messages in application logs; the conversation stays in page memory and is cleared when you reset it or reload the page. Requests are configured with response storage disabled, but OpenAI may retain data under its terms and security measures. The service may involve processing data outside Andorra. Temporary identifiers are used to limit usage and protect the service. Responses may contain errors and do not complete memberships, reservations or payments. For personal requests or to exercise your rights, write to info@aaia.ad.

• To limit usage, the IP address is transformed into an identifier using a hash with a temporary random key. These identifiers are held only in memory; they expire after ten minutes and are removed on subsequent requests or when the service instance restarts.