ES • EN • EUS • FR



The personal data that you provide to us by any of the means provided for this purpose will be treated in accordance with the following privacy policy.



Please find information below about the data processing covered in this policy, indicating the legal basis of the General Data Protection Act (hereinafter, GDPR) and the specific data conservation period, to which the time necessary to comply with legal obligations and address any liabilities that may arise from fulfilling the purpose for which the data was collected must be added:


Legal basis of art.6 GDPR

Conservation time 

Requests for information or consultation. Claims

Respond to requests for information, queries or claims that you send, with the management and scope that is required. Prepare proposals for services and/or collaboration.

6.1.a) GDPR. The interested party has provided consent for the processing.

6.1.b) GDPR. The processing is necessary for the application at the request of the interested party for pre-contractual measures.

For the time necessary to attend to and manage your request and/or claim.

Service provision

Manage and process the services that have been contracted with ARPA. 


Compliance with the fiscal, administrative and legal obligations derived from it, including charging for the work and services provided.

6.1.b) GDPR. The processing is necessary to formalise an agreement in which the interested party is a party. 

6.1.c) GDPR. Compliance with a legal obligation: commercial, tax, money laundering regulations.

For as long as the relationship is in force and/or the service is provided.

Newsletter and commercial communications

When you subscribe to the ARPA newsletter or provide your consent, you will be kept informed of the activity of ARPA and the organisations Fundación ARPA and ARPA Accounting S.L., including activities, articles of interest and general information, offers, promotions and articles or content about their services via email, including monitoring whether or not they have been opened. If you have a prior contractual relationship with ARPA, unless you object, you may receive communications related to your relationship with ARPA.

6.1.a) GDPR. The interested party has provided consent for the processing.

6.1.f) GDPR. Legitimate interest, based on article 21.1 of the Information Society and Electronic Commerce Services Act.


Until you oppose.

HR: job bank and selection processes 

ARPA manages a job bank and, in this sense, when you register for a job offer and/or send your CV, your data will be processed to cover possible vacancies, collaborations, work practices or scholarships. 

When it is a specific application, your application will be analysed and, where appropriate, ARPA will contact you. 

6.1.a) GDPR. The interested party has provided consent for the processing.

Two years.

Training activities and events

Your registration and/or participation in the event or in the training activity in which you have registered will be processed and you will receive information related to the event/activity (materials, assessment surveys, notifications or notices about changes, etc.). In relation to the training actions organised or in which ARPA participates, your data will also be used to send you an opinion query/satisfaction survey about the event/activity.

6.1.b) GDPR. The processing is necessary to formalise an agreement in which the interested party is a party.


6.1.a) GDPR. The interested party has provided consent for the processing.

For the time necessary to manage the registration and hold the event. 

Representatives/natural persons who provide their services to a legal entity: If you represent a legal entity

The data will be processed for the normal management of the relationship with the legal entity.

6.1.f) GDPR. Legitimate interest; on the basis of article 19 LOPDGDD.

As long as the relationship between the parties is in force.

Cookies: If you agreed to receive cookies on your first visit to this website, the cookie policy shall apply to you and the data obtained while browsing will be used for the following purposes. 

Cookies are used solely for a technical purpose and are needed in order for the Website to function correctly. 

6.1.f) GDPR. Legitimate interest.

Depending on the type of cookies, expressed in the corresponding policy.

If your authorisation is requested at any time to process your data for a purpose that requires consent, not granting it (or subsequently withdrawing consent) will have no consequences for you in any case. Nor will opposing the processing of your data for purposes based on legitimate interest (for example, the use of your data as a customer to send commercial communications) have any consequence.

Some data collection forms include fields marked as required (identified with an asterisk), while the others are completely voluntary. Thus, not completing voluntary fields will have no consequence and can be completed only if you are interested to do so.


1.3.1.- Personal data collected.

Identification and contact data will be collected through the forms enabled on the ARPA website, such as name, surname, email, telephone, etc. Additional information can be sent in a specific form (e.g. reason for the query or curriculum vitae in the employment form). Finally, depending on your cookie preferences, the configuration of your device when accessing the website or the communications that ARPA sends to you, your browsing and whether or not you have opened commercial communications could be monitored.

1.3.2.- Guarantees and responsibility for the data.

The owner of the data guarantees that the data provided through the forms enabled for this purpose or through other communication methods are true, accurate and up-to-date. If the personal data provided to ARPA is from a third party other than the person who sends it, the latter guarantees that the third party has been clearly informed about the data processing that will be carried out and that the holder understands this and has provided consent (informed and free) in order to communicate this data to ARPA.


In general, except where there is a legal obligation to do so, your data will not be communicated or transferred to any third party without previously obtaining your express consent. In any case, some communications and/or data transfers to third parties may be imposed by certain regulations or to meet the obligations with Public Administrations where so required pursuant to current legislation at any time. Other communications will be a necessary consequence of the service provision, in which case, ARPA undertakes to formalise the mandatory processing order agreement imposed by current legislation with these third parties when it is mandatory to do so.

Please also be advised that ARPA is part of Latiam and Eurojuris, both of which are international networks of consultants and law firms whose members can be organisations located outside of the European Economic Area.

If your personal data had to be communicated to organisations located outside the European Economic Area (EEA), you will be previously informed of these data transfers and ARPA promises to always do so with your consent, signing the type of data protection conditions with these third parties that are approved by the European Commission or, if any, by the legitimising basis that allows these transfers to be made in a lawful manner. ARPA also undertakes to adopt all existing guarantees pursuant to data protection regulations to guarantee the privacy and security of your data.

ARPA uses the newsletter delivery and management service offered by Mailchimp (The Rocket Science Group), which involves international data transfer to the USA. Such transfer is preceded by the formalisation of the corresponding standard contractual conditions.


1.5.- RIGHTS

Regarding the personal data collected for processing, you may exercise your rights to access, modify or delete your data and to portability. In certain circumstances, you will also have the right to request limitation or opposition to data processing, in which case, ARPA will cease processing it and will only keep it if there is any regulatory obligation by which it is required to do so or until the time limit of the actions that could concur have transpired.

ARPA will be happy to attend to any queries or claims you may have regarding data protection. In this sense, you can address a claim or exercise your rights through any of the contact channels indicated hereinabove. You can also go to the control authority when you consider it appropriate to file a claim (for example, in the country of your habitual residence, your place of work or in which you consider that the alleged infringement has occurred). For the appropriate purposes, ARPA informs you that in Spain, the Control Authority is the Spanish Data Protection Agency and you can exercise your rights through the forms that this entity provides for this purpose and that are available via its electronic headquarters.



In accordance with Article 10 of Law 34/2002, 11 July, on Information Company and Electronic Commerce Services, please be aware that the owner of this website is ARPA A&C, S.L., residing at Paseo Sarasate 5, 1º R, with TIN B31879117, registered in the Commercial Registry of Navarre in Volume 1203, Page 23, Sheet 24044.


For any issues, you can contact ARPA by phone (+34 948 210 112), fax (+34 948 210 163), e-mail ( or by sending your request to or using the contact form on the website.


ARPA provides certain information through this website about the professional services that they offer, as well as some notifications containing legal and tax information through records and noticed published on the website.

ARPA intends for said information to be of the highest quality, based on legal grounds and to be reasonably updated. However, the exact accuracy, exhaustiveness, relevance and/or currency of said information cannot be guaranteed, mainly due to the continuous changes to the legislature and jurisprudence.

Users must be aware that the content of said information has a general nature, and therefore it cannot replace legal assistance provided by professionals. Each case requires specific research and handling due to the different circumstances that may affect such case and therefore the legal answer may vary accordingly.

ARPA declines any liability that may arise out of losses and damages caused to the User or third parties due to the information offered on the website, including information that may encourage the User to take certain actions or decisions.

Suscríbete a nuestra newsletter

I have read and accept the Legal notice