ES • EN • EUS • FR

A/ Privacy policy


Identity: ARPA A&C, S.L. (hereinafter, ARPA).

Postal address: Paseo Sarasate 5, 1º dcha., 31002 Pamplona (Navarra).

Telephone: 948 210 112.


Contact of the Data Protection Officer:



Please find information below about the data processing covered in this policy, indicating the legal basis of the General Data Protection Act (hereinafter, GDPR) and the specific data conservation period, to which the time necessary to comply with legal obligations and address any liabilities that may arise from fulfilling the purpose for which the data was collected must be added:



Legal basis of art.6 GDPR

Conservation time

Requests for information or consultation. Claims

Respond to requests for information, queries or claims that you send, with the management and scope that is required. Prepare proposals for services and/or collaboration.

6.1.a) GDPR. The interested party has provided consent for the processing.

6.1.b) GDPR. The processing is necessary for the application at the request of the interested party for pre-contractual measures.

For the time necessary to attend to and manage your request and/or claim.

Service provision

Manage and process the services that have been contracted with ARPA.


Compliance with the fiscal, administrative and legal obligations derived from it, including charging for the work and services provided.


6.1.b) GDPR. The processing is necessary to formalise an agreement in which the interested party is a party.

6.1.c) GDPR. Compliance with a legal obligation: commercial, tax, money laundering regulations.

For as long as the relationship is in force and/or the service is provided.

Newsletter and commercial communications

When you subscribe to the ARPA newsletter or provide your consent, you will be kept informed of the activity of ARPA and the organisations Fundación ARPA and ARPA Accounting S.L., including activities, articles of interest and general information, offers, promotions and articles or content about their services via email, including monitoring whether or not they have been opened. 

6.1.a) GDPR. The interested party has provided consent for the processing.


Until you oppose to the treatment.

HR: Candidates database and selection processes

ARPA manages a candidates database and, in this sense, when you register for a job offer and/or send your CV, your data will be processed to cover possible vacancies, collaborations, work practices or scholarships.

When it is a specific application, your application will be analysed and, where appropriate, ARPA will contact you.

6.1.a) GDPR. The interested party has provided consent for the processing.


6.1.b) GDPR. The processing is necessary for the application at the request of the interested party for pre-contractual measures.

During the selection process in case of specific applications and for two years once your CV has been included in our candidates database.

Training activities and events

Your registration and/or participation in the event or in the training activity in which you have registered will be processed and you will receive information related to the event/activity (materials, assessment surveys, notifications or notices about changes, etc.). In relation to the training actions organised or in which ARPA participates, your data will also be used to send you an opinion query/satisfaction survey about the event/activity.

6.1.b) GDPR. The processing is necessary to formalise an agreement in which the interested party is a party.


6.1.a) GDPR. The interested party has provided consent for the processing.

For the time necessary to manage the registration and hold the event.

Representatives/natural persons who provide their services to a legal entity: If you represent a legal entity

The data will be processed for the normal management of the relationship with the legal entity.

6.1.f) GDPR. Legitimate interest; on the basis of article 19 LOPDGDD.

As long as the relationship between the parties is in force.

Cookies: If you agreed to receive cookies on your first visit to this website, the cookie policy shall apply to you and the data obtained while browsing will be used for the purposes indicated in the cookies policy that you can consult here.


If your authorisation is requested at any time to process your data for a purpose that requires consent, not granting it (or subsequently withdrawing consent) will have no consequences for you in any case. Nor will opposing the processing of your data for purposes based on legitimate interest.

Some data collection forms include fields marked as required (identified with an asterisk), while the others are completely voluntary. Thus, not completing voluntary fields will have no consequence and can be completed only if you are interested to do so.



1.3.1.- Personal data collected.

Identification and contact data will be collected through the forms enabled on the ARPA website, such as name, surname, email, telephone, etc. Additional information can be sent in a specific form (e.g. reason for the query or curriculum vitae in the employment form). Finally, depending on your cookie preferences, the configuration of your device when accessing the website or the communications that ARPA sends to you, your browsing and whether or not you have opened commercial communications could be monitored.

1.3.2.- Guarantees and responsibility for the data.

The owner of the data guarantees that the data provided through the forms enabled for this purpose or through other communication methods are true, accurate and up-to-date. If the personal data provided to ARPA is from a third party other than the person who sends it, the latter guarantees that the third party has been clearly informed about the data processing that will be carried out and that the holder understands this and has provided consent (informed and free) in order to communicate this data to ARPA.



In general, except where there is a legal obligation to do so, your data will not be communicated or transferred to any third party without previously obtaining your express consent. In any case, some communications and/or data transfers to third parties may be imposed by certain regulations or to meet the obligations with Public Administrations where so required pursuant to current legislation at any time. Other communications will be a necessary consequence of the service provision, in which case, ARPA undertakes to formalise the mandatory processing order agreement imposed by current legislation with these third parties when it is mandatory to do so.

If your personal data had to be communicated to organisations located outside the European Economic Area (EEA), you will be previously informed of these data transfers and ARPA promises to always do so with your consent, signing the type of data protection conditions with these third parties that are approved by the European Commission or, if any, by the legitimising basis that allows these transfers to be made in a lawful manner. ARPA also undertakes to adopt all existing guarantees pursuant to data protection regulations to guarantee the privacy and security of your data.

ARPA uses the newsletter delivery and management service offered by Mailchimp (The Rocket Science Group), which involves international data transfer to the USA. Such transfer is preceded by the formalisation of the corresponding standard contractual conditions.  We also use a web analytics service called “Google Analytics” provided by Google (Google Ireland Limited) which, according to the provider’s terms and conditions, involves international data transfers outside the EU economic area, and according to the provider’s statement, complies with the applicable legal framework through the standard contractual clauses established by the European Commission.


1.5.- RIGHTS

Regarding the personal data collected for processing, you may exercise your rights to access, modify or delete your data and to portability. In certain circumstances, you will also have the right to request limitation or opposition to data processing, in which case, ARPA will cease processing it and will only keep it if there is any regulatory obligation by which it is required to do so or until the time limit of the actions that could concur have transpired.

ARPA will be happy to attend to any queries or claims you may have regarding data protection. In this sense, you can address a claim or exercise your rights through any of the contact channels indicated hereinabove. You can also go to the control authority when you consider it appropriate to file a claim (for example, in the country of your habitual residence, your place of work or in which you consider that the alleged infringement has occurred). For the appropriate purposes, ARPA informs you that in Spain, the Control Authority is the Spanish Data Protection Agency and you can exercise your rights through the forms that this entity provides for this purpose and that are available via its electronic headquarters.




In accordance with Article 10 of Law 34/2002, 11 July, on Information Company and Electronic Commerce Services, please be aware that the owner of this website is ARPA A&C, S.L., residing at Paseo Sarasate 5, 1º R, with TIN B31879117, registered in the Commercial Registry of Navarre in Volume 1203, Page 23, Sheet 24044.



For any issues, you can contact ARPA A&C, S.L. by phone (+34 948 210 112), fax (+34 948 210 163), e-mail ( or by sending your request to or using the contact form on the website.



According to the provisions of Organic Law 15/1999, of 13 December, on Personal Data Protection, please note that all the data submitted through the application forms on this website shall be included for processing into a file owned by ARPA A&C, S.L. called “Clients and/or Suppliers” located at Paseo Sarasate 5, 1º Dcha, Pamplona in order to manage the requests submitted by users, as well as for advertisement, for which the user gives its express consent to receive advertisements electronically for products and services that the company owning the file may offer, in addition to the data provided that is granted to Arpa Accounting S.L., which is dedicated to providing consultancy and legal assistance services for advertising purposes, also authorising their reception via electronic means.

In accordance with the provisions set forth in Article 5 of Organic Law 15/1999, you are hereby notified that for the personal data collected for handling, you have the possibility of exercising your rights of access, rectification, cancellation and opposition, by sending a request in writing to the holder of the file at the aforementioned address under the terms set forth in the current legislation.



ARPA A&C, S.L. provides certain information through this website about the professional services that they offer, as well as some notifications containing legal and tax information through records and noticed published on the website.

ARPA A&C, S.L. intends for said information to be of the highest quality, based on legal grounds and to be reasonably updated. However, the exact accuracy, exhaustiveness, relevance and/or currency of said information cannot be guaranteed, mainly due to the continuous changes to the legislature and jurisprudence.

Users must be aware that the content of said information has a general nature, and therefore it cannot replace legal assistance provided by professionals. Each case requires specific research and handling due to the different circumstances that may affect such case and therefore the legal answer may vary accordingly.

ARPA A&C, S.L. declines any liability that may arise out of losses and damages caused to the User or third parties due to the information offered on the website, including information that may encourage the User to take certain actions or decisions.

Suscríbete a nuestra newsletter

I have read and accept the Legal notice