Privacy policy
What data we use, why, on what legal basis and what your rights are. Written for the GDPR and Spanish law, which apply to visitors in the European Union, and for visitors in the United States.
Who we are
- Controller: ASISTTENTE LLC, operated by Adrian Ibarz Castan.
- Contact: info@asisttente.com, +34 660 83 53 93
- Scope: the company is based in the United States and the work is done from Spain. For residents of the European Union, the GDPR (art. 3.2) and Spanish law apply.
What data we use and why
- If you book a call: before the calendar, the booking page (or the video page, which has the same questions) asks for your name, your work email, your company name and website, how many vehicles you rent and from how many locations and, if you want to answer, what you use today to take bookings. Purpose: preparing the call. Your answers, together with where your visit came from (see Cookies and measurement), are emailed to ASISTTENTE as soon as you send the form, and a copy is kept on the web host. At that moment ASISTTENTE also gets a notice on its phone, by WhatsApp, with the same data: it is sent by a server run by ASISTTENTE through WhatsApp Business (Meta). To prevent abuse, the form counts submissions without storing your IP address.
- When the calendar opens (Calendly), right after you send the form: your name and email are passed to it so you don’t have to type them again, together with the campaign tags of your visit. If you pick a time, Calendly also has that time. Purpose: holding the call and preparing a proposal. Calendly acts as a processor with its own safeguards.
- When you pick a time: the calendar tells the page, and the page tells the website’s server, which checks with Calendly that the booking exists. Once that is checked, you get a confirmation email at the address you booked with, with the day, the time, the video-call link and what helps before the call, and ASISTTENTE gets a second WhatsApp notice with the day and time. That email is sent only once and doesn’t subscribe you to anything. The copy of your request notes that you have a time booked. If you pick a time outside this page (in the calendar opened in a new tab, for example), the website’s server sees it later in Calendly and does the same.
- If you don’t pick a time: half an hour after you send the form, the website’s server asks Calendly whether you have booked. If not, you get a single email with the link to the calendar and ASISTTENTE gets a notice (by WhatsApp or, if that fails, by email) that you don’t have a time yet. So it stays a single email, the server keeps a fingerprint of your address (not the address) for six months. During that day the server checks Calendly again, in case you book.
- Before the call: an hour before, you get a reminder with the video-call link and the link to change the time, at the address you booked with. Only if you answered the questions on this website, and only once.
- Advertising on Facebook and Instagram (Meta): only if you accept it in the cookie notice. Then the Meta pixel loads (see Cookies and measurement) and, when the website’s server accepts your answers to the booking form and when it confirms that you picked a time, it also reports those two events to Meta (this is Meta’s Conversions API), with the same ID as your browser, so they are not counted twice. They carry your email, encrypted (SHA-256), your IP address, your browser and the Meta cookies; none of that is stored on the web host. Purpose: knowing which ads bring requests and calls, and showing our ads to people who have visited the website. If you don’t accept advertising, nothing is sent to Meta.
- If you write or call: the data in your message. Purpose: replying and, where relevant, preparing a proposal.
- If you are a client: the contact and billing data needed to provide the service and meet tax and accounting obligations.
- If you receive business emails from ASISTTENTE you didn’t ask for: professional contact data (name, job title, company email, company) from public sources (company websites, business registers, professional networks). Purpose: offering, business to business, the booking and operations system for vehicle rental companies.
- Ad audiences: with that same professional contact data (company email and phone, name, company and its city), ASISTTENTE may create a custom audience on Meta to show its ads on Facebook and Instagram to those people. The data reaches Meta encrypted; Meta matches it against its accounts, deletes what doesn’t match and doesn’t use it for anything else. Today this is done only with contacts at companies in the United States. If you opt out, you are removed from the list and from the audiences, and you won’t be added again.
Legal basis
For visitors in the European Union:
- Steps before a contract, or a contract (art. 6.1.b GDPR), for calls (including the email to pick a time, the confirmation and the reminder), proposals and the service.
- Legal obligations (art. 6.1.c GDPR) for billing and tax records.
- Legitimate interest (art. 6.1.f GDPR) in business-to-business outreach, including ads to those contacts (custom audiences), on data published by the companies themselves, with the right to object at any time.
- Consent (art. 6.1.a GDPR) for measurement with Microsoft Clarity and for Meta advertising (the pixel and the events sent by the server), which you can withdraw at any time from the cookie notice.
How long we keep it
Contact data is kept while the relationship lasts or until you ask us to delete it. The copy of your answers to the booking form kept on the web host is deleted within 13 months. Billing data, for the periods required by tax and accounting law. Outreach data is removed from the active list as soon as you object and kept only on a suppression list so we don’t contact you again; Meta ad audiences are updated to remove you and deleted when the campaign ends.
Who receives it
We don’t sell personal data, and we only share it as described in this section or when the law requires it. We use providers that act as processors: web hosting (Hostinger), calendar (Calendly), email, a server run by ASISTTENTE (also hosted at Hostinger) and, for the internal notice of each request, WhatsApp Business (Meta). With advertising accepted, and for ad audiences, data goes to Meta Platforms (Meta Platforms Ireland Limited for the European Union), which is a joint controller with ASISTTENTE for collecting and sending the pixel data (art. 26 GDPR) and is responsible for what it does with it afterwards, under its own privacy policy. When a provider is outside the European Economic Area, the transfer relies on standard contractual clauses or an adequacy decision.
Cookies and measurement
This website uses first-party measurement: an anonymous visitor ID and where each visit came from (campaign UTM tags, landing page, referrer), stored in your browser. It tells us which channels bring visits. When you send the booking form, that origin goes with your answers, and its campaign tags go with your booking in the calendar, so we know which channel brought each call.
Language. When you arrive on the home page, the website looks at your browser’s language to open the version in your language. Your own browser decides: that data doesn’t leave it. If you choose a language in the selector, that choice is stored in your browser, to open that version next time.
On top of that, depending on what you choose in the cookie notice («Accept all», «Decline» or «Choose», which lets you accept one and not the other):
- Analytics: Microsoft Clarity (heatmaps and anonymous session recordings), which sets its own cookies (
_clck,_clsk) and handles data under its terms. Each recording is linked to the anonymous visitor ID, and what you type in the booking form is masked in the recording. - Advertising: the Meta pixel, which sets cookies on this domain (
_fbpand, if you came from a Meta ad,_fbc, for up to 90 days) and Meta’s own, and tells Meta which pages you visit, that you saw the home page or the video page and how much of the website’s videos you watched, that you sent the booking form and that you picked a time. Meta handles it under its privacy policy.
With «Decline» neither one loads, and neither does anything until you decide. Your choice is stored in your browser for six months; after that we ask again. You can change it at any time from «Cookie settings» at the bottom of every page: what you withdraw stops being measured right away. The website doesn’t respond to «Do Not Track» browser signals; instead, neither Microsoft Clarity nor the Meta pixel loads until you accept it in the cookie notice (the first-party measurement described above works regardless).
The Calendly calendar on the booking page and on the video page only loads after you send the form. It may use its own technical cookies, needed for it to work.
Hours calculator. The calculator (/hours-calculator/) carries none of this measurement, neither Clarity nor the Meta pixel. Your answers are stored only in your browser (localStorage, under the key asisttente-hours-v1), so they are still there if you come back: they are not sent to ASISTTENTE or anyone else, and the «Start over» button deletes them.
Home page window. On the home page a window with the button to book the call may appear once per visit. So it isn’t shown twice, your browser stores that it already appeared (sessionStorage, under the key as_salida) and deletes that when you close the tab.
Your rights
You can ask to access, correct, delete, restrict or port your data, or object to its use, by writing to info@asisttente.com. To stop receiving business emails and be removed from ad audiences, use the unsubscribe page (in Spanish) or write to baja@asisttente.com: whoever asks is removed from the list. If you are in the European Union and think the processing doesn’t comply with the law, you can complain to the Spanish Data Protection Agency (www.aepd.es).
For visitors in the United States. We don’t sell personal information. We use Meta’s advertising tools as described above: you can turn advertising off at any time from «Cookie settings», and ask to be removed from our ad audiences as described above.
Your customers’ data in our projects
When I set up the system for your company, we first sign a data processing agreement (art. 28 GDPR) that sets which data is processed, why, for how long and with which security measures.
Last updated: October 2026. Versión en castellano: Política de privacidad.