1. Who is responsible for your data

GRMS Associates S.L. (Alisios Corporation)

• Tax ID (NIF): B16846321
• Address: Avenida del Sur 2, Portal 2, Office 1 B, 18014 Granada, Spain
• E-mail: admin@alisioscorporation.com

This policy explains how we process personal data under the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Spanish Organic Law 3/2018 (LOPDGDD).

2. What we process, why, on what basis, and for how long

Contact form and e-mails

• Data: name, e-mail address, organisation and your message.
• Purpose: to answer you and, where relevant, to prepare or carry out an agreement with you.
• Legal basis: steps taken at your request before entering into a contract, or our legitimate interest in answering enquiries (GDPR Art. 6(1)(b) and (f)).
• Retention: for as long as needed to deal with your enquiry. If a business relationship follows, for the duration of that relationship and the legal limitation periods afterwards.

Bulletins (Sibila® ClimateBeat, MarketBeat)

• Data: your e-mail address (and name, if you give it).
• Purpose: sending the bulletins you subscribe to.
• Legal basis: your consent, confirmed by e-mail (double opt-in) (Art. 6(1)(a)).
• Retention: until you unsubscribe; every bulletin includes an unsubscribe link.
• Your choice: you can withdraw your consent at any time. This does not affect the lawfulness of what was done before.

Visits to this website

• Data: like any web server, ours records technical data about each request: IP address, date and time, page requested, browser type and referring page.
• Purpose: to operate the website, keep it secure and detect misuse.
• Legal basis: our legitimate interest (Art. 6(1)(f)).
• Retention: for a limited period, as part of routine server log rotation.

Website statistics (only if you accept statistics cookies)

• Data: pages visited, approximate location (country, city), device and browser, collected through Google Analytics cookies.
• Purpose: to understand how the website is used and where our visitors come from.
• Legal basis: your consent (Art. 6(1)(a)). You can withdraw it at any time with the “Manage consent” button.
• Retention: the cookies last up to 400 days; the data in Google Analytics are kept for the retention period set in our account.

Visits to our Sibila Room sites

• Data: our Sibila Room sites (for example the public ENSO-XTI and ClimateBeat rooms) keep a record of each visit, such as the IP address, approximate location, pages viewed, browser and referring page.
• Purpose: to produce usage statistics and keep the service secure. These records are not used to identify visitors or for advertising.
• Legal basis: our legitimate interest (Art. 6(1)(f)).
• Retention: while they are needed for usage statistics and service security; we review this need at least once a year.
• More detail: write to admin@alisioscorporation.com.

Client access to Sibila Rooms

• Data: for clients with a licensed Sibila Room, the user name and session data needed to log in, plus a record of access.
• Purpose: to provide the service and keep it secure.
• Legal basis: the contract with your organisation (Art. 6(1)(b)) and our legitimate interest in security (Art. 6(1)(f)).
• Retention: for the duration of the contract and the legal limitation periods afterwards.

Protection against spam and abuse

• What we use: forms on this website are protected by Cloudflare Turnstile, and the bulletin sign-up form by hCaptcha.
• Data: these services process your IP address and technical browser data to tell people from automated programs.
• Legal basis: our legitimate interest in security (Art. 6(1)(f)).

Cookies

See our Cookie Policy. Statistics cookies and embedded content (videos, maps) are only loaded with your consent.

3. Who receives your data

We do not sell personal data.

Service providers that process data on our behalf, under data-processing agreements:

• Amazon Web Services: hosting in Paris, EU, and sending bulletins (Amazon SES);
• Google Workspace: e-mail;
• Cloudflare: Turnstile;
• Intuition Machines: hCaptcha;
• Google: Google Analytics, only with your consent.

Content you choose to load:

• If you consent to it or load it yourself, embedded content is provided by its owners: YouTube videos and Google Maps (Google) and interactive maps (Mapbox). Those providers receive your IP address.

Public authorities: where the law requires it.

4. Transfers outside the European Economic Area

Some of the providers above are based in the United States and may process data there (Google, Cloudflare, Intuition Machines, Mapbox and, where applicable, Amazon). All of them are certified under the EU–US Data Privacy Framework, which the European Commission recognises as providing adequate protection (Decision of 10 July 2023).

5. Automated decisions

We do not make decisions about you based solely on automated processing, nor do we create profiles.

6. Your rights

You can ask us for access to your personal data, and for rectification or erasure. You can also ask us to restrict processing, object to it, or receive your data in a portable format. Where processing is based on consent, you can withdraw consent at any time.

Write to admin@alisioscorporation.com. We may ask you to confirm your identity.

If you believe we have not handled your data properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

7. Security

We apply technical and organisational measures appropriate to the risk, such as encrypted connections, access control and backups, to protect personal data against loss, misuse and unauthorised access.

8. Changes

We will update this policy when our processing or the law changes. The version published here is the one in force.

Last updated: October 2026.