Last updated: 16 October 2026.
1. Data controller
HELEN, S.L.U., N.R.T. L-710353-F, Principality of Andorra, is responsible for the processing of personal data described in this policy.
Registered address: Carretera de les Riberaigues, 16, C.R. Vila Park, Bloc B, 1R pis, Vila, AD200 Encamp, Andorra.
For data-related matters: elena@helenand.com.
Telephone: +376 374 535.
This policy covers visits to the HELEN website and initial enquiries through the form and the contact channels listed on the website. If you order services and provide additional documents, information about the relevant processing is provided separately before they are collected. This policy is not a contract for services.
2. What data is processed
When you contact us, we receive the name, contact details and message content that you provide. The website and its technical infrastructure may process the IP address, browser and device information, and the time and address of requests as needed to operate and protect the website. Cookie preferences and information about users’ choices are stored separately.
Required fields are marked in the form. The form cannot be sent without completing them. You are not legally required to send us an enquiry; you may use email or telephone instead. A general description of your situation is sufficient for an initial enquiry. Do not send passport copies, medical information, criminal record certificates or other documents through the open form until we have agreed on the need for them and how to send them.
3. How data is used
- To consider a request about our services, arrange a consultation and prepare a proposal: steps prior to entering into a contract, at your request.
- To respond to other business enquiries: the legitimate interest in communicating with people who contact us, taking account of their rights and reasonable expectations.
- To operate and secure the website and prevent misuse: the legitimate interest in protecting the website and its users.
- To handle data protection requests: compliance with obligations under applicable law.
- For optional cookie technologies, where used: separate consent in the settings panel. Details are provided in the Cookie Policy.
Sending an enquiry does not subscribe you to advertising mailings. The enquiry form does not make decisions with legal effects for users based solely on automated processing.
4. Data recipients
Access to enquiries is given to persons authorised by HELEN to handle them. Technical service providers are used to operate the website and deliver messages. Under the current configuration, form messages are sent to Google’s email service (Gmail).
A provider’s access to data is limited to the purpose of the relevant service; where a provider processes data on HELEN’s behalf, the relationship must meet the requirements applicable to that processing. Data may also be disclosed to competent authorities where there is a lawful basis.
5. International processing
Where technical service providers are located outside Andorra, we implement the data protection safeguards required by the applicable rules.
6. Retention periods
Correspondence relating to an initial enquiry is retained for the time needed to consider the matter and agree on a proposal. If cooperation continues, the necessary information becomes part of the processing carried out within the client relationship.
Once the purpose has ended, data is deleted or anonymised, except for information that must be retained to comply with specific legal obligations or deal with justified claims. Access is restricted for such retention, and the period is determined by the relevant obligation or the period needed to protect legal rights.
7. Your rights
Where provided by law, you may request access, rectification, erasure or restriction of processing, object to processing, and exercise the right to data portability. Where processing is based on consent, you may withdraw it; this does not affect the lawfulness of earlier processing.
Please contact elena@helenand.com and explain your request. Additional information to verify identity is requested only where there are reasonable doubts and only to the extent necessary. A response is provided without undue delay, within the statutory one-month period. If the law permits an extension because of the complexity or number of requests, you will be notified of the reasons within the first month.
You may lodge a complaint with the Agència Andorrana de Protecció de Dades (APDA).
8. Data security
HELEN applies technical and organisational measures proportionate to the nature of the processing and the associated risks. Absolute security of information systems is not guaranteed. This does not remove HELEN’s obligations to protect data and respond to incidents under applicable law.
9. Changes to this policy
The current version is published on this page with its update date. If the purposes or material conditions of processing change, users are informed as required by law; where new consent is necessary, it is requested separately.