1. The controller of your personal data is Andea Corp. with its registered office in 3 Pointe Dr. Suite 317, BREA, CA 92821, United States, DUNS number: 06-673-0977, Company Registration Number: C3810676, (hereinafter referred to as: “Controller”).
  2. In all matters regarding your personal data you can contact us:
    1. by regular mail – to the Administrator’s registered office address indicated in para. 1 or
    2. by e-mail – to the e-mail address: rodo@andea.com.
  3. The Controller obtained your personal data from its contractor: Zen Leads Inc, 440 N Barranca Ave #4750 Covina, CA 91723.
  4. The Controller processes the following categories of your personal data:
    1. Identification data (including name, surname, position/function, employer data);
    2. Contact data (including telephone number, e-mail address).
  5. The Controller processes your personal data:
    1. for direct marketing of products and services (including by means of sending newsletters) -on the basis of our legitimate interest in the case where there is a business relationship between us, and if we are only about to establish such a relationship, then on the basis of your consent;
    2. for archiving to the extent necessary to comply with legal obligations, in particular tax regulations, accounting regulations – based on our legitimate interest as a personal data controller;
  6. The Controller may process (including, but not limited to, collecting, storing and transferring) your personal data by automated or paper-based means.
  7. We will process your personal data:
    1. for marketing purposes – (i) in case of marketing based on our legitimate interest – for the duration of our legitimate interest, i.e., the duration of the relationship that connects us or until you object, (ii) in cases that marketing is based on your consent – until consent is withdrawn;
    2. for archiving and backup purposes – for the period determined in accordance with the backup and archiving policy at Andea;
  8. Your personal data may only be disclosed:
    1. to third parties providing services to us that are needed to achieve the purposes in relation to which we process your data (e.g., IT services, recruitment, electronic communication, hosting, marketing);
    2. to entities from the Andea Group, in particular when they provide each other with services, or as part of the internal administrative purposes of the Andea Group (e.g., when this results from the organization of tasks within the Group); – An up-to-date list of companies belonging to Andea Group can be found here: https://www.andea.com/company/company-entities/
    3. to recipients to whom the disclosure is required by applicable law or order of a court or other authority;

    The Controller will exercise due diligence in the selection of third-party service providers to whom your data will be entrusted and will require that they use appropriate technical and organizational security measures.

  9. In connection with the processing of your personal data, you have the following rights:
    1. Right to obtain information
      At any time you may request information about your personal data that the Controller stores or has access to. You also have the right to verify the scope and accuracy of this data, to request that it be supplemented, updated, limited in processing, or deleted (subject, however, to the Controller’s data protection obligations and required data retention periods). You may additionally object to the processing of your personal data for legitimate interests, as long as this does not conflict with the Controller’s data protection and security obligations.
    2. Right of access to data
      You may at any time request information about your personal data that the Controller holds or has access to. However, your right to access your personal data may be subject to certain restrictions, particularly in the case of repeated requests at short intervals, or if accessing or correcting your data may result in an invasion of another person’s privacy or unwarranted disclosure of sensitive company data.
    3. Right to rectification and completion of personal data
      The Controller shall take reasonable steps to ensure that your personal data is correct, complete and up-to-date. If it becomes necessary to amend this data, please notify the Controller.
    4. Right to data portability
      To the extent that your data is processed by the Controller based on consent or under a contract, you have the right to receive your personal data that you have provided to the Controller in a structured, commonly used, machine-readable format, as well as to transmit such data to another entity that you designate.
    5. Right to erasure of data and to limit processing
      In the cases specified in the provisions of law, you have the right to request the erasure of your personal data (which applies in particular, but not exclusively, if you raise an objection to the processing of your personal data and the Controller does not have an overriding legitimate basis for the processing). This right will be exercised provided that other laws do not impose an obligation on the Controller to process the data, so in some cases the Controller will have a basis to refuse to delete your data. You may also request restriction of further data processing.
    6. Right to object to processing
      In the cases indicated in the provisions of law and depending on your individual situation, you may have the right to object to further processing of your data (including situations where the Controller processes your data based on a legitimate interest). In such situations, the Controller will not continue processing unless it demonstrates the existence of an overriding, valid legitimate basis for the processing or the data are necessary for the establishment, investigation or defence of claims.
    7. Right to lodge a complaint with a supervisor authority
      You have the right to lodge a complaint with the supervisory body dealing with the protection of personal data.
    8. Right to withdraw consent
      If your data is processed on the basis of your consent, you have the right to withdraw the aforementioned consent at any time, whereby withdrawal of consent will not affect the following

    For each of the rights mentioned above, you can contact Us in particular using the contact details.


We may collect and further process information that may be treated as personal information under the provisions of the California Consumer Privacy Act of 2018 (hereinafter: CCPA) as amended by the California Privacy Rights Act of 2020 (hereinafter: CPRA). This part relates to you, if you are a California resident.

Categories of data collected and disclosed, purpose of collecting data, categories and sources of data, recipients of data – these are described in other parts of this Privacy Statement. The description of your rights you can find below:

  1. Right to know. If you are a California resident, you have the right to request that we disclose to you specific details about your personal information that we have collected, used, disclosed, sold and/or shared over the past 12 months and/or a copy of your personal information. These details include: (1) the categories of personal information we have collected about you; (2) the categories of sources from which the personal information is collected; (3) the business or commercial purpose(s) for collecting, selling or sharing personal information; (4) the categories of third parties to whom we disclose personal information; and (5) if requested, the specific pieces of personal information we have collected about you.
  2. Right to correct. If you are a California resident, you have the right to request that we correct inaccuracies in your personal information.
  3. Right to delete. If you are a California resident, you have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions.
  4. The right to opt-out of automated decision making. California residents can say no to their personal data being used to make automated inferences, e.g., in profiling for targeted, behavioral advertisement online.
  5. The right to know about automated decision making. California residents can request access to and knowledge about how automated decision technologies work and what their probable outcomes are.
  6. The right to opt-out of the “sale” or “sharing” of your personal information to or with third parties. California residents can opt out of businesses sharing and selling their personal data specifically for behavioral advertisement, and not only of the sale of personal data.
  7. The rights of minors. For California residents the opt-in requirement for businesses when dealing with minors is extended to include the sharing of personal data for behavioral advertising.
  8. The right to limit use of sensitive personal information. California residents can make businesses restrict their use of this separate category of personal information, particularly around third-party sharing.

You can make a request to exercise your rights by emailing us at: rodo@andea.com. If we require additional information to process your request, we will contact you by email or mail.

You must provide us with the following information: (1) first and last name; (2) email address; and (3) zip code. We will take steps to verify your request by matching the information provided by you with the information we have in our records. In some cases, we may request additional information in order to verify your request or, where necessary, to process your request. If we are unable to adequately verify a request, we will notify the requestor.

Once we receive your request, we will acknowledge it and either respond in accordance with law, ask for additional information to verify your identity, clarify the nature of your request, let you know if we need more time, let you know if we need to charge a fee (such as if requests are manifestly unfounded or excessive, in particular because of their repetitive character, taking into account the administrative costs of providing the information or communication or taking the action requested), or we will inform you if we cannot fulfil any part of your request due to an exception under the law.

Time to respond
We will acknowledge your request to exercise your rights within 10 business days after receiving the request. Under California law, we have 45 days to respond to your inquiry and may add an additional 45 days depending on the complexity of your request.

We will not discriminate against a California resident for exercising any CCPA rights.

The use of authorised agents
The CCPA allows authorized agents to make requests on behalf of California residents to exercise their personal information rights. To exercise rights on behalf of a California resident, authorized agents must provide us with evidence they are authorized to make the request. To make an authorized request, please email us at privacy@godaddy.com.

Supervisory authority
California supervisory authority is California Privacy Protection Agency (CPPA). The California Privacy Protection Agency (CPPA) has full enforcement authority over the CCPA/CPRA regime, as well as authority to investigate potential breaches and violations, and to draft enforcement regulations.

Contact details
In all matters regarding your personal data, you can contact us:


Wednesday, December 20, 2023