1. Data Controller
- Company name: Informa Consulting, S.L.
- Tax ID (CIF): B-95.301.297
- Registered address: Calle Heros, nº 28, 48009 Bilbao, Spain
- Email: inversiones@informaconsulting.org
The Company is not required to appoint a Data Protection Officer (DPO) under Article 37 GDPR, as it does not carry out large-scale processing or processing of special categories of data. You may nonetheless exercise your rights by writing to the email address indicated above.
2. Purposes of processing and legal basis
Informa Consulting, S.L. processes your personal data for the following purposes:
a) Handling enquiries and business collaboration interest
Purpose: To manage communications received through the contact form or by email, and to assess potential investment or business collaboration opportunities.
Legal basis: Legitimate interest of the Company (Art. 6(1)(f) GDPR) and/or consent of the data subject (Art. 6(1)(a) GDPR).
Retention period: The time necessary to handle the enquiry and, where applicable, during the period in which the opportunity is being assessed. Maximum of 3 years from the last contact if no relationship is formalised.
b) Managing relationships with partners, collaborators and portfolio companies
Purpose: Administrative, tax and commercial management of contractual and corporate relationships.
Legal basis: Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR) and compliance with legal obligations (Art. 6(1)(c) GDPR).
Retention period: For the duration of the relationship and the applicable statutory limitation periods (generally 6 years for commercial obligations and 4 years for tax obligations).
c) Foundation (philanthropic activity, once operational)
Purpose: Management of donations, social projects and communications related to the foundation's activity.
Legal basis: Consent of the data subject (Art. 6(1)(a) GDPR) and, where applicable, compliance with legal obligations applicable to foundations.
Retention period: For as long as necessary for the activity and the applicable statutory retention periods.
3. Recipients of the data
As a general rule, Informa Consulting, S.L. does not disclose personal data to third parties, except in the following cases:
- Legal obligation: where required by law or by a judicial or administrative order.
- Service providers (data processors): companies providing technology support, web hosting, legal or accounting advisory services, with whom the corresponding data processing agreement is signed in accordance with Art. 28 GDPR.
No international data transfers are made outside the European Economic Area, except where necessary for the contracted service (e.g., cloud service providers), in which case the appropriate safeguards provided for under the GDPR will be adopted.
4. Rights of data subjects
You may exercise the following rights at any time by writing to inversiones@informaconsulting.org, providing proof of your identity. The exercise of these rights is free of charge. The Company will respond to your request within a maximum period of one month from receipt, which may be extended by a further two months in cases of particular complexity, with prior notice to the data subject (Art. 12 GDPR):
Obtain confirmation as to whether your data is being processed and, where applicable, access it.
Request correction of inaccurate or incomplete data.
Request deletion of your data when it is no longer necessary for the purposes for which it was collected.
Request restriction of processing in certain circumstances.
Object to processing on grounds relating to your particular situation, where the legal basis is legitimate interest.
Receive your data in a structured, commonly used format, where applicable.
You also have the right to withdraw your consent at any time where processing is based on it, without affecting the lawfulness of processing carried out prior to withdrawal.
You further have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that the processing of your data does not comply with applicable regulations.
5. Data security
Informa Consulting, S.L. has adopted the technical and organisational measures necessary to guarantee the security of personal data and to prevent its alteration, loss, unauthorised processing or access, taking into account the state of technology, the nature of the data stored and the risks to which it is exposed.
6. Changes to this privacy policy
The Company reserves the right to amend this Privacy Policy to adapt it to regulatory changes or changes in its activities. Any changes will be published on this same page, indicating the date of the update. Periodic review is recommended.