Privacy policy

Privacy Policy – Proyectos Mabasa Capital, S.L.U.

“Proyectos Mabasa Capital, S.L.U.” is deeply committed to complying with Spanish and European personal data protection regulations and guarantees full compliance with the obligations set forth, as well as the implementation of security measures established in the General Data Protection Regulation (GDPR) (EU) 2016/679, of April 27, and in the Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD and GDD, hereinafter LOPD).

In accordance with these regulations, we inform you that the use of our website may require providing certain personal data through contact forms or by sending emails, and that these will be processed by “Proyectos Mabasa Capital, S.L.U.”, the data controller, whose details are:

• Company Name: Proyectos Mabasa Capital S.L.U.
• CIF/NIF: B-76151133
• Registered Address: C/ Arinaga, 1 El Burrero - 35240 Ingenio
• Phone: 928503380
• Email: administración@mabasacapital.com

Collection and Processing of Personal Data

Personal data refers to any information related to an individual: name, email, address, phone number, NIF/NIE, etc. Additionally, when a user visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by their Internet service provider.

“Proyectos Mabasa Capital, S.L.U.”, as the data controller, has a duty to inform website users about the collection of personal data that may occur, whether through email or by completing the forms included on the website.

Only the data necessary to provide the requested service or to respond adequately to the information request made by the user will be collected. The data collected is identifying and corresponds to a reasonable minimum needed to carry out the activity. In particular, sensitive data is never collected. Under no circumstances will data be used for purposes other than those for which it was collected.

Contact Forms / Email

• Purpose: To respond to information requests submitted through our contact form(s).
• Data Sharing: Personal data will be processed through servers managed by Wpmudev, which will act as Data Processor.

Minors

Only individuals over 14 years old may provide personal data on this website. According to the LOPD and GDD, in the case of minors under 14, parental or guardian consent is required for us to process their personal data.

Additionally, only individuals over 18 may contract our services. For minors under 18, parental or legal guardian consent is mandatory for us to provide the offered services, unless the minor is legally emancipated.

Security Measures

Website users of “Proyectos Mabasa Capital, S.L.U.” are informed that technical and organizational security measures have been adopted to prevent loss, misuse, alteration, unauthorized access, and theft of data, ensuring the confidentiality, integrity, and quality of the information collected, in accordance with applicable data protection regulations. Personal data collected through forms is processed solely by “Proyectos Mabasa Capital, S.L.U.” personnel or designated Data Processors.

The website of “Proyectos Mabasa Capital, S.L.U.” also uses SSL encryption, allowing users to securely send personal data via contact or registration forms.

Accuracy of Data

Users declare that all data provided is true and correct and agree to keep it updated. Users are responsible for the accuracy of their data and are solely responsible for any conflicts or disputes arising from false information. To maintain updated personal data, users must inform “Proyectos Mabasa Capital, S.L.U.” of any modifications.

Data Sharing

“Proyectos Mabasa Capital, S.L.U.” will not share or communicate your data to any third party, except as legally required or when strictly necessary for the provision of a service. Specifically, data may be shared with:

• Technology or IT service providers
• Payment service providers
• Courier and parcel companies
• Third-party service providers operating on our behalf (accounting, consulting, etc.)

Data sharing will respect strict confidentiality, using necessary measures such as signing confidentiality agreements or adherence to the privacy policies of the respective providers. Users may object to the sharing of their data with Data Processors by written request using any of the contact methods mentioned above.

Additionally, when necessary, client data may be shared with certain authorities in compliance with legal obligations, such as the Spanish Tax Agency or Labor Inspection.

User Rights

The LOPD and GDPR grant data subjects the right to exercise various rights regarding the processing of their personal data. Users must submit a request with proof of identity (ID or passport) via email to administración@mabasacapital.com, or by written communication to the address listed in our Legal Notice. The request must include: user’s full name, purpose of the request, address, and supporting documentation.

Rights may be exercised by the user personally or by an authorized representative with documentation proving such representation.

Users may exercise the following rights:

1. Right of Access: Obtain information on whether their personal data is being processed, the purpose of processing, source of data, and communications made or planned.
2. Right to Rectification or Erasure: Correct inaccurate or incomplete data or request deletion of data that is inadequate or excessive.
3. Right to Restrict Processing: Data will only be kept to the extent necessary to exercise or defend claims.
4. Right to Object: Object to processing where consent is not required, for commercial prospecting, or for automated decision-making, except for legitimate interests or legal claims.
5. Right to Data Portability: Request data to be transferred to another company in an exportable format.

Where consent has been given for a specific purpose, users may withdraw consent at any time without affecting the lawfulness of processing based on prior consent.

We commit to executing all rights within the legal maximum period (1 month).

Users who believe there is an issue with how “Proyectos Mabasa Capital, S.L.U.” handles their data may contact the security officer or the relevant data protection authority, which in Spain is the Spanish Data Protection Agency.

Data Retention

Personal data of users submitting a contact form or email request will be retained only as long as necessary to address the request or until consent is revoked.

Client personal data will be retained until the contractual relationship ends. Retention periods are:

• 4 years: Social Security and labor obligations; Arts. 66+ of the General Tax Law (accounting records)
• 5 years: Art. 1964 Civil Code (personal actions without special term)
• 6 years: Art. 30 Commercial Code (accounting books, invoices)
• 10 years: Art. 25 Anti-Money Laundering and Counter-Terrorism Financing Law
• No term: aggregated and anonymized data

Social Media

“Proyectos Mabasa Capital, S.L.U.” has profiles on major social media platforms (Facebook, Instagram, LinkedIn). Data processing aims to inform followers about activities and provide personalized user support. Users must comply with the platforms’ terms and privacy policies. “Proyectos Mabasa Capital, S.L.U.” does not extract data from social networks unless express consent is given and is not responsible for the privacy practices of these platforms.

Confidentiality

All information provided by users is considered confidential and will not be used for purposes other than those described. “Proyectos Mabasa Capital, S.L.U.” will not disclose information regarding the user’s intentions, requested advice, or duration of the relationship.

Validity

This privacy and data protection policy is drafted as of March 5, 2026. It may change depending on regulatory and jurisprudence updates. It is the responsibility of data subjects to consult the most recent version to know their rights and obligations.