Privacy policy

1. Data controller

DNPI CAPITAL, S.L., NIF B05326814

Paseo Colón 2, bajos, 08002 Barcelona, España

Data protection contact: dnpicapital@gmail.com

No data protection officer (DPO) has been appointed: the company’s activities do not fall within the cases in which article 37 GDPR makes such an appointment mandatory.

2. Data processed

When you submit the enquiry form we process:

— name

— email address

— phone (optional)

— strategy of interest, indicative budget and project horizon

— enquiry text

— site language and the page it was sent from

— consent record, date and time

— irreversible hash of the IP address (spam protection)

Do not include identity document, banking, health or other special category data in the form. It is not required and will be deleted.

3. Purposes

To review and handle your enquiry, respond to it and maintain the communication arising from your request.

To hold a preliminary discussion of possible cooperation at your initiative.

To protect the site against automated and repeated submissions.

4. Legal basis

Consent of the data subject — article 6(1)(a) GDPR (the consent checkbox in the form).

Pre-contractual measures taken at the data subject’s request — article 6(1)(b) GDPR.

Legitimate interest in site security — article 6(1)(f) GDPR (IP hashing for spam protection).

5. Retention period

Enquiry data is kept for up to 3 years from the last contact and is then deleted.

If you withdraw consent, the data is deleted unless retention is legally required.

6. Recipients and processors

Site hosting and storage of enquiries: Cloudflare, Inc., as a processor under article 28 GDPR.

Email: Google Ireland Limited (Gmail), as a processor for correspondence arising from your enquiry.

WhatsApp and Telegram, if you choose that channel; their processing is governed by their own policies.

Data is not sold or disclosed to third parties for advertising purposes.

7. International transfers

The providers named above may process data outside the European Economic Area.

Such transfers rely on standard contractual clauses approved by the European Commission and the other mechanisms set out in chapter V GDPR.

8. Your rights

You may exercise the following rights:

— access to your data

— rectification of inaccurate data

— erasure of your data

— restriction of processing

— objection to processing

— data portability

— withdrawal of consent at any time, without affecting the lawfulness of processing carried out before its withdrawal

To exercise them, write to dnpicapital@gmail.com stating your name and your request. We may ask you to verify your identity.

If you believe your rights have been infringed, you may lodge a complaint with the Spanish Data Protection Agency: Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es.

9. Security

Technical and organisational measures appropriate to the nature of the data processed are applied: transmission over a secure protocol, restricted access to the enquiry database, and storage of the IP address only as an irreversible hash.

No measure provides absolute security; in the event of a breach posing a risk to your rights, you will be notified under article 34 GDPR.

10. Minors

This site is not directed at persons under 18 and their data is not knowingly collected.

Enquiry statistics

To assess the form, the server records opening, completion of the first step, submission attempts, errors, closure and successful enquiry storage. Events contain a random form-opening identifier, the page without URL parameters, language, originating button and time. They do not include the name, email, phone number or message. After a successful submission, the identifier links events to the stored enquiry. No advertising cookies or third-party analytics services are used for this purpose.