Privacy Policy

Data Controller

RINDOGATAN SL, located in Madrid, Spain, is the data controller responsible for your personal data. You can contact our Data Protection Officer at info@rindogatan.com.

Information We Collect

When you contact us, request a briefing, or ask for a piece of our research, we collect only the information you choose to provide, typically your name, work email address, company, and role. We do not use cookies or similar tracking technologies. Any analytics we run are cookieless, IP-less, and aggregated, and store nothing on your device.

Purposes of the Processing

We are not fond of polluting our systems with your personal information, so we only collect it for very specific purposes:

• To respond to your enquiry and arrange a briefing or working session.
• To send you the research, studies, or materials you have requested.
• To keep you informed about our research and services where you have asked us to.
• To understand, in aggregate, how our pages are used, cookielessly, without cookies or device identifiers, and without identifying you.

Lawful Bases for Processing

We process your personal data under the following lawful bases as defined by the GDPR:

• Consent (Art. 6(1)(a)): Where you ask us to send you research or to contact you about our services, we rely on your consent, which you may withdraw at any time without affecting the lawfulness of prior processing.
• Legitimate Interest (Art. 6(1)(f)): We rely on this basis to respond to enquiries you initiate and to run a statistical analysis of traffic to our pages, cookieless, IP-less, aggregated, and storing nothing on your devices.
• Steps Prior to a Contract (Art. 6(1)(b)): Where you ask us to scope or begin an engagement, we process your details to take those pre-contractual steps.

Data Retention

We retain your personal data for a maximum of 6 months from the date of collection. If you become a client, we will update our retention period in accordance with our contractual obligations and applicable law.

Data Processors and Transfers to Third Parties

To run this website and respond to you, we rely on a small number of processors, each engaged under a GDPR-compliant data-processing agreement:

• Vercel, website hosting and delivery.
• Email & CRM tools, the systems we use to reply to you and manage enquiries.

Personal data processed as part of a client engagement, rather than through this website, is governed by the relevant services agreement and its data-processing terms, not this policy. For sovereign, self-hosted deployments we deliver on European infrastructure, and personal data is not sent to third parties.

International Transfers

We prefer EU-resident processing and use European regions wherever available. Where data is transferred to and processed in the United States by RINDOGATAN LLC, such transfers are conducted in compliance with GDPR requirements, including the use of appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.

Your EU Data Protection Rights

Under the GDPR, you have the following rights:

• Right of Access (Art. 15): You may request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16): You may request correction of inaccurate or incomplete personal data.
• Right to Erasure (Art. 17): You may request deletion of your personal data, subject to certain legal exceptions.
• Right to Restrict Processing (Art. 18): You may request that we limit the processing of your personal data.
• Right to Data Portability (Art. 20): You may request to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21): You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

Supervisory Authority

You have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD) or your local supervisory authority if you believe your data protection rights have been violated. Visit aepd.es for more information.

Exercise Your Rights

To exercise any of your data protection rights, please contact our Data Protection Officer at info@rindogatan.com.