In accordance with the principles of lawfulness, fairness and transparency, we make this Privacy Policy available to you.
1. Who is responsible for processing your data?
| Controller | Family Office, S.L. |
| Tax ID (NIF) | B85639417 |
| Registered address | Calle Ayala, 3, 28001, Madrid |
| Email address | ppdd@mabelcapital.com |
| Telephone | 917 629 297 |
| Data Protection Officer | ppdd@mabelcapital.com |
2. For what purposes do we process your personal data?
At Family Office, S.L., depending on the category of data subject concerned, we process the information you provide us for the following purposes:
| Data subjects | Purposes of processing |
|---|---|
| Prospective clients | To manage the potential commercial and/or professional relationship, to manage the sending of requested information and/or to resolve queries raised, to provide offers of our services and/or products of interest. |
| Clients | To manage the commercial and/or professional relationship, to provide offers of our services and/or products of interest. |
| Suppliers | To manage the commercial and/or professional relationship. |
| Candidates | To manage the personnel selection process. |
| Website users | To manage the analysis of your browsing data. |
3. What is the legal basis for processing your data?
The legal basis for processing your personal data, depending on the category of data subject concerned, may be:
| Data subjects | Legal basis – Article 6 GDPR |
|---|---|
| Prospective clients |
|
| Clients | Art. 6(1)(b) GDPR: performance of a contract to which the data subject is a party. |
| Suppliers | Art. 6(1)(b) GDPR: performance of a contract to which the data subject is a party. |
| Candidates | Art. 6(1)(a) GDPR: consent of the data subject. |
| Website users | Art. 6(1)(a) GDPR: consent of the data subject. |
The data we request from you is adequate, relevant and strictly necessary. You are under no obligation to provide it, but failure to do so may affect the purpose of the service or make it impossible to provide.
4. How long will we retain your personal data?
Your data will be retained for the minimum time necessary for the correct provision of the service offered, as well as to attend to any liabilities that may arise from it and any other legal requirement.
5. To which recipients will your data be disclosed?
Family Office, S.L. will not disclose your data to any third party unless expressly informed. We additionally inform you that certain data, by virtue of applicable regulations or the contractual relationship you maintain with Family Office, S.L., may be disclosed to:
>Banks and financial institutions for the collection of payment for contracted services and/or purchased products.
>Public authorities with jurisdiction over the sectors of activity of MABEL CAPITAL in any of its subsidiaries, where required by applicable regulations.
6. Are international data transfers carried out?
Family Office, S.L. may carry out international data transfers from this website as a result of the acceptance of cookies. Google LLC and Google Ireland Limited transfer data to the United States based on the user’s consent upon accepting cookies.
By accepting cookies from these entities, the user consents to their personal data, which may be collected through the loading and reading of cookies, being transferred to the United States — a country that provides a level of protection equivalent to that of Europe, but only for those US companies included in the EU-US data privacy list, known as the Data Privacy Framework (hereinafter, DPF).
Should the US companies not be adherent to the DPF, it will be understood that they do not guarantee a level of protection equivalent to that of Europe. Should the user not consent to this international transfer of data to the United States, they must decline these cookies, and the functionalities or services offered through them will neither be provided nor obtained.
You may find information on international data transfers carried out by the third parties identified in the cookie policy in their respective policies.
7. What are your rights when you provide us with your data?
The data protection rights that data subjects may exercise, where applicable, are:
| Right | What does it consist of? |
|---|---|
| Right of access | To consult what personal data the Data Controller processes. More information, here. |
| Right of rectification | To modify the personal data processed by the Data Controller when it is inaccurate, incorrect or incomplete. More information, here. |
| Right to object | To request that the Data Controller does not process your personal data for certain specific purposes. More information, here. |
| Right to erasure | To request that the Data Controller deletes your personal data. More information, here. |
| Right to restriction of processing | To request that the Data Controller restricts the processing of your personal data. More information, here. |
| Right to data portability | Where processing is carried out by automated means, to receive your personal data in a structured, commonly used, machine-readable and interoperable format, and to transmit it to another data controller. More information, here. |
| Right not to be subject to automated individual decisions | This right aims to ensure that you are not subject to a decision based solely on the processing of your data, including profiling, which produces legal effects on you or significantly affects you in a similar way. More information, here. |
| Right to lodge a complaint with the competent authority | To lodge a complaint against the Data Controller with the Spanish Data Protection Agency (AEPD) if the user considers that the entity has processed their personal data in breach of the regulations. |
The holders of the personal data obtained may exercise their data protection rights by sending a written communication to the registered address of Family Office, S.L. at Calle Ayala, 3, 28001, Madrid, or to the email address set up for this purpose: ppdd@mabelcapital.com.
You may use the following templates to exercise your rights:
>Access the template to exercise the right of access.
>Access the template to exercise the right of rectification.
>Access the template to exercise the right to erasure.
>Access the template to exercise the right to object.
>Access the template to exercise the right to restriction of processing.
>Access the template to exercise the right to data portability.
>Access the template to exercise the right not to be subject to automated individual decisions.
For more information on the exercise of rights, please visit the official website of the Spanish Data Protection Agency (AEPD) at the following link.
8. Can I withdraw my consent?
You have the possibility and the right to withdraw your consent for any specific purpose granted at any time, without this affecting the lawfulness of the processing based on the consent given prior to its withdrawal.
9. Where can I lodge a complaint if I consider that my data is not being processed correctly?
If any data subject considers that their data is not being processed correctly by Family Office, S.L., or that requests to exercise their rights have not been addressed satisfactorily, they may lodge a complaint with the relevant data protection authority. In Spain, the competent authority is the Spanish Data Protection Agency (AEPD). For more information, please visit their website at www.aepd.es.
10. Security and updating of your personal data.
With the aim of safeguarding the security of your personal data, we inform you that all necessary technical and organisational measures have been adopted to guarantee the security of the personal data provided. This is to prevent its alteration, loss and/or unauthorised processing or access, as required by regulations, although absolute security does not exist.
It is important that, in order for us to keep your personal data up to date, you inform us whenever any changes occur.
11. Confidentiality.
Family Office, S.L. informs you that your data will be treated with the utmost care and confidentiality by all staff involved in any phase of the processing. We will not transfer or disclose your data to any third party, except in cases provided for by law, or unless the data subject has expressly authorised us to do so.