Privacy Policy
This Privacy Policy explains how personal data collected through this website is processed, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD).
Data controller
- Controller
- Martin Schwab (Crown & Core - Strategic IT Advisory)
- NIF
- Y9685944Z
- NIF-IVA
- ESY9685944Z
- Address
- Paseo de los Parques 7, 28109 Alcobendas (Madrid), Spain
- info@crownandcoreadvisory.com
- Phone
- +34 608 578 461
What data we collect
- Contact form: your name, email address, company or organisation (optional) and the content of your message. A hashed, short-lived record of your IP address is also kept briefly for spam prevention - see below.
- Analytics (only with your consent): aggregated, anonymised usage data via Google Analytics - see our Cookie Policy.
Purpose and legal basis
- To answer your enquiry and, where relevant, take pre-contractual steps at your request - legal basis: your consent and pre-contractual measures (Art. 6(1)(a) and (b) GDPR).
- To measure and improve the website - legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
- To prevent spam and abuse of the contact form - legal basis: legitimate interest (Art. 6(1)(f) GDPR).
How the contact form works
The contact form is submitted directly to our server, which relays it to us by email. We do not store the content of your message. To prevent spam and abuse, we briefly keep a hashed record of your IP address and the time of submission - this technical record is automatically discarded after 15 minutes and is never linked back to your message.
Sharing and international transfers
We do not sell your personal data. This website uses Google Analytics 4, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics is only loaded after you give your consent to analytics cookies - see our Cookie Policy. Google Analytics may transfer data to Google servers in the United States and other countries outside the European Economic Area. Google Ireland Limited relies on the European Commission's Standard Contractual Clauses and, where applicable, on Google's certification under the EU-U.S. Data Privacy Framework, as the legal safeguards for these transfers. Further information is available in Google's Privacy Policy (policies.google.com/privacy). We do not otherwise disclose your data unless required by law.
Retention
Enquiries that do not lead to a client engagement are kept for a maximum of 12 months from your last contact, then deleted.
Data linked to a client engagement is kept for the duration of that engagement and, afterwards, for 6 years from the last invoice or accounting entry, in line with the record-keeping duty for commercial and accounting documentation under Article 30 of the Spanish Commercial Code (Código de Comercio) and applicable Spanish tax law.
Data may be kept for longer where necessary to comply with a legal obligation or to establish, exercise or defend legal claims, within the applicable statute-of-limitations periods.
Automated decision-making
Crown & Core does not carry out automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.
Your rights
Where any processing is based on your consent, you may withdraw it at any time - as easily as you gave it - without affecting the lawfulness of processing carried out before the withdrawal. You can withdraw consent for analytics cookies at any time via the "Cookie Settings" link in the footer of this website, and for any other consent-based processing by writing to info@crownandcoreadvisory.com.
You may exercise your rights of access, rectification, erasure, restriction, objection and data portability by writing to info@crownandcoreadvisory.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).