Privacy Policy
Basic information
Data Controller:
MENDESALTAREN, S.L. (hereinafter, Mendesaltaren)
B87818712
Calle Hermanos Álvarez Quintero, nº 2, Semisótano A, 28004. Madrid.
hello@mendesaltaren.com
Data Protection Officer: legal@mendesaltaren.com
Data Processing Purposes:
- Manage and maintain the commercial relationship.
- Respond to requests for information.
- Manage personnel selection processes.
- Sending own or third party commercial communications, always through Mendesaltaren.
- Manage the user's data in case he/she has accessed through RRSS.
Retention periods: The data will be kept as long as the contractual relationship is maintained, as long as the deletion is not requested by the interested party, or they should not be deleted because they are necessary for the fulfillment of a legal obligation or for the formulation, exercise and defense of claims.
Origin:
- Facilitated by the user himself.
Lawful Basis:
- The execution of the contract with the user.
- Mendesaltaren's legal obligations.
- Mendesaltaren's legitimate interest.
- The user's consent.
Recipients of transfers:
All are necessary for the fulfillment of the aforementioned purposes, or are carried out in compliance with a legal obligation. Public administrations, suppliers for the provision of the requested services, companies and collaborating entities.
At Mendesaltaren, we are committed to protecting your personal data and respecting your privacy. The purpose of this Privacy Policy is to inform you, in a clear and simple manner, about how and for what purpose we process your personal data, as well as your rights under current data protection regulations, in particular the General Data Protection Regulation (GDPR).
Who is the data controller?
MENDESALTAREN, S.L. (“Mendesaltaren”, “the Company” or “we”) is a company lawfully incorporated under Spanish laws with headquarters located at Calle Hermanos Álvarez Quintero, nº 2, Semisótano A, 28004. Madrid, Spain and its spanish tax identification number is B87818712. At Mendesaltaren, we are committed to the fundamental right to the protection of your personal data, and this privacy policy is intended to inform you of your rights under the General Data Protection Regulation ("GDPR").
We inform you that Mendesaltaren has appointed a Data Protection Officer in accordance with the GDPR and the spanish local data protection regulations, who is at your disposal for any questions or queries regarding the processing of your data, and who you can contact sending an email to legal@mendesaltaren.com.
What information do we process?
The data you provide us directly:
We collect information about you when you contact us through the channels provided for this purpose, such as the contact forms to contact us or join Mendesaltaren.
When you contact us through these channels, we will ask for your first and last names, email address, professional details, telephone number and company name.
All fields marked with an asterisk (*) on the forms provided to you through these channels are mandatory, and failure to complete any of them may make it impossible for us to provide you with the requested services. You must provide truthful information, and identity theft or the use of aliases or anonymous names is prohibited.
When providing any data that may be requested on the channels, you may not choose offensive expressions, coinciding with trademarks, trade names, names or pseudonyms of public figures or celebrities for which you are not authorised to use.
In order to ensure that the information provided is always up to date and free of errors, you must notify Mendesaltaren as soon as possible of any changes to your personal data.
Likewise, by clicking on the "Send" button (or equivalent) included in the aforementioned forms, you declare that the information and data you have provided therein are accurate and truthful.
Data obtained indirectly:
We may obtain certain identifiers about you (device data, browsing habits, IP address, and unique identifiers) through cookies and similar technologies. Find more information in our Cookies Policy.
What is the origin of the data?
We consider that all data processed by Mendesaltaren has been freely provided by you.
If the personal data provided belongs to a third party, you guarantee that you have informed them of this Privacy Policy and have obtained their authorisation to provide the data to Mendesaltaren for the purposes indicated above. Likewise, you guarantee that the data provided is accurate and up to date, and you are responsible for any direct or indirect damage or harm that may arise as a result of a breach of this obligation.
We may be actively seeking personnel to join our teams, either as employees or collaborators. In such cases, we may have obtained your details from professional social networks (e.g. LinkedIn) or from agencies specialising in talent recruitment.
For what purpose and on what legal basis do we process the data?
Mendesaltaren acts as the data controller for the following purposes and in accordance with the following legal bases:
Based on the performance of a contract, or measures needed before entering into a contract:
- To provide you with the services you have requested and respond to your requests for information, as well as to facilitate the exercise of your rights.
- To evaluate the applications CVs received and manage recruitment or procuring processes.
Based on our compliance with legal obligations
- To enable users to exercise their rights.
- To comply with the regulations applicable to Mendesaltaren, including valid requests issued by competent law enforcement agencies, public administrations or regulators.
Based on the explicit, free and unequivocal consent that you give us, where applicable, at the time of collecting your data:
- Where applicable, to send you more information from Mendesaltaren about our success stories, use cases, products, services, or events (a few emails but... valuable ones!)
- Where applicable, to analyse the browsing habits of users of our website through cookies and other similar technologies. You can find more information in our Cookies Policy.
- Retain your professional details, applications, and CV for as long as you authorise us to do so.
Based on the existence of a legitimate interest on the part of Mendesaltaren
- To keep you informed about Mendesaltaren products and services related to those previously contracted and which may be of interest to you.
- To carry out periodic reviews of our services and conduct satisfaction surveys for the purpose of evaluating and improving the quality of the service we provide.
- To carry out internal reviews and, where appropriate, contact you in the event that possible fraud or identity theft is detected or there are reasonable grounds for suspicion.
- To ensure the security of our website and the browsing experience of other users. To this end, we may use cookies or similar technologies, provided that they strictly serve this purpose.
- Contact you if we continue to keep your application on file for other positions in case a vacancy arises that may match your profile.
However, if you do not want your data to be processed for these purposes, you can object at any time by contacting us at legal@mendesaltaren.com and as indicated in the Exercise of Rights section of this Privacy Policy.
Who is the data communicated to?
All transfers of personal data that we carry out are necessary for the fulfilment of the purposes indicated, or are carried out to comply with a legal obligation:
- To public administrations and the administration of justice, and to law enforcement agencies in compliance with the legal obligations that apply to us.
- Companies providing IT services, tools or IT infrastructure on which Mendesaltaren services are based, such as hosting providers, CRMs, emailing service companies, etc.
- To financial services providers (payment or banking institutions), if needed to process payments from our customers or partners.
- To our external auditors and legal advisers, should this be necessary for the management of all corporate documentation, the preparation of documentation required by current legislation, or to defend ourselves or take legal action.
- If we have used headhunting companies to contact you in a possible selection process, we may communicate data relating to these companies to notify them of the status of our selection processes in which you are participating.
In this regard, we inform you that any transfer that takes place will be carried out taking into account all the necessary legal safeguards. Likewise, we guarantee that we sign specific contracts with all our service providers in accordance with the regulations.
Similarly, Mendesaltaren guarantees that if any of these third party providers is located in countries outside the European Economic Area or others not considered adequate in accordance with data protection regulations and the adequacy decissions issued by the European Commission, the necessary precautions will be taken to ensure that the data can be transferred securely, either because the provider offers adequate guarantees, through, among other things, the signing of the European Commission's Standard Contractual Clauses, or because one of the exceptions set out in the regulations is met (e.g.: compliance with a legal obligation, explicit consent or needed to perform a specific contract).
Your rights under data protection regulations
We inform you that you may exercise the following rights:
- Right of access to your personal data to find out which data is being processed and the processing operations carried out on it.
- Right to rectify any inaccurate personal data.
- Right to erasure of your personal data, where possible.
- Right to request the restriction of the processing of your personal data when the accuracy, legality or necessity of the data processing is doubtful, in which case we may retain the data for the exercise or defence of claims.
- Right to object to automated decision-making, including profiling.
- Right to object to the processing of your personal data when the legal basis that enables us to process it, in accordance with section 5 of this Policy, is legitimate interest.
- Right to data portability, when the legal basis that enables us to process your data, as indicated in section 5 of this Policy, is the existence of a contractual relationship or your consent.
- Right to withdraw the consent given to Mendesaltaren.
You may exercise your rights at any time and free of charge in the following ways:
- By sending an email to legal@mendesaltaren.com using the email address you registered with our services and indicating the right you wish to exercise.
- By sending a written request to Calle Hermanos Álvarez Quintero, nº 2, Semisótano A, 28004 Madrid, indicating the right you wish to exercise.
- In addition, when you receive any communication from us, by clicking on the unsubscribe section contained in that communication, you can unsubscribe from all previously accepted commercial communications.
When you exercise your rights, and only if we have doubts about your identity, we may request needed additional information to verify your identity.
We also inform you that you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that we have committed a breach of data protection legislation with regard to the processing of your personal data.
In addition, we inform you that you can sign up to the Robinson List at www.listarobinson.es: the advertising exclusion system managed by the Spanish Association for the Digital Economy (ADIGITAL), which you can sign up to in order to show your objection to your data being used for the purpose of sending you commercial communications.
Retention periods
We retain your data until you exercise your right to erasure or to object, unless any of the following situations apply:
- You have a contract with us, in which case we will retain your data for as long as the contract remains in force, adding the limitation periods applicable to any actions that may arise from the contract. Once your contract with us has ended, we will keep your data securely stored in isolated files, with enhanced security measures, preventing any further processing of the information other than making it available to the competent authorities, courts, administrations or regulators.
- There is a compelling reason that requires us to retain the information, in which case we will inform you of what that reason is.
- There are legal obligations applicable to the Company (tax, labour, accounting, etc.) that require us to retain data. In such cases, your data will be retained until such obligations expire.
- We may need to retain certain technical data (logs) for a period of between six months and one year for security purposes, or for a maximum of three years to defend ourselves against claims relating to the protection of your personal data.
If you are participating in a selection or procuring process with us, we will retain your data for the duration of the process and for a maximum of two years thereafter, if your profile is of particular relevance to us and there may be future vacancies for you.
If we rely on your consent to process your data, we will process oyur data untill you withdraw such consent or request its deletion, unless you have consented a specific processing lasting a specific period of time.
Security and confidentiality
In order to prevent unauthorised access or unauthorised disclosure of personal data, we have taken appropriate technical and physical measures, as well as management processes to safeguard and secure the information we collect from you.
Children data
Minors under the age of 14 may not use the services available through our website without the prior authorisation of their parents, guardians or legal representatives, who will be solely responsible for all acts carried out through the site by the minors in their care, including filling in forms with the personal data of said minors and ticking, where applicable, the accompanying boxes. In this regard, and insofar as Mendesaltaren has no way of controlling whether or not users are minors, it is the responsibility of parents and guardians to enable the necessary mechanisms to prevent them from accessing the website and/or providing personal data without their supervision, and Mendesaltaren accepts no responsibility in this regard.
Policy updated
We make every effort to keep our privacy policy fully up to date. If we make any changes, these will be clearly and specifically identified, as far as possible in the relationship we have established with you (for example, we may notify you of the changes by email).
This privacy policy has been revised and posted on 18 of February of 2026.