Legal

Privacy Policy

Last updated: 5 April 2026

Summary: We are the data controller. This policy explains what data we collect, why, and your rights under GDPR.

1. Data Controller Identity

The data controller responsible for your personal data is:

Movanterato
C. Vitoria, 167, 09007 Burgos, Spain
NIF: E10581311
Email: info@movanterato.com
Phone: +34 947 027 625

This Privacy Policy governs the processing of personal data collected through the website movanterato.com and through any direct communications with us. It is written in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

Summary: We collect only what you provide via our contact form plus standard technical data from website visits.

2. Data We Collect

2.1 Data you provide directly

When you use our contact form, we collect: your name, your email address, and the content of your message. We do not collect payment information, national identity numbers or sensitive personal data through our website.

2.2 Data collected automatically

When you visit our website, our web server and any analytics tools we use may collect: your IP address (anonymised where possible), browser type and version, operating system, referring URL, pages visited and time spent on each page, date and time of your visit. This data is collected in aggregate and is not used to identify you individually unless required for security or fraud prevention purposes.

2.3 Cookie data

We use cookies as described in our Cookie Policy. You can manage your cookie preferences at any time using the cookie preferences panel on this website.

Summary: Your data is used only to respond to your enquiry and to improve our website. We do not use it for unsolicited marketing.

3. Purposes and Legal Bases for Processing

We process your personal data for the following purposes, each with its corresponding legal basis under GDPR Article 6:

  • Responding to enquiries: When you contact us via the contact form, we process your name and email address to respond to your enquiry. Legal basis: Article 6(1)(b) GDPR (performance of pre-contractual measures) and Article 6(1)(a) GDPR (your consent given by submitting the form and ticking the privacy checkbox).
  • Service delivery: If you engage our advisory services, we process the personal and financial information you share with us during sessions to provide the service. Legal basis: Article 6(1)(b) GDPR (performance of a contract).
  • Website analytics: We process anonymised technical data to understand how our website is used and to improve its content and functionality. Legal basis: Article 6(1)(f) GDPR (legitimate interests), provided this does not override your fundamental rights.
  • Legal compliance: We may process your data where required to comply with a legal obligation. Legal basis: Article 6(1)(c) GDPR.

We do not use your personal data for automated decision-making or profiling as defined in Article 22 GDPR.

Summary: We do not sell your data. We only share it with service providers who help us operate the website.

4. Data Sharing and Recipients

We do not sell, rent or trade your personal data to third parties. We may share your data with the following categories of recipients only where necessary:

  • Hosting and infrastructure providers: Our website is hosted on servers within the European Economic Area (EEA). Our hosting provider processes technical data as a data processor under a Data Processing Agreement.
  • Email service providers: We use email services to receive and respond to your enquiries. These providers act as data processors.
  • Analytics providers: If you have consented to analytics cookies, anonymised usage data may be processed by our analytics provider.
  • Legal authorities: We may disclose personal data to competent authorities where required by law, court order or regulatory obligation.

All third-party processors are required to process your data only on our instructions and in compliance with GDPR.

Summary: We keep your data only as long as necessary. Enquiry data is retained for up to 2 years.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any legal retention obligations:

  • Contact form enquiries: up to 2 years from the date of your last communication with us, unless a contractual relationship is established.
  • Client service data: for the duration of the service relationship and up to 5 years thereafter, in accordance with applicable commercial and tax law obligations under Spanish legislation.
  • Website analytics data: as specified by our analytics provider's data retention settings, typically 14 months from collection.
  • Cookie preference records: for the duration of the cookie consent period (12 months), after which your preferences will be requested again.

When data is no longer required, it is securely deleted or anonymised.

Summary: You have full GDPR rights: access, rectification, erasure, portability, objection and withdrawal of consent.

6. Your Rights Under GDPR

Under the GDPR and LOPDGDD, you have the following rights regarding your personal data:

  • Right of access (Article 15 GDPR): You may request a copy of the personal data we hold about you.
  • Right to rectification (Article 16 GDPR): You may request correction of inaccurate or incomplete personal data.
  • Right to erasure (Article 17 GDPR): You may request deletion of your personal data where there is no longer a legitimate basis for processing it.
  • Right to restriction of processing (Article 18 GDPR): You may request that we restrict processing of your data in certain circumstances.
  • Right to data portability (Article 20 GDPR): Where processing is based on consent or contract, you may request your data in a structured, commonly used and machine-readable format.
  • Right to object (Article 21 GDPR): You may object to processing based on legitimate interests at any time.
  • Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us at info@movanterato.com or by post to C. Vitoria, 167, 09007 Burgos, Spain. We will respond within one month of receiving your request. You also have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos, AEPD) at www.aepd.es.

Summary: We implement appropriate technical and organisational security measures to protect your data.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or alteration. These measures include encrypted data transmission (HTTPS), access controls and regular security reviews. No method of transmission over the internet is entirely secure, and we cannot guarantee absolute security. We will notify you and the relevant supervisory authority of any personal data breach where required by law.

Summary: We do not transfer your data outside the EEA. If this changes, we will ensure adequate safeguards are in place.

8. International Transfers

We do not transfer your personal data to countries outside the European Economic Area (EEA). All data processing takes place within the EEA. If we were to engage processors outside the EEA in the future, we would ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR, such as Standard Contractual Clauses approved by the European Commission.

Summary: We may update this policy. We will notify you of material changes via the website.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when it was last updated. We encourage you to review this policy periodically. Material changes will be communicated via a notice on our website. Your continued use of our website after any changes constitutes your acknowledgement of the updated policy.

Summary: Contact us at any time with privacy questions or requests.

10. Contact for Privacy Matters

For any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact us:

Movanterato
C. Vitoria, 167, 09007 Burgos, Spain
Email: info@movanterato.com
Phone: +34 947 027 625

If you are not satisfied with our response, you have the right to complain to the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan, 6, 28001 Madrid, Spain. Website: www.aepd.es.