Privacy Policy

This Privacy Policy forms part of the General Terms and Conditions governing the website https://ununuzi.es/ (hereinafter, the Website).

In accordance with personal data protection legislation and Articles 13 and 14 of Regulation (EU) 2016/679, the General Data Protection Regulation, this Privacy Policy informs Users of the following:

Data Controller

UNUNUZI CONSULTING S.L. (the Controller), with its registered office at Calle Adanero, 1, 3º1, 28024 Madrid, Spain, and tax identification number B87683900, is responsible for processing the data provided by users (“Users”) through the Website.

Users may contact the Controller by post at the address above, by email at marketing@ununuzi.es or by telephone on +34 919 954 553.

We reserve the right to amend or adapt this Privacy Policy at any time and therefore recommend reviewing it regularly. If we make any substantial changes to our processing activities, or if we need to obtain express consent for them, we will notify you directly.

Data Subject to processing

WEBSITE AND EMAIL CONTACTS

The Controller will process the identification and contact details provided by Users through the contact form or when contacting the Controller by telephone or email, as well as any other information Users include. The Controller may also anonymously process Users’ IP addresses, operating systems or browsers, and the duration of their visits.

The data will be processed for the following purposes:

Responding to enquiries, applications or requests.
Managing the requested service.
Providing information electronically in connection with a request.
Analysing and improving the Website and Ununuzi’s products and services.
Improving our commercial strategy.

Data processing is based on the data subject’s acceptance and express consent. Where submitting a request requires completing a form and clicking the submit button, doing so necessarily implies that the User has been informed and has expressly consented to the processing of their data under this Privacy Policy.

If the required fields are not completed, or the checkbox accepting the Privacy Policy is not selected, the information cannot be submitted.

Your data will be processed until you withdraw your consent.

CLIENTS

Clients’ identification, contact and financial data will be processed for the following purposes:

Preparing quotations and following up on them through communications between both parties.
Providing information electronically in connection with your request.
Sending commercial information or information about events electronically, provided that express authorisation has been given.
Managing the administrative, communications and logistics services provided by the Controller.
Invoicing and filing the relevant tax returns.
Carrying out the corresponding transactions.
Managing payment monitoring and debt recovery.

The legal basis is the existence of a contractual relationship between the parties. Processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the data subject’s request before entering into a contract.

Data will be retained for the duration of the relationship between the parties and for the applicable limitation periods arising from it.

SUPPLIERS

The Controller will process the identification, contact, financial and banking data necessary for the following purposes:

Providing information electronically in connection with your request.
Sending commercial information or information about events electronically, provided that express authorisation has been given.
Managing the administrative, communications and logistics services provided by the Controller.
Invoicing.
Carrying out the corresponding transactions.
Invoicing and filing the relevant tax returns.
Managing payment monitoring and debt recovery.

The legal basis is the acceptance of a contractual relationship or, failing that, your consent when contacting us or offering us your products through any channel.

Data will be processed for the duration of the relationship between the parties and for the applicable limitation periods arising from it.

SOCIAL MEDIA CONTACTS

Personal data available on social media profiles, as well as any data Users provide to the Controller when contacting it through these channels, will be processed for the following purposes:

Responding to enquiries, applications or requests.
Managing the requested service.
Establishing a relationship between the User and the Controller and creating a community of followers.

In this case, processing is based on the acceptance of a contractual relationship within the relevant social network and in accordance with its privacy policies. Users are therefore advised to consult those policies.

The Controller can only access or delete data to the limited extent permitted by its specific profile. Data will be processed for as long as the User permits through the interactions available on each social network. Users must make any corrections to their data or restrict information or posts through their profile settings on the social network itself.

JOB AND INTERNSHIP APPLICANTS

The Controller will process data received through unsolicited applications sent by email, including identification and contact details and any information contained in the CV attached by the applicant, for the following purposes:

Organising recruitment processes to hire employees.
Inviting applicants to job interviews and assessing applications.

The legal basis for this processing is the existence of a pre-contractual relationship when you submit your application.

In accordance with our retention policy, CVs will be securely destroyed one year after receipt.

Processing Third Parties’ Data

As a general rule, the Controller will only process data provided by the individuals to whom it relates. If you provide third-party data, you must first inform those individuals and obtain their consent. Otherwise, the Controller will not be liable for any failure to comply with this requirement.

Children's Data

Data relating to children under 14 will not be processed. Users must therefore refrain from providing their own data if they are under that age or from providing data relating to third parties under that age. The Controller accepts no liability for any failure to comply with this provision.

Electronic Commercial Communications

Commercial communications about Ununuzi and its services will only be sent to the email addresses of Users who have previously given their express consent. The Controller will store the email address in its database and send emails periodically until the User requests to unsubscribe. An unsubscribe option will be available in every communication. The purposes of this processing are:

Managing the requested service.
Providing information electronically in connection with the request.
Sending commercial information or information about events electronically, provided that express authorisation has been given.
Analysing and improving email campaigns to improve our commercial strategy.

The legal basis for this processing is the data subject’s consent or the existence of a prior contractual relationship. When subscribing, you will need to select a checkbox and click the submit button. This necessarily implies that you have been informed and have expressly consented to receiving these communications.

Data will be processed until you withdraw your consent.

Security Measures We Apply

The Controller has adopted an optimal level of information security, implementing appropriate technical and organisational measures in line with the state of technology to prevent the loss, misuse, alteration, unauthorised access or theft of Personal Data.

Disclosure to Third Parties

Users’ personal data may be disclosed to:

The Spanish State Tax Administration Agency and banks and financial institutions for the collection of payment for services provided or products purchased, pursuant to a legal obligation.
Data processors necessary for the provision of the service, who will have signed a service agreement requiring them to maintain the same level of privacy as the Controller.

If any disclosure involves an international data transfer through the use of US applications, the necessary safeguards will be in place to ensure that US software companies comply with European data protection and privacy requirements.

Users’ Rights

Data protection legislation grants Users a number of rights that the Controller is obliged to uphold:

The right to know whether their data is being processed.
The right to access the personal data being processed.
The right to request the correction of inaccurate data.
The right to request the deletion of data that is no longer necessary for the purposes for which it was collected or if consent is withdrawn.
The right to request the restriction of processing in certain circumstances, in which case data will only be retained in accordance with applicable legislation.
The right to lodge a complaint with the Spanish Data Protection Agency or the competent supervisory authority.
The right to withdraw consent at any time for any processing to which they have consented.

To facilitate this process and comply with the principle of data accuracy, the Controller would appreciate being informed of any changes to your data.

To exercise these rights, Users may request a form from the Controller or use forms prepared by the Spanish Data Protection Agency or third parties. These forms must be signed electronically. Where a representative acts on the User’s behalf, the form must also include the representative’s electronic signature. Forms may be submitted in person, by post or by email using the Controller’s contact details provided at the beginning of this document.

Depending on the right exercised, the Controller will respond within a maximum of one month of receiving the request, or two months if the matter is particularly complex, in which case the User will be notified.

Cookies

The Website uses cookies. For further information, please see our Cookie Policy.

Last updated: November 2026