Privacy policy

In accordance with data protection rules, we inform you about how we process your personal data.

1 · Data controller

INTERIM MANAGER CONSULTING, S.L.
Rúa Vía Norte 12, Bajo · 36204 Vigo (Pontevedra)
NIF: B70399449
Email: hola@estrategicamente.info

2 · Purpose of processing, legal basis and retention period

User support through the contact form and email

Purpose: to manage and answer enquiries sent through the contact form and by email.

Legal basis: the controller's legitimate interest in properly handling requests and enquiries.

Retention period: as long as needed to answer your request and, in any case, within the applicable legal limits.

Sending commercial communications

Purpose: to manage subscriptions to newsletters and commercial information about our services.

Legal basis: the user's consent (Art. 6.1.a GDPR), which may be withdrawn at any time.

Retention period: until you unsubscribe from the communications.

Use of artificial intelligence systems in our services

EstratégicaMente uses its own AI agents, developed in-house, as a professional support tool.

Purpose: to optimise the analysis of documentation provided by clients and improve service quality.

Legal basis: performance of a contract (Art. 6.1.b GDPR) and pre-contractual measures (Art. 6.1.b GDPR).

Important:

✓ No decisions are taken on a solely automated basis producing legal effects.
✓ There is always qualified human oversight before any conclusion or result is issued.
✓ No special categories of data are processed.

CriterIA© compliance assessments (self-assessment and CriterIA© 25)

EstratégicaMente provides self-assessment tools for compliance with the European AI Regulation.

Data processed in the CriterIA© 25: payment session identifier, email address and questionnaire answers.

Purpose: to issue the compliance report purchased and allow the person to retrieve it.

Legal basis: performance of a contract (Art. 6.1.b GDPR).

Retention period: five years from issuance, as evidence of the service provided.

Location: reports are held entirely within the European Union (Ireland).

Payments: charges are handled through an external payment gateway acting as an independent controller.

3 · Recipients of disclosures

Personal data is not disclosed to third parties except where legally required. Providers do act as processors.

Processor	Service provided	Processing location
Supabase, Inc.	Database and authentication	European Union (Ireland). US parent company: possible access for exceptional technical support.
Netlify, Inc.	Web hosting and server functions	European Union for content. Technical logs (IP address) processed in the US.
Anthropic, PBC	Language model inference (AI)	United States
Resend, Inc.	Transactional email delivery	Sent from the European Union; account data, metadata and logs stored in the United States.
Stripe Payments Europe, Ltd.	Payment processing for our suites	European Union (Ireland). Possible onward transfers to Stripe, Inc. (US) under standard contractual clauses.

International data transfers

In accordance with Articles 13.1.f and 44 et seq. GDPR, we inform you about international data transfers.

AI inference: the content you provide may be sent to the model provider's servers for processing.
Transactional email: the metadata and logs of the emails we send you may be processed by the provider.
Technical logs: browsing data associated with web hosting may be processed for security purposes.

Safeguards applied. These transfers rely on the Standard Contractual Clauses approved by the European Commission.

Medidas suplementarias. Conforme a las Recomendaciones 01/2020 del Comité Europeo de Protección de Datos, EstratégicaMente aplica medidas adicionales de minimización de datos, cifrado en tránsito y en reposo, y limitación de la información remitida a los proveedores de inferencia. Puede solicitar una copia de nuestra Evaluación de Impacto de Transferencias Internacionales escribiendo a hola@estrategicamente.info.

The database holding your personal data and the document index used never leave the European Union.

4 · Cookie policy

To review the data processing relating to cookies, please see our cookie policy.

5 · Rights

We inform you of your data protection rights:

The right to request access to your personal data.
The right to request its rectification or erasure.
The right to request restriction of processing, and to object to processing.
The right to data portability.
The right to withdraw your consent.

Puede enviar su solicitud a través de la cuenta de correo electrónico: hola@estrategicamente.info.

If you believe we have not properly handled your rights, you may lodge a complaint with the Spanish Data Protection Agency.

6 · Security measures

ESTRATÉGICAMENTE applies appropriate technical and organisational measures:

Access control and activity logging.
Servers located in the European Union.
Encryption in transit and at rest.
Internal protocols for AI use and mandatory human review.
Prevention of excessive processing and data minimisation practices.

7 · Use of artificial intelligence systems

In compliance with Regulation (EU) 2024/1689 of the European Parliament and of the Council, we inform you about our use of AI systems.

AI systems used. This platform uses artificial intelligence systems as a professional support tool.

Risk classification. The AI systems used have been assessed and classified as limited risk.

Automated decisions. Where the AI system contributes to preparing a result, there is always human review.

Data used. The data you provide through this platform may be processed by these systems to deliver the service.

Derechos del usuario. Tiene derecho a solicitar la intervención de un profesional humano de EstratégicaMente en cualquier proceso en el que intervenga un sistema de IA, así como a obtener explicaciones sobre el funcionamiento general del sistema. Para ejercer este derecho: hola@estrategicamente.info.

For further information, see our dedicated AI Policy.

In plain language