The personal data you provide to us on this website by any of the means enabled for this purpose will be processed in accordance with this privacy policy.
All the processing referred to in this privacy policy is carried out by:
Name: ZABALA INNOVATION CONSULTING, S.A.
VAT number: A31419773
Address: Paseo Santxiki, 3 bis – E- 31192 Mutilva (Navarra, Spain),
Email address: gdpr@zabala.es
Telephone number: +34 948 198 000
This privacy policy details the processing of personal data, including the legal basis in accordance with the GDPR and the specific retention period of the data. These periods will be extended by the time necessary to comply with legal obligations and address any liabilities that may arise in relation to the fulfilment of the purpose for which the data were collected. If at any time your authorisation is requested for the processing of your data for a purpose of which your consent is required, the lack of granting (or its subsequent withdrawal) will have no consequences for you.
DATA RELATING TO OUR RELATIONSHIP WITH YOU.
Processing and purposes
Requests for information or queries (by any means you use, including collection at fairs, events and phone calls): We will use your data to respond to your requests for information, queries or complaints and manage what is necessary. We will also use them to prepare service or collaboration proposals.
Data we collect about you
Name, Email, Company, Telephone, Geographical location (region, country), Tracking URLs (web addresses that allow us to know how you found our website) and any other information you voluntarily share with us in the forms.
Legal basis (GDPR)
6.1.a) GDPR. The data subject has given consent to the processing. 6.1.b) GDPR Processing is necessary for the performance of pre-contractual measures at the request of the data subject.
Retention period
For the time necessary to address and manage your request and/or complaint.
Processing and purposes
Use of our websites, social media profiles and marketing emails: We will use the data from your visit to our websites to show you relevant content (including targeted advertising), analyse metrics and web traffic to improve our platforms and understand how you interact with us. We may also see how you interact with marketing communications to assess the quality of the content, interest and improve it.
Data we collect about you
IP address, Tracking URLs, Identifiers about the device you access from, Approximate geographical location, How you interact with the website, email or similar, and any other data through cookies, in accordance with our cookies policy.
Legal basis (GDPR)
Art. 6.1.a) GDPR. Explicit consent of the data subject.
Retention period
Provided you do not object and the Controller is authorized to process it.
Processing and purposes
In-person events and webinars: Manage your participation in them. In cases where your image/voice is processed during the event (if the event is held online, for example).
Data we collect about you
Name, Email, Organisation, Interests, Attendance, Participation in the webinar, Dietary preferences (in offline events), Voice, Image, Tracking URLs.
Legal basis (GDPR)
Art. 6.1.b) GDPR. Processing is necessary for the performance of a contract to which the data subject is a party. Art. 6.1.a) GDPR. Explicit consent of the data subject.
Retention period
Provided the contractual relationship is in force and the Controller is authorized to process it.
Processing and purposes
Commercial communications: We will use your data to send you commercial communications that we consider may be of interest to you. These may include information or advertising, publications or newsletters (periodic newsletter).
Data we collect about you
Name, Email, Company, Telephone, Interests, Geographical location (region, country), Any other information you voluntarily share with us in the forms, Tracking URLs, Identifiers that allow us to know how you interact with our campaigns.
Legal basis (GDPR)
Art. 6.1.a) GDPR. Explicit consent of the data subject.
Retention period
As long as you do not withdraw your consent.
DATA ASSOCIATED WITH REGULATORY COMPLIANCE.
Processing and purposes
Attention to the exercise of the rights of the data subjects: In the event that, as a data subject, you exercise any of the rights you have in relation to your personal data, we will use the data you provide to us to evaluate your request and address it.
Data we collect about you
Name, Email, Address and any other data necessary to prove your identity.
Legal basis (GDPR)
Art. 6.1.c) GDPR. Compliance with a legal obligation applicable to the Controller based on articles 15 to 22 of the GDPR.
Retention period
As long as necessary to address the exercise of rights communicated to the Controller.
COOKIES
If you have accepted to receive cookies when you start visiting this website, the website’s cookie policy, accessible through the following link, will apply to you.
As a general rule, unless legally required, your data will not be communicated or transferred to any third party without your prior express consent. In any case, some communications and/or transfers of data to third parties may be imposed by certain regulations or to meet obligations with Public Administrations, the Public Prosecutor’s Office, Judges and Courts, and State Security Forces and Bodies. Other communications and/or transfers will be a necessary consequence of the provision of the requested service, event management or the result of your express consent to the communication. Below, we list the purposes for which it may be necessary to communicate your data to third parties and whether these involve international data transfers:
Finally, we inform you that we use the following third-party services that involve international data transfers:
Regarding the personal data collected for processing, you have the possibility to exercise the rights of access, rectification, deletion and portability. Likewise, in certain circumstances, you will have the right to request the limitation or opposition to the processing of your data, in which case the Controller will cease processing them and will only keep them if there is a legal obligation to do so or until the prescription of the actions that may arise.
For any query or exercise of your rights you may contact ZABALA INNOVATION CONSULTING, S.A. using any of the channels indicated in the first section of this privacy policy.
Finally, you can also contact the supervisory authority when you deem it appropriate to file a complaint (for example, in the country where you have your habitual residence, your place of work or where you consider the alleged infringement has occurred). For the appropriate purposes, we inform you that in Spain the Supervisory Authority is the Spanish Data Protection Agency, and you can exercise your rights through the forms that each entity has enabled for this purpose.
By checking the corresponding boxes and entering data in the fields on the various forms on the website, users expressly, freely, and unequivocally accept that their data is necessary for the provider to respond to their request, with the inclusion of data in the remaining fields being voluntary. Users guarantee that the personal data provided to the data controller is accurate and are responsible for communicating any changes thereto.
Updated: February, 2026