Basic information on Data Protection

Main researcher: Tomàs Pascual Prat (hereinafter, MADRAZO ASSESSORS)

Purpose: Provision of online services. Web user management. Commercial communications related to our services.

Legitimation: Express consent and legitimate interest

Recipients: Data will not be transferred to third parties, unless legally obligated.

Rights: Access, rectify and delete data, as well as other rights, as explained in the additional information.

Additional information: You can consult the additional and detailed information on Data Protection in the annexed clauses found in

At MADRAZO ASSESSORS we work to offer you the best possible experience through our products and services. In some cases, it is necessary to gather information to achieve this. We care about your privacy and believe we need to be transparent about it.

Therefore, and for the purposes of the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 (hereinafter, “GDPR”) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and LAW 34/2002,  of 11 July, of Information Society Services and Electronic Commerce (hereinafter, “LSSI”), MADRAZO ASSESSORS informs the user that, as data controller, it will incorporate the personal data provided by users into an automated file.

Our commitment starts by explaining the following:

  • Your data is collected so that the user experience improves, taking into account your interests and needs.
  • We are transparent about what data we collect about you and why we do so.
  • Our intention is to provide you with the best experience possible. Therefore, when we are going to use your personal information, we will always do so in compliance with the regulations, and where necessary, we will ask for your consent.
  • We understand that your data belongs to you. Therefore, if you choose not to authorise us to process them, you can ask us to stop processing them. Our priority is to ensure your security and to process your data in accordance with European regulations.

If you would like more information about the processing of your data, please refer to the various sections of the privacy policy below:

Who is responsible for the processing of your personal data?

Identity: Tomàs Pascual Prat (hereinafter MADRAZO ASSESSORS)

Registered office: C/ Madrazo, 46-48 sobreàtic


MADRAZO ASSESSORS has appointed a Data Protection Officer or an internal contact person within your organisation. If you wish to make a query regarding the processing of your personal data, you can contact him by email at

What personal data do we collect?

The personal data that the user may provide:

  • Name, address, and date of birth.
  • Phone number and email address.
  • Information regarding payments and returns.
  • IP address, the date and time you accessed our services, the internet browser you use, and data about your device’s operating system.
  • Any other information or data you choose to share with us.

In some cases, it is mandatory to complete the registration form to access and enjoy certain services offered on the website; Likewise, failure to provide the requested personal data or failure to accept this data protection policy means that it will be impossible to subscribe, register or participate in any of the promotions in which personal data is requested.

Why and for what purpose do we process your data?

At MADRAZO ASSESSORS we process the information provided to us by interested parties for the following purposes:

  • Manage orders or hire any of our services, either online or in physical stores.
  • Manage the sending of the information requested.
  • Develop commercial actions and carry out the maintenance and management of the relationship with the user, as well as the management of the services offered through the website and the information work, being able to carry out automatic assessments, obtain profiles and segmentation tasks of customers in order to personalize the treatment according to their characteristics and needs and improve the customer’s online experience.
  • Develop and manage contests, sweepstakes or other promotional activities that may be organized.
  • In some cases, it will be necessary to provide information to the Authorities or third parties for audit purposes, as well as to handle personal data from invoices, contracts and documents to respond to complaints from customers or Public Administrations.

We inform you that the personal data obtained as a result of your registration as a user will be part of the Register of Processing Activities and Operations (RAT), which will be periodically updated in accordance with the provisions of the GDPR.

What is the legal basis for the processing of your data?

The processing of your data may be based on the following legal bases:

Consent of the interested party for the contracting of services and products, for contact forms, requests for information or registration in e-newsletters.

Legitimate interest for the processing of our customers’ data in direct marketing actions and express consent of the interested party for all matters relating to automatic evaluations and profiling.

Compliance with legal obligations for fraud prevention, communication with public authorities and third-party complaints.

How long do we keep your data?

The processing of the data for the purposes described will be maintained for the time necessary to comply with the purpose for which it was collected (for example, for the duration of the commercial relationship), as well as for compliance with the legal obligations arising from the processing of the data.

To which recipients is your data disclosed?

In some cases, only when necessary, MADRAZO ASSESSORS will provide user data to third parties. However, the data will never be sold to third parties. The external service providers (e.g. payment providers or delivery companies) with whom MADRAZO ASSESSORS works may use the data to provide the corresponding services, however they will not use such information for their own purposes or for transfer to third parties. MADRAZO ASSESSORS strives to ensure the security of personal data when it is sent outside the company and ensures that third-party service providers respect confidentiality and have appropriate measures in place to protect personal data. Such third parties have an obligation to ensure that the information is treated in accordance with data privacy regulations. In some cases, personal data may be required by law to be disclosed to public bodies or other parties, only as is strictly necessary for compliance with such legal obligations will be disclosed. The personal data obtained may also be shared with other companies in the group.

Where is your data stored?

As a general rule, data is stored within the EU. Data that is sent to third parties outside the EU, we will ensure that it offers a sufficient level of protection, either because they have Binding Corporate Rules (BCR) or because they have adhered to the “Privacy Shield”.

What rights do you have and how can you exercise them?

You can direct your communications and exercise your rights by sending a request to the following e-mail address: Under the provisions of the GDPR, you can request:

  • Right of access: you can request information about the personal data we have about you.
  • Right to rectification: you can communicate any changes to your personal data.
  • Right to erasure and to be forgotten: you can request the deletion after blocking your personal data.
  • Right to restriction of processing: this means the restriction of the processing of personal data.
  • Right to object: you can withdraw your consent to the processing of the data, objecting to the further processing of the data.
  • Right to portability: In some cases, you may request a copy of personal data in a structured, commonly used and machine-readable format for transmission to another controller.
  • Right not to be subject to individualised decisions: you can request that decisions not be made that are based solely on automated processing, including profiling, that produce legal effects or significantly affect the data subject.

In some cases, your request may be denied if you request that data necessary for compliance with legal obligations be deleted.

In addition, if you have a complaint about the processing of your data, you can file a complaint with the data protection authority.

Who is responsible for the accuracy and veracity of the data provided?

The user is solely responsible for the veracity and correctness of the data included, exonerating MADRAZO ASSESSORS from any responsibility in this regard. Users guarantee and are responsible, in any case, for the accuracy, validity and authenticity of the personal data provided, and undertake to keep them duly updated. The user agrees to provide complete and correct information in the registration or subscription form. MADRAZO ASSESSORS reserves the right to terminate the contracted services that have been entered into with users, in the event that the data provided is false, incomplete, inaccurate or outdated.

MADRAZO ASSESSORS is not responsible for the veracity of the information that is not of its own creation and for which another source is indicated, so it does not assume any responsibility for hypothetical damages that may arise from the use of such information.

MADRAZO ASSESSORS reserves the right to update, modify or delete the information contained in its web pages, and may even limit or deny access to such information. MADRAZO ASSESSORS is exonerated from liability for any damage or harm that the user may suffer as a result of errors, defects or omissions in the information provided by MADRAZO ASSESSORS, provided that it comes from sources other than the same.

Likewise, the user certifies that he/she is over 14 years of age and that he/she has the necessary legal capacity to provide consent regarding the processing of his/her personal data.

How do we process the personal data of minors?

In principle, our services are not specifically aimed at minors. However, in the event that any of them is addressed to minors under fourteen years of age, in accordance with article 8 of the GDPR and article 7 of the LO3/2018, of 5 December (LOPDGDD), MADRAZO ASSESSORS will require the valid, free, unequivocal, specific and informed consent of their legal guardians to process the personal data of minors. In this case, the ID card or other form of identification of the person giving consent will be required.

In the case of persons over fourteen years of age, the data may be processed with the user’s consent, except in those cases in which the law requires the assistance of the holders of parental authority or guardianship.

What security measures do we implement to protect your personal data?

MADRAZO ASSESSORS has adopted the legally required levels of security for the protection of Personal Data, and seeks to install other means and additional technical measures at its disposal to prevent the loss, misuse, alteration, unauthorized access and theft of the Personal Data provided to MADRAZO ASSESSORS.

MADRAZO ASSESSORS is not responsible for hypothetical damages that may arise from interferences, omissions, interruptions, computer viruses, telephone breakdowns or disconnections in the operational functioning of this electronic system, caused by causes beyond the control of MADRAZO ASSESSORS; delays or blockages in the use of this electronic system caused by deficiencies or overloads of telephone lines or overloads in the Data Processing Centre, in the Internet system or in other electronic systems, as well as damages that may be caused by third parties through illegitimate interference beyond the control of MADRAZO ASSESSORS. However, the user should be aware that security measures on the Internet are not impregnable.

Links to Other Websites

There may be links to other websites on the website . By clicking on one of these links and accessing an external website, the visit will be subject to the privacy policy of that website, and MADRAZO ASSESSORS will not be held liable for any type of privacy policy.

How do we use cookies?

The website and social media of MADRAZO ASSESSORS use cookies in order to optimise and personalise your browsing experience. Cookies are physical information files that are stored on the user’s own terminal, the information collected through cookies serves to facilitate the user’s navigation through the portal and optimize the browsing experience. The data collected through cookies may be shared with their creators, but in no case will the information obtained by them be associated with personal data or data that can identify the user. However, if the user does not want cookies to be installed on their hard drive, they have the possibility of configuring the browser in such a way as to prevent the installation of these files. For more information, please see our Cookie Policy.

Can the privacy policy be changed?

This privacy policy may be modified. We encourage you to review the privacy policy from time to time.