Privacy Policy

In compliance with Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 (LOPDGDD), and Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE), SEIPPEL & SEIPPEL CONSULTING S.L. informs users of the website about the processing of their personal data.

1. Data Controller

• Company name: SEIPPEL & SEIPPEL CONSULTING S.L.

• CIF: B57657538

• Email: central@seippel.com

• Phone: 971 671 214

• Data Protection Officer (DPO): Consulting & Strategy GFM S.L.

• DPO contact: dpo@gfmservicios.com

2. What personal data do we process and for what purpose?

Personal data will be processed depending on the user’s interaction with the website.

2.1 Website browsing

When accessing the website, technical and navigation data may be processed for the following purposes:

• Ensure proper operation and security of the website

• Prevent misuse or fraudulent activity

• Manage cookies and analytical tools (when applicable)

Legal basis:

• Legitimate interest of the controller (Art. 6.1.f GDPR) to ensure security and technical operation.

• User consent (Art. 6.1.a GDPR) for non-essential cookies.

2.2 Contact form

Data provided through the contact form will be processed to:

• Handle inquiries, requests, or information demands

• Manage professional communication with the user

• Apply pre-contractual measures when the request is service-related

Legal basis:

• Application of pre-contractual measures at the user’s request (Art. 6.1.b GDPR).

• Legitimate interest for managing general inquiries (Art. 6.1.f GDPR).

2.3 Service requests

When a user requests services:

• Manage the request

• Formalize the contractual relationship

• Handle invoicing and administrative management

• Maintain communications related to service provision

Legal basis:

• Performance of a contract or application of pre-contractual measures (Art. 6.1.b GDPR).

• Compliance with legal obligations in tax and accounting matters (Art. 6.1.c GDPR).

2.4 Newsletter subscription

Data provided for newsletter subscription will be processed to:

• Send commercial communications

• Provide updates, promotions, or content related to the company’s activities

Legal basis:

• Explicit consent of the user (Art. 6.1.a GDPR).

The user may withdraw consent at any time without affecting the lawfulness of prior processing.

3. Categories of data processed

Depending on the processing activity, the following categories may be handled:

• Identification data (name, surname, ID number, and postal address)

• Contact data (email, phone number)

• Billing data

• Technical and browsing data

No special categories of data are processed as defined in Article 9 of the GDPR.

Data is provided directly by the user. In accordance with Spanish law, minors under 14 cannot provide consent without authorization from their legal guardians.

4. Data retention period

Personal data will be retained:

• For the time necessary to fulfill the purpose for which it was collected

• While the contractual relationship exists

• For the statutory periods required by tax and accounting law

• Until the user withdraws consent (in the case of newsletters)

Afterward, data may be kept blocked for the limitation periods of potential legal liabilities.

5. Data recipients

Data may be shared with:

• Technology and web hosting providers

• Financial institutions

• Administrative or accounting consultancies

• Public administrations and judicial authorities when legally required

All service providers processing data on behalf of the controller will do so under a data processing agreement.

No international data transfers are planned. If any occur, users will be duly informed.

6. Data subject rights

Users may exercise the following rights:

• Right of access

• Right to rectification

• Right to erasure

• Right to restriction of processing

• Right to data portability

• Right to object

• Right to withdraw consent at any time

To exercise these rights, the user must use the “ARSOL Rights Exercise Form” available on the website.

If the user believes their rights have not been properly addressed, they may file a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security measures

SEIPPEL & SEIPPEL CONSULTING S.L. has adopted the necessary technical and organizational measures to ensure a level of security appropriate to the risk, as required by Article 32 of the GDPR.

The website has an SSL certificate that guarantees encrypted data transmission.

In the event of a security breach posing a high risk to the rights and freedoms of individuals, notification will be made in accordance with applicable regulations.

8. Third-party links

This website may contain links to external pages. The controller is not responsible for the privacy policies of those sites.

9. Changes to the privacy policy

The controller reserves the right to modify this policy to adapt it to legal changes or operational updates to the website.

Last updated: February 2026