Privacy policy

1. Information for the user

1.1. Who is responsible for processing your personal data? Capibara Legal, S.L. (hereinafter Capibara) is the CONTROLLER of the personal data of the USER (the data subject) and informs you that this data will be processed in accordance with Regulation (EU) 2016/679 of 27 April (GDPR) and Ley Orgánica 3/2018 of 5 December (LOPDGDD).

1.2. For what purposes do we process your personal data?

To maintain a commercial relationship with the user. The processing operations envisaged are:

Managing the USER’s account in order to provide personalised access to the website and the application and to the interactive services they offer.
Sending commercial and advertising communications by email, fax, SMS, MMS, social media or any other electronic or physical means, present or future, that makes commercial communications possible. These communications are sent by Capibara and relate to its products and services, or to those of its partners or suppliers with whom it has reached a promotional agreement. We assure you that we will never transfer your personal data to third parties for commercial purposes.
Sending the online newsletter about news, offers and promotions relating to our activity.
Including the data subject in staff recruitment processes and analysing the applicant’s profile with a view to selecting a candidate for a vacancy at Capibara.
Moderating and publishing on Capibara’s website or application the USER’s experiences, opinions and suggestions about a product or service.
Taking part in prize draws, competitions, promotions or other similar services offered by Capibara.
Carrying out market research and statistical analysis.
Handling orders and requests, and responding to enquiries or any kind of request made by the USER through any of the contact methods made available on Capibara’s website or application.
Carrying out satisfaction and quality surveys.
Sending commercial quotations for products and services.
Managing your online purchase or order, processing payment and proceeding with its dispatch or activation, on the basis of the general terms of contract.
Maintaining a commercial and/or professional relationship between the USER and Capibara.
Managing, maintaining, improving or developing the services provided.

1.3. On what grounds may we process your personal data?

Because the processing is lawful under article 6 of the GDPR, as follows:

With the USER’s consent: management of the user account, sending of commercial communications and of the newsletter, staff recruitment processes, publication of the user’s experiences, opinions and suggestions, participation in prize draws, competitions or promotions.
On the legitimate interest of the CONTROLLER: carrying out market research, statistical analysis and the like; handling orders, requests and so on at the USER’s request; carrying out satisfaction and quality surveys.
For the performance of a contract or pre-contract between the USER and the CONTROLLER: sending quotations, managing your purchase or order, maintaining a commercial and/or professional relationship, and managing, maintaining, improving or developing the services provided.

1.4. Processing of special categories of personal data and data relating to criminal convictions and offences

If, in the course of your commercial relationship with us, Capibara, you decide to provide us with personal data of a particularly sensitive nature, as defined in article 9 of the GDPR, or data relating to criminal convictions and offences as well as to related proceedings and precautionary or security measures, we will process that data on the legal basis of your explicit consent, for the purpose of providing the alternative dispute resolution (ADR) service requested. Providing such data is entirely voluntary and consent may be withdrawn at any time (see section 1.7, What are your rights?). That withdrawal will not affect the lawfulness of processing based on consent before its withdrawal, but it could affect the future of any ADR already under way that relies on that data.

1.5. How long will we keep your personal data?

It will be kept for no longer than is necessary to fulfil the purpose of the processing, or than legal provisions require it to be retained, and once it is no longer needed for that purpose it will be erased using appropriate security measures to guarantee the anonymisation of the data or its complete destruction.

1.6. Who do we disclose your personal data to?

No disclosure of personal data to third parties is envisaged, save where there is a legal obligation, or where it is necessary for the development and performance of the purposes of the processing, to our service providers in the fields of communications, payments and advisory services, with whom we have signed the confidentiality and data processor agreements required by the privacy legislation in force.

Capibara does not carry out international data transfers, unless the sector or country has been recognised by an adequacy decision of the European Commission.

1.7. What are your rights?

The rights available to the USER are:

The right to withdraw consent at any time, without this affecting the lawfulness of processing based on consent before its withdrawal.
The right of access, rectification, portability and erasure of your data, and of restriction of or objection to its processing.
The right to lodge a complaint with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with the legislation in force.

1.8. Contact details for exercising your rights:

Capibara Legal, S.L. Avda Diagonal, 467 6 1 - 08036 Barcelona (Barcelona). Email: hola@capibara.legal

2. Mandatory or optional nature of the information provided by the user

By ticking the relevant boxes and entering data in the fields marked with an asterisk (*) in the contact form, or presented in download forms, USERS expressly and freely accept, unambiguously, that their data is necessary for the provider to deal with their request, the inclusion of data in the remaining fields being optional. The USER warrants that the personal data provided to Capibara is accurate and is responsible for notifying any changes to it.

Capibara advises that all data requested through the website is mandatory, since it is necessary in order to provide the USER with an optimal service. Where not all the data is provided, there is no guarantee that the information and services provided will be entirely suited to your needs.

3. Security measures

In accordance with the legislation in force on the protection of personal data, the CONTROLLER, Capibara, complies with all the provisions of the GDPR and the LOPDGDD for the processing of the personal data under its responsibility, and manifestly with the principles described in article 5 of the GDPR, whereby data is processed lawfully, fairly and transparently in relation to the data subject, and is adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.

Capibara, S.L. warrants that it has implemented appropriate technical and organisational policies to apply the security measures laid down by the GDPR and the LOPDGDD in order to protect the rights and freedoms of USERS, and that it has given them the appropriate information so that they can exercise those rights.

For further information on privacy safeguards, you may contact the CONTROLLER at Capibara, S.L., Avda Diagonal, 467 6 1 - 08036 Barcelona (Barcelona). Email: hola@capibara.legal

4. Have you received an email or SMS from Capibara inviting you to take part in an alternative dispute resolution?

You have received this communication because one of our users has told us that they would like to invite you to take part in an alternative dispute resolution (ADR) with them. In that case, the policy set out in this section (4) and in section 3 of our privacy policy applies to the processing of your personal data, until such time as you decide to provide us with your data yourself, for example by registering as a user of our application.

Capibara is the Controller of the data subject’s personal data and informs you that this data will be processed in accordance with Regulation (EU) 2016/679 of 27 April (GDPR) and Ley Orgánica 3/2018 of 5 December (LOPDGDD), and accordingly provides the following information about the processing:

Purposes and lawful basis of the processing: provision of professional services (on the legitimate interest of the controller, art. 6.1.f GDPR).

Data retention criteria: If you decide not to register with the Capibara application, after 3 months the data will be erased using appropriate security measures to guarantee its anonymisation or complete destruction, unless legal provisions require its retention.

Disclosure of the data: the data will not be transferred to third parties, save where there is a legal obligation. However, your data may be processed temporarily by one of our providers on the same terms as those set out in section 1.5 of this privacy policy, in order to send you the invitation.

Source of the data: The other party to the alternative dispute resolution.

Categories of data processed: Identifying data (name, surname, telephone, email).

Rights available to the data subject:

The right of access, rectification, portability and erasure of your data, and of restriction of or objection to its processing.
The right to lodge a complaint with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with the legislation in force.

Contact details for exercising your rights:

Capibara Legal, S.L., Avda Diagonal, 467 6 1 - 08036 Barcelona (Barcelona). Email: hola@capibara.legal

5. Can this privacy policy be changed?

Yes, this privacy policy may be updated. This privacy policy is dated 24/04/2025. We recommend that you read this privacy policy regularly. If significant changes are made, we will notify you separately.

6. More information

Terms and conditions

Cookie policy