Privacy Policy
Last updated: 15 January 2026
1. Data controller
The data controller for your personal data is Derivativejm S.L. (hereinafter, 'Derivativejm'), with CIF B-76892451 and registered office at Calle de Velázquez, 27, 3º Izda, 28001 Madrid, Spain. You can contact us via email at info@derivativejm.com or by calling +34 910 456 723.
2. Personal data we collect
We collect personal data that you voluntarily provide through our contact form: full name, email address, and the content of your message. Additionally, we may collect technical data automatically through cookies and similar technologies: IP address, browser type, operating system, pages visited, visit duration, and website interaction data.
3. Purpose of processing
We process your personal data for the following purposes: (a) managing and responding to enquiries received through the contact form; (b) maintaining and improving the technical functionality of the website; (c) conducting anonymous statistical analyses of website usage; (d) complying with applicable legal obligations. We do not use your data for automated profiling or automated decision-making that produces legal effects concerning you.
4. Legal basis for processing
The processing of your data is based on the following legal grounds under the General Data Protection Regulation (EU) 2016/679 and Spanish Organic Law 3/2018 on Personal Data Protection and digital rights guarantee (LOPD-GDD): (a) your express consent when submitting the contact form (Article 6.1.a GDPR); (b) our legitimate interest in improving and maintaining website security (Article 6.1.f GDPR); (c) compliance with legal obligations (Article 6.1.c GDPR).
5. Data retention
We will retain your personal data for the time strictly necessary to fulfil the purposes described: contact form data will be retained for a maximum of 12 months from the resolution of your enquiry; anonymised analytical data will be retained for 26 months; data necessary for compliance with legal obligations will be retained for the periods required by applicable regulations.
6. Disclosure of data to third parties
We do not sell, rent, or share your personal data with third parties for their own commercial purposes. We may disclose your data to: (a) technology service providers acting as data processors under written contract (web hosting, email services); (b) public authorities when required by current regulations. Google Ireland Limited acts as a data processor in relation to Google Analytics and Google Ads, as set out in our Cookie Policy.
7. International transfers
Some of our technology service providers may be based outside the European Economic Area. In such cases, we ensure that transfers are carried out with appropriate safeguards: European Commission adequacy decisions, standard contractual clauses approved by the European Commission, or certifications under recognised frameworks such as the EU-US Data Privacy Framework.
8. Your rights
Under the GDPR and LOPD-GDD, you have the right to: (a) access your personal data; (b) request rectification of inaccurate data; (c) request deletion of your data when no longer necessary; (d) object to processing in certain circumstances; (e) request restriction of processing; (f) request data portability; (g) withdraw your consent at any time without affecting the lawfulness of prior processing. To exercise these rights, you can contact info@derivativejm.com stating your identity. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
9. Security measures
We implement appropriate technical and organisational measures to protect your personal data: SSL/TLS encryption on all communications, role-based access control, regular backups, staff training in data protection, and regular security reviews in accordance with the National Security Framework (ENS) and industry best practices.
10. Changes to this policy
We reserve the right to update this Privacy Policy to adapt it to regulatory or technical changes. Any substantial modification will be communicated through the website. We recommend that you consult this page periodically. The date of the last update is indicated at the beginning of the document.