Privacy policy

We process the data that the user voluntarily provides through the contact forms or the enabled communication channels (for example, name, email, phone number and the content of the message).

If the user interacts with the website's chat assistant (bot), we may store the content of the conversation in order to handle the query and improve our service and the quality of the answers. The bot is an artificial-intelligence assistant.

We may also process navigation data in aggregate form for statistical purposes, in accordance with the Cookies Policy.

Data is processed to respond to users' enquiries and requests, manage the commercial relationship and, where applicable, send information about our services when there is a legitimate basis to do so.

The legal basis is the consent of the data subject when submitting their request, the application of pre-contractual measures at the data subject's request, and the controller's legitimate interest in responding to the communications received.

Data will be kept for the time necessary to handle the request and, subsequently, for the legally required periods. Once no longer necessary, it will be deleted with appropriate security measures.

Data will not be shared with third parties except by legal obligation. Where applicable, technology service providers acting as data processors (for example, web hosting or communication tools) may access the data, with the guarantees required by regulations. These providers are currently: Cloudflare, Inc. (domain registration and contact email routing), Cal.com, Inc. (appointment scheduling, on its European region cal.eu) and Google LLC (Google Calendar, availability sync).

The user may exercise their rights of access, rectification, erasure, objection, restriction of processing and portability by contacting contacto@majstrategygroup.com, indicating the right they wish to exercise.

Users also have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es) if they consider that the processing does not comply with current regulations.

The controller applies the appropriate technical and organisational measures to ensure the security of personal data and prevent its alteration, loss, unauthorised processing or access.

This policy may be amended to adapt it to regulatory changes or changes in the activity. Periodic review is recommended.