DATA PROTECTION

Last updated: 15/02/2026

1. Data controller

Controller: Peppers & Partners, S.L.
VAT/Tax ID: B22669774
Registered address: C/ Camino Viejo del Cura 110 – 3, 1ºA, 28109 Alcobendas (Madrid), Spain

Contact email: hello@peppersociety.com

2. What data we collect

We may process the following categories of data, depending on your interaction with the website:

Identification and contact data: name, email, phone (if provided).
Professional data: company, position, information about your project (if included in the message).
Navigation data: IP address, device identifiers, technical and analytical information (depending on cookies/tools).
Content of your enquiry: any information you write in forms or send us by email.

3. Purposes of processing

We process your data to:

Respond to requests and enquiries submitted via forms or email.
Manage commercial communications (only if you consent), for example: news, services, resources or invitations.
Improve the website and measure performance through analytics and technical tools (subject to cookie consent, where applicable).
Administrative and contractual management, if you engage our services.

4. Legal basis

The legal basis depends on the purpose:

Consent (Art. 6(1)(a) GDPR): when you write to us voluntarily or consent to marketing/cookies.
Pre-contractual measures or contract (Art. 6(1)(b) GDPR): when you request information to engage our services or are already a client.
Legitimate interest (Art. 6(1)(f) GDPR): site security, fraud prevention and basic technical improvement (without invading your privacy).
Legal obligation (Art. 6(1)(c) GDPR): tax/accounting compliance if a commercial relationship exists.

5. Data retention

Enquiries: for the time necessary to respond and carry out reasonable follow-up; afterwards, they will be blocked or deleted.
Clients and invoicing: for the applicable legal periods (tax/accounting obligations).
Marketing: until you withdraw your consent or unsubscribe.
Analytics/cookies: depending on the duration of each cookie (see separate Cookie Policy if applicable).

6. Recipients and data processors

We do not sell your data.

We may share data with providers who supply us with services (hosting, email, analytics, forms, web management), acting as data processors, with appropriate contracts and guarantees.

If international transfers take place (for example, technology providers outside the EEA), the safeguards provided by the GDPR will be applied (standard contractual clauses or other legal mechanisms).

7. Rights of users

You may exercise your rights of:

Access
Rectification
Erasure
Objection
Restriction
Portability
Withdraw consent at any time (without affecting prior processing)

To exercise them, write to hello@peppersociety.com with the subject:
"Data Protection – Exercise of Rights"
and attach a document confirming your identity (only if necessary for verification).

If you believe we have not processed your data correctly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).

8. Information security

We apply reasonable technical and organisational measures to protect your data and prevent unauthorised access, loss, alteration or disclosure.

9. Minors' data

This website and its services are not directed at persons under 14 years of age. If we detect data from minors, we will delete it.

10. Commercial communications

We will only send commercial communications if:

you have requested it, or
you have ticked a consent box, or
a prior relationship exists in accordance with applicable regulations, always with a clear opt-out option.

You may unsubscribe at any time by writing to hello@peppersociety.com.

11. Links to third parties

The website may include links to third-party sites (for example, social media). We are not responsible for their privacy policies. We recommend reviewing them.

12. Changes to this policy

We may update this policy to adapt it to legal or technical changes. We will publish the current version on this page with the update date.