Legal information
Privacy policy
Last updated: 29 September 2026
At Centre de Negocis Arrabassada C.B. we take your privacy seriously. This policy explains clearly how we process the personal data you provide through this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
This English version is provided for information purposes. In the event of any discrepancy, the Spanish version shall prevail.
1. Data controller
- Controller: Centre de Negocis Arrabassada C.B.
- Tax ID (CIF): E43950641
- Address: C/ Josep Maria de Sagarra, 12, Esc. C, bajos 2, 43007 Tarragona (España)
- Telephone: +34 977 223 124
- Email: luis.sanz@cnarrabassada.com
2. What data we process
We process the data you voluntarily provide through the contact form, by email or by phone: your name, company, email address, telephone number and the content of your message. We may also process technical browsing data as described in our cookie policy.
We do not request special categories of data. Please do not include them in your messages.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Responding to your enquiries and requests for information or a visit, and sending you any proposal you request. | Your consent (Art. 6(1)(a) GDPR) and steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). |
| Managing the contractual relationship if you use our services (office rental, meeting room or registered office address). | Performance of a contract (Art. 6(1)(b) GDPR). |
| Complying with legal, tax and accounting obligations, including anti-money laundering rules applicable to registered office services. | Compliance with legal obligations (Art. 6(1)(c) GDPR). |
| Displaying the Google map and, where applicable, measuring use of the website. | Your consent, given through the cookie settings panel (Art. 6(1)(a) GDPR). |
We do not make automated decisions or create profiles with your data.
4. How long we keep your data
We keep enquiry data for as long as needed to respond and, at most, for one year from our last communication if no contract follows. If you use our services, we will keep your data for the duration of the relationship and afterwards for the periods required by law (for example, six years for commercial and accounting records, or ten years where required by anti-money laundering legislation).
5. Recipients
We do not share your data with third parties unless legally required to do so (for example, with the tax authorities or the courts). To provide our services we use providers acting as data processors, with whom we have signed the agreements required by the GDPR:
- Web hosting: Vercel Inc. (United States).
- Contact form: Tally BV (Belgium, European Union), which stores form responses encrypted and within Europe.
- Meeting scheduling: Calendly LLC (United States).
If you book a meeting through the Calendly link, you will leave our website and the data you enter will be processed by Calendly LLC (United States) to manage the appointment on our behalf, in accordance with its privacy policy. We will only use that data to attend the requested meeting.
Where these providers are located outside the European Economic Area, international transfers are covered by the EU-US Data Privacy Framework or by standard contractual clauses approved by the European Commission.
6. Your rights
You may exercise the following rights at any time:
- Access: find out what data about you we process.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask us to delete your data when it is no longer needed.
- Objection and restriction of processing in the cases provided for by law.
- Portability: receive your data in a structured format.
- Withdraw your consent at any time, without affecting the lawfulness of prior processing.
To exercise them, write to us at luis.sanz@cnarrabassada.com or by post to our address, stating the right you wish to exercise. If you believe we have not processed your data correctly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Security
We apply appropriate technical and organisational measures to protect your data against loss, unauthorised access or alteration, such as encrypted communication (HTTPS) and restricted access to information.
8. Accuracy of data
You guarantee that the data you provide is accurate and undertake to inform us of any changes. If you provide data about third parties, you confirm that you have their consent to do so.
9. Changes to this policy
We may update this policy to reflect legal changes or changes to our services. The current version will always be published on this page, together with the date it was last updated.