Legal
Privacy policy
This is a translation; in case of discrepancy the Spanish version prevails.
Who is responsible for your data
Mutatia The Mindshift, S.L. (MUTATIA)
Tax identification number (NIF): B88808845
Registered office: C/ Isla de la Toja, 2, chalet 17, Boadilla del Monte (Madrid)
Email: hola@mutatia.com
We have not appointed a data protection officer, as we are not required to do so.
What data we process, why and for how long
| When | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| You contact us through the "Let's talk" form | DataName, email, company, reason for contacting us and message | PurposeTo reply to you and, if you request it, prepare a proposal | Legal basisYour request (Art. 6(1)(b) GDPR) | Retention24 months from our last contact |
| You take the assessment | DataName, email, company, job title, answers and result | PurposeTo calculate your level, send you the report and, if you request it, propose a Judgment Clinic | Legal basisYour request (Art. 6(1)(b) GDPR) | Retention24 months |
| You email us | DataThe information you send us | PurposeTo reply to you | Legal basisYour request (Art. 6(1)(b) GDPR) | Retention24 months |
| You engage our services | DataContact and billing details | PurposeTo provide the service and invoice for it | Legal basisContract and legal obligation (Art. 6(1)(b) and (c) GDPR) | RetentionFor the duration of the contract and 6 years thereafter (Art. 30 of the Spanish Commercial Code) |
| You accept analytics cookies | DataCookie identifiers, pages viewed, clicks, device and approximate location | PurposeTo understand which content is read and improve the website | Legal basisYour consent (Art. 6(1)(a) GDPR; Art. 22.2 LSSI-CE) | Retention14 months in Google Analytics |
We only ask for the data needed to deal with your request; without it, we cannot reply to you or send you the report.
Commercial communications
We will not send you commercial communications by email unless you ask us to. Each one includes a simple way to unsubscribe.
Who else has access
Only service providers acting as data processors under a contract with us:
- Webempresa: website hosting, in the EU.
- Brevo (Sendinblue SAS, France): emails sent from the form and the assessment.
- Google Ireland Limited (Google Workspace): email services.
- Google Ireland Limited (Google Analytics): web analytics, only if you accept it.
Google's services may involve transfers to Google LLC (United States), covered by the EU-US Data Privacy Framework (adequacy decision of 10 July 2023).
Our forms, CRM and email log run on our own server. We do not sell personal data or disclose it to third parties.
Automated decision-making
The assessment calculates an indicative level. It has no legal effects on you and does not significantly affect you, so it is not automated decision-making within the meaning of Art. 22 GDPR.
Your rights
You have the right of access, rectification, erasure, objection, restriction of processing and data portability. You may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal; for analytics, through "Cookie settings" at the foot of every page. To exercise your rights, write to hola@mutatia.com; we will reply within one month. If you are not satisfied, you may lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es · C/ Jorge Juan 6, 28001 Madrid).
Children
Our services are intended for organisations; we do not knowingly process the personal data of children under 14.
Security
We use HTTPS, restrict access to those who need it and review access permissions.
Last updated: 19 October 2026