Legal notice and privacy policy

Legal notice

Website ownership

In compliance with Article 10 of Law 34/2002 of 11 July on information society services and electronic commerce, the following identifying details of the owner of this website are provided:

Owner: Gabriel Grassia Palmón
Email: [email protected]
Trading name: Dataneuf is a trading name used by the owner identified above.

Purpose

This website is informational and presents the owner's professional activity. Access and browsing require no registration and do not constitute the purchase of any service.

Terms of use

Access is free of charge. Users undertake to use the site in accordance with the law, this notice and good faith. The owner endeavours to keep the information accurate and current but does not warrant that it is free of errors or that the service will be uninterrupted, and reserves the right to modify the contents without prior notice.

Intellectual property

The contents of this site (text, design, source code and distinctive signs) belong to the owner or to third parties who have authorised their use. Reproduction, distribution, public communication or transformation without express authorisation is prohibited, save for uses permitted by law. Quotation is permitted where the source is stated and the original is linked.

Figures reproduced on this site from third-party publications are attributed to their publisher and are used under quotation. Datasets referenced in our methodology remain subject to the licence of their respective publishers.

Cookies

This website does not use cookies or any other technology for storing or retrieving data on the user's device that would require consent under Article 22.2 of Law 34/2002. It loads no analytics, no advertising tags and no third-party fonts or scripts.

Governing law

This notice is governed by Spanish law. Any dispute shall be submitted to the courts having jurisdiction under the applicable rules.

Privacy policy

1. Controller

Gabriel Grassia Palmón. Contact: [email protected]. No data protection officer has been appointed, as none of the circumstances in Article 37 of Regulation (EU) 2016/679 or Article 34 of Spanish Organic Law 3/2018 applies.

2. Data we process and where it comes from

Professional contact data from public sources. In the course of our market research and professional outreach we collect contact data relating exclusively to a person's professional capacity: name, job title and organisation, professional email address, professional telephone where published, public professional profile, and the origin and date of collection.

This data comes from publicly accessible sources: corporate websites, professional directories and registers, sector publications, press releases and professional profiles published by the person or their organisation. We do not purchase contact databases and we do not process data whose origin we cannot evidence. We process no special categories of data under Article 9.

Data from people who contact us. When someone writes to us we process their email address, their name and whatever they choose to include in the message.

3. Purposes and legal basis

Market research and professional contact. Contacting professionals to request participation in interviews and studies, and analysing the results in aggregate. Legal basis: legitimate interest (Article 6(1)(f)), read with Article 19 of Spanish Organic Law 3/2018, which presumes lawful the processing of contact data for the purpose of maintaining a relationship with the legal person the individual works for. A summary of the balancing test we carried out is available on request.
Responding to communications. Legal basis: legitimate interest and, where the exchange concerns a contractual or pre-contractual relationship, Article 6(1)(b).
Commercial communications. Legal basis: prior express consent (Article 6(1)(a) and Article 21 of Law 34/2002), or a prior contractual relationship under Article 21.2 of that law. Consent may be withdrawn at any time.
Suppression list. Recording requests not to be contacted. Legal basis: legal obligation (Article 6(1)(c)).

We take no automated decisions producing legal or similarly significant effects, and we do not carry out profiling.

4. Retention

Professional contact data: for as long as the purpose subsists and in any case no more than twenty-four months from the last contact without a reply, after which it is deleted. Correspondence: for the duration of the exchange and twelve months thereafter. Suppression list: the minimum necessary information, namely email address and date of request, is kept indefinitely for the sole purpose of ensuring the person is not contacted again.

5. Recipients

We do not disclose personal data to third parties except where legally required. We use processors under an Article 28 agreement: Google Ireland Limited (email, storage and office software) and Cloudflare, Inc. (website hosting and DNS).

6. International transfers

Our email provider is established in the European Union. In providing the service, transfers may occur to Google LLC and other group entities in the United States and other third countries. Such transfers rely on Commission Implementing Decision (EU) 2023/1795 on the adequacy of the EU-US Data Privacy Framework and, in the alternative, on the Standard Contractual Clauses approved by Commission Implementing Decision (EU) 2021/914. Information on the applicable safeguards is available on request.

7. Your rights

You may exercise the rights of access, rectification, erasure, restriction, portability where applicable, objection to processing based on our legitimate interest, and withdrawal of consent. Where data is processed for direct marketing you may object at any time without giving reasons, and processing for that purpose will cease immediately.

Write to [email protected] stating the right you wish to exercise. To stop receiving our messages it is enough to reply to any of them saying so; we will add your address to our suppression list and will not contact you again. We respond within one month of receipt, extendable by two further months where complexity or volume justifies it, in which case we will tell you.

8. Complaints

If you consider that the processing of your data does not comply with the applicable rules, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es). We would be grateful if you would raise it with us first.

9. Changes

We may update this policy to reflect regulatory or operational changes. The version in force is always the one published at this address, with its date.

Last updated: 2026-08-18