Privacy policy
Last updated: 7 October 2026
This policy explains what personal data we process when you visit crearteseleccion.com, contact us, book a meeting or use our assistant, and what rights you have. It is governed by Regulation (EU) 2016/679 (GDPR) and Ley Orgánica 3/2018 de Protección de Datos Personales y garantía de los derechos digitales (LOPDGDD, the Spanish Organic Law on the Protection of Personal Data and Guarantee of Digital Rights).
1. Data controller
| Owner | Crearte Asesores S.L. (trade name: Crearte Selección, part of the Crearte Consulting group) |
|---|---|
| Tax ID (NIF) | B88161781 |
| Registered address | Pº Club Deportivo 1, 28223 Pozuelo de Alarcón, Madrid |
| Registration | Registro Mercantil de Madrid (Madrid Companies Registry), volume 37943, folio 81, General section, sheet M-675640, 1st entry |
| Contact | info@crearteconsulting.com · +34 606 61 77 41 |
For any data protection matter or to exercise your rights: hector.delgado@crearteconsulting.com or by post to the address above.
2. Basic information (first layer)
| Controller | Crearte Asesores S.L. |
|---|---|
| Purposes | Responding to enquiries, holding business meetings, providing our services, managing applications and responding through the website assistant. |
| Legal basis | Consent, pre-contractual measures, performance of a contract and legitimate interest, as applicable. |
| Recipients | We do not disclose data to third parties unless legally required to do so. We use providers acting as data processors. |
| International transfers | Some providers may process data outside the European Economic Area with the safeguards provided for in the GDPR. |
| Rights | Access, rectification, erasure, objection, restriction of processing and portability, and withdrawal of consent. |
3. What data we process, why and on what legal basis
| Situation | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| You write to us or call us | Name, email, phone number, company and whatever you tell us | Responding to your enquiry | Consent and, where applicable, pre-contractual measures (Art. 6(1)(a) and 6(1)(b) GDPR) | As long as needed to deal with your enquiry and, thereafter, the applicable legal periods |
| You book a meeting on Calendly | Name, email, date and time, and the answers you give when booking | Holding the meeting and analysing your needs | Pre-contractual measures at your request (Art. 6(1)(b) GDPR) | For the duration of the business relationship and the applicable legal periods |
| You engage our services | Contact details of people at your company and details of the assignment | Providing the service, invoicing and complying with legal obligations | Performance of the contract and legal obligation (Art. 6(1)(b) and 6(1)(c) GDPR) | For the term of the contract and the legal periods (tax and commercial) |
| You use the website assistant | The text you type in the chat | Guiding you around the website and answering your questions | Consent, by typing in the assistant (Art. 6(1)(a) GDPR) | We do not store conversations in our systems; see section 5 |
| You are a candidate on our job portal | Your profile data and your CV | Managing your application and considering you for recruitment processes | Consent and pre-contractual measures | As set out in the specific information shown on the portal itself |
| You browse the website | Technical connection data (IP address, browser, page requested) | Serving the website and keeping it secure | Legitimate interest (Art. 6(1)(f) GDPR) | The hosting provider's technical logs, for the period it determines |
We do not make automated decisions with legal effects concerning you, nor do we create profiles using data from this website. In our recruitment processes, the final decision is always taken by people.
4. Providers (data processors)
- Netlify: website hosting.
- Calendly: scheduling tool for booking meetings.
- Google (Google Workspace and Google Apps Script): email and technical intermediary for the assistant.
- Anthropic: artificial intelligence model that generates the assistant's answers.
- TalentForJobs: job portal platform.
Some of these providers may process data outside the European Economic Area, in particular in the United States. In such cases, transfers are covered by the safeguards provided for in the GDPR, such as the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission.
5. The website assistant and artificial intelligence
The website assistant helps you find the service or information you are looking for. It has two modes:
- Guided mode: runs in your browser using the website's content. What you select or type does not leave your device.
- AI mode: when you type a question, the text is sent through a technical intermediary (Google Apps Script) to Anthropic's artificial intelligence model, which generates the answer. You are talking to an artificial intelligence system, not a person, and its answers may contain errors.
We do not store conversations in our systems or use them for any other purpose. Anthropic processes the text in accordance with its terms for API customers. Please do not type personal data or confidential information into the assistant: to discuss a specific vacancy, book a meeting.
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability free of charge, and withdraw your consent at any time without affecting the lawfulness of processing carried out before its withdrawal. Write to us at hector.delgado@crearteconsulting.com stating which right you wish to exercise. We may ask you to verify your identity.
If you believe we have not handled your request properly, you may lodge a complaint with the Agencia Española de Protección de Datos (AEPD, the Spanish Data Protection Agency) (aepd.es).
7. Security
We apply appropriate technical and organisational measures to protect data: an encrypted connection (HTTPS) across the whole website, restricted access to information and providers that offer sufficient guarantees.
8. Minors
This website is aimed at companies and professionals. We do not knowingly collect data from children under 14.
9. Changes to this policy
We may update this policy to reflect changes in the law or in our services. The date of the last update appears at the top.
