1. Introduction
This Privacy Policy explains how Crisfa Capital collects, uses, stores and protects personal data when you visit our website or contact us through our online forms.
We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable Spanish data protection laws.
2. Data Controller
Crisfa Capital
Santa Ponsa
Spain
Email: info@crisfacapital.com
3. Data We Collect
We may collect and process the following personal data:
- – Name
- – Email address
- – Telephone number
- – Information submitted through contact forms
- – Technical usage data (IP address, browser type, device information, pages visited, timestamps)
- – Cookie and analytics data where consent has been provided
4. Contact Forms
When you contact us through our website forms, we process the information you provide in order to:
- – Respond to your inquiry
- – Provide requested information
- – Communicate regarding our services
- – Process potential business or property-related requests
The legal basis for processing this data is your consent pursuant to Article 6(1)(a) GDPR and/or our legitimate interest pursuant to Article 6(1)(f) GDPR in responding to inquiries.
We only collect the information necessary to process your request.
5. Hosting and Website Infrastructure
Our website is hosted by:
Arsys Internet S.L.U.
Spain
Arsys may process technical data such as IP addresses, server logs and connection data in order to provide secure hosting services.
The legal basis for this processing is Article 6(1)(f) GDPR (legitimate interest in secure and reliable website operation).
6. WordPress and Website Technologies
Our website is built using:
- – WordPress
- – Elementor
- – WP Residence Theme
- – WPML
- – UpdraftPlus
- – CookieYes
- – EasyFonts
These systems may technically process certain user data necessary for website functionality, language preferences, security and content delivery.
7. Cookies and Consent Management
Our website uses cookies and similar technologies.
We use the CookieYes consent management platform to manage user consent in accordance with GDPR requirements and Google Consent Mode v2.
You may:
- – Accept cookies
- – Reject non-essential cookies
- – Customize your cookie preferences
- – Withdraw consent at any time
Your consent preferences can be updated via the cookie settings link available in our Cookies Policy.
8. Google Analytics
We use Google Analytics 4, a web analytics service provided by:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google Analytics helps us understand how visitors use our website, improve website performance and optimize user experience.
Google Analytics may process:
- – IP address
- – Device information
- – Browser information
- – Website interactions
- – Approximate geographic location
- – Usage statistics
We use Google Analytics only after obtaining your consent through our cookie banner.
Google Analytics is implemented via Google Tag Manager and configured with Google Consent Mode v2.
We have configured Google Analytics to:
- – Respect consent preferences
- – Reduce data collection where possible
- – Avoid unauthorized tracking before consent
The legal basis for this processing is Article 6(1)(a) GDPR (consent).
You can withdraw your consent at any time via the cookie settings.
More information:
https://policies.google.com/privacy
9. Google Tag Manager
We use Google Tag Manager, a tag management system provided by Google Ireland Limited.
Google Tag Manager itself does not typically store personal data but enables the loading and management of other website tags and services.
The use of Google Tag Manager is based on our legitimate interest in efficient website management pursuant to Article 6(1)(f) GDPR.
10. Locally Hosted Fonts
We use EasyFonts to host fonts locally on our own server.
No connection to Google font servers is established when visiting our website.
This helps improve privacy and reduce third-party data transfers.
11. Data Retention
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by applicable law.
Contact inquiries are generally retained only for as long as necessary to process the request and any related communication.
12. Data Sharing
We do not sell personal data.
We may share data with trusted service providers where necessary for:
- – Website hosting
- – Analytics
- – Security
- – Technical maintenance
These providers process data only on our behalf and under appropriate data protection agreements where required.
13. International Data Transfers
Some services used on this website, including Google services, may involve transfers of personal data outside the European Economic Area (EEA), including to the United States.
Where such transfers occur, appropriate safeguards such as Standard Contractual Clauses (SCCs) are implemented where required.
14. Your Rights
Under GDPR, you have the right to:
- – Access your personal data
- – Rectify inaccurate data
- – Request deletion of your data
- – Restrict processing
- – Object to processing
- – Withdraw consent at any time
- – Request data portability
- – Lodge a complaint with a supervisory authority
To exercise your rights, please contact:
15. Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse or disclosure.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect legal, technical or operational changes.
The latest version will always be available on this website.
17. Contact
If you have questions regarding this Privacy Policy or the processing of your personal data, please contact:
Crisfa Capital
Santa Ponsa
Spain
Email: info@crisfacapital.com