Legal

Privacy policy

This policy explains what personal data we process when you visit equuscapital.es or get in touch with us, what we use it for and what rights you have. It is governed by Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD).

Who is the data controller

ENTRECOMETES, S.L. (trading as «Equus Capital»)
Registered office: C/ Sant Pere d'Alcàntara, 46, 07760 Ciutadella de Menorca (Balearic Islands), Spain
Tax ID (NIF/CIF): B-02786648
Registered at: Menorca Companies Registry, volume 184, folio 218, sheet IM-7243, entry 1
Email for privacy matters: info@equuscapital.es · Phone: +34 639 983 306

What data we process and why

  • Contact form and requests for information about opportunities. Name, email, phone number and whatever you tell us in the message. We use them to reply and, if you ask, to prepare a proposal. Legal basis: your consent (art. 6.1.a GDPR) and pre-contractual steps taken at your request (art. 6.1.b GDPR).
  • Booking a consultation. Name, email, phone number, the reason you give and the date and time you choose. We use them to manage the appointment and to send you the confirmation, the reminder and a follow-up message about that consultation. Legal basis: pre-contractual steps taken at your request (art. 6.1.b GDPR).
  • Contact by phone, email or WhatsApp. The data you give us through those channels, to deal with your request. WhatsApp is a service of WhatsApp Ireland Limited and is also subject to its own terms.
  • Client relationship. Identification and contact data, financial data and the documents needed for the engagement. Legal basis: performance of the contract (art. 6.1.b GDPR) and compliance with legal obligations (art. 6.1.c GDPR), including tax and accounting obligations and, where the transaction is subject to it, the prevention of money laundering (Spanish Law 10/2010, of 28 April).
  • Website usage statistics. Only if you accept analytics cookies. We explain this in the Cookie Policy. Legal basis: your consent (art. 6.1.a GDPR).
  • Monthly newsletter. Your email address, language, the page where you subscribed and the date and exact wording of the consent you ticked. We use them to send you the newsletter and communications about related services of the firm. To sign you up we ask you to confirm the address from an email (double opt-in). Legal basis: your consent (art. 6.1.a GDPR and art. 21 of Spanish Law 34/2002, LSSI). You can unsubscribe at any time with the link included in every issue or by writing to info@equuscapital.es.

We do not take automated decisions or build profiles with your data. We will not send you advertising without your consent, and you can ask us to stop writing to you at any time.

Professional secrecy

All information provided within a legal advice relationship is protected by lawyers' professional secrecy, regulated in article 542.3 of the Spanish Organic Law on the Judiciary and in the General Statute of the Spanish Legal Profession. That information may not be disclosed or used for any purpose other than providing the service entrusted to us.

How long we keep the data

Data provided through the forms and the consultation booking will be kept for a maximum of 2 years from the last contact, unless a contractual relationship is established. In that case it will be kept for the duration of the contract and for a further 5 years in accordance with the Spanish Civil Code and applicable commercial legislation, without prejudice to any longer periods required by tax and accounting rules. Where the transaction is subject to Law 10/2010, the documentation will be kept for 10 years, as required by its article 25. Data linked to legal files will be kept in accordance with the duty to retain documentation established by the General Statute of the Spanish Legal Profession.

Newsletter subscriptions that are not confirmed are deleted after 30 days. If you unsubscribe we stop writing to you immediately and only keep a record of the sign-up and the unsubscription for 3 years, so we can prove we had your consent.

Who can access your data

We do not sell your data or pass it to third parties, except where the law requires it or where it is necessary for the work you entrust to us (for example, notaries, registries, courts, public authorities or collaborating professionals). To provide the service we rely on suppliers that process data on our behalf:

  • Hostinger International Ltd.: hosting of the website and email.
  • Formspree, Inc. (United States): reception of the contact and opportunities forms.
  • Supabase, Inc.: database where we manage bookings, files and newsletter subscriptions, hosted in the European Union (Frankfurt).
  • Google Ireland Limited: calendar where appointments are recorded and, only if you accept cookies, Google Analytics and the Google Maps map.

International transfers

Some of these suppliers may process data in the United States. Google LLC adheres to the EU-U.S. Data Privacy Framework, which the European Commission recognises as providing an adequate level of protection. In other cases the transfer relies on the safeguards of article 46 GDPR, such as the standard contractual clauses approved by the European Commission. You can ask us for more information about these safeguards at info@equuscapital.es.

Your rights

You can exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw any consent you have given us without affecting what has already been processed. Just write to info@equuscapital.es or by post to the registered office shown above. If we have doubts about your identity we may ask you to prove it. We will reply within one month. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that the processing does not comply with the regulations.

Minors

Our services are intended for adults. We do not knowingly collect data from minors through this website.

Security and changes to this policy

We apply reasonable technical and organisational measures to protect the data, such as encrypted communications and restricted access to files. If we change this policy we will publish the new version here with its date.

Last updated: October 2026.