Skip to content
GP9--:-- Barcelona & Madrid

Privacy Policy

Last updated: 6 August 2026 · Provisional text

This English version is provided for convenience. In the event of any discrepancy, the Spanish version prevails.

Data controller
Grup de Projectes 9 Consulting, S.L.
Tax ID (NIF)
B56966542
Address
C. Sócrates, 66, 08030 Barcelona (Spain)
Data protection contact
hola@gp9consulting.com
01

Scope

This policy describes how GP9 processes personal data associated with the use of the corporate website, served on gp9.es and gp9.mx. It does not cover other sites or services of the company (such as the client portal or the employee portal), which provide their own information.

02

Data we process

  • Identification and professional contact data provided in the contact form: name, email address, telephone, company and the content of the message.
  • Data provided in the job application form, including the attached CV.
  • Technical data about the use of the site for analytics, only if you accept analytics cookies.
03

Source of the data

The data comes from you, when you provide it directly through the site forms.

04

Purposes and legal bases

  • Handling professional contact requests. Basis: the data subject’s consent and, where applicable, pre-contractual measures.
  • Managing job applications. Basis: consent and pre-contractual measures taken at the data subject’s request.
  • Measuring the use of the site in order to improve it. Basis: consent (analytics cookies).

Providing the form data is necessary to handle your request; if it is not provided, it will not be possible to respond.

05

Retention periods

Contact requests are kept for as long as necessary to handle them and, afterwards, for the limitation periods of the applicable legal actions and obligations. Once those periods have elapsed, the data is securely deleted.

Job applications are kept for the selection process they are submitted to and for the period determined for future processes.

06

Recipients and data processors

To provide the service, GP9 uses providers that may access personal data on GP9’s behalf and under its instructions. These providers belong to the following categories:

  • Platform hosting and maintenance providers.
  • Email and communications service providers.
  • Tax, accounting and legal advisers.

All of them act as data processors under contracts signed in accordance with Article 28 of the General Data Protection Regulation. You may request the updated list of processors by writing to the address indicated in the panel above. Data may also be disclosed to public authorities where legally required.

07

International transfers

The site’s infrastructure may involve international data transfers; in that case, the safeguards required by current legislation are adopted (adequacy decisions or standard contractual clauses under Article 46 of the GDPR).

08

Rights of data subjects

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by sending your request to hola@gp9consulting.com, indicating the right you wish to exercise and attaching a document proving your identity.

No automated decisions are taken that produce legal effects on you or similarly significantly affect you. If you consider that the processing does not comply with the regulations, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

09

Security

GP9 applies appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including restricting access to information and encrypting communications over HTTPS.

10

Other legal information

Ownership of the site is stated in the legal notice. The use of cookies is detailed in the cookie policy.

11

Changes to this policy

This policy may be updated to adapt it to regulatory changes or to the service itself. The version in force will always be the one published on this page.