Data controller
The data controller of personal information collected through this website and the managent platform is Malamute Holding, S.L. (CIF B87614400), Avenida de Ahones 7, 28043 Madrid, Spain ("managent", "we", "our"). For any privacy-related question or to exercise your rights, contact privacy@managent.com.
Information we process
We process the personal data you provide directly — for example, when you contact us, complete the digital work index survey, sign in to the client portal, request a proposal, or subscribe to the newsletter. This typically includes your name, email, company, role, and the content of your message. We also process operational and telemetry data needed to deliver the platform to our customers, and limited technical data (IP address, user agent, device and browser identifiers) collected automatically when you use the website.
Newsletter subscriptions
When you subscribe to our newsletter, we ask for your email address and an explicit consent to receive marketing communications. We use a double opt-in process: you confirm your subscription via a link sent to your email before any newsletter is delivered. We retain a record of your consent — the exact wording you accepted, the timestamp, your IP address, and the user agent — to demonstrate the lawful basis for processing under Article 6(1)(a) GDPR. You can withdraw consent at any time by clicking the unsubscribe link present in every newsletter, by visiting your unsubscribe link, or by emailing privacy@managent.com. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Legal bases for processing
We process personal data under the following legal bases (Article 6 GDPR): (a) consent — for newsletter subscriptions and optional analytics; (b) contract — to provide the services you or your employer has contracted; (c) legal obligation — to comply with tax, accounting, and other applicable laws; (d) legitimate interests — to operate, secure, and improve the website and platform, prevent fraud, and respond to your inquiries, balanced against your rights and freedoms.
How we use data
We use personal data to provide the website and platform, deliver the services contracted by our customers, communicate with you (including responding to inquiries and sending the newsletter where you have consented), monitor and improve quality, reliability, and security, comply with legal obligations, and defend legal claims.
Recipients and processors
We share personal data only with service providers who act on our behalf as data processors under written agreements consistent with Article 28 GDPR. Current categories include cloud hosting (Google Cloud Platform, Firebase), email delivery (Resend, Amazon SES), payments (Stripe), workplace tools (Google Workspace), and analytics. A current list of sub-processors is available on request. We do not sell personal data.
International transfers
Some of our processors are established outside the European Economic Area (notably the United States). When we transfer personal data internationally, we rely on transfer mechanisms recognized under Article 46 GDPR — typically the European Commission's Standard Contractual Clauses, supplemented where appropriate by additional technical and organizational measures.
Retention
We retain personal data only for as long as necessary for the purposes for which it was collected. Newsletter subscriber records are retained until you unsubscribe and for a reasonable period thereafter to honor suppression and demonstrate compliance. Customer data is retained for the duration of the commercial relationship and as required by applicable law (typically up to 6 years for tax and accounting records under Spanish law). Website telemetry is retained for shorter periods proportionate to its purpose.
Security
We apply technical and organizational safeguards appropriate to the nature of the data and the risks of processing, including encryption in transit, access controls, audit logging, regular reviews, and incident-response procedures. No system is fully impervious; if we detect a personal-data breach with risk to your rights, we will notify you and the competent authority (AEPD, in Spain) as required by Articles 33 and 34 GDPR.
Your rights
Under the GDPR and Spain's LOPDGDD, you have the right to access your personal data; to rectify inaccurate data; to erase data; to restrict or object to processing; to data portability; and to withdraw consent at any time. You may exercise these rights by emailing privacy@managent.com from the address concerned, or by writing to us at the postal address above. We will respond within one month (extendable in complex cases). You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or the data-protection authority of your habitual residence.
Children
Our website and services are intended for businesses and adult users. We do not knowingly collect personal data from children under 14. If you believe a child has provided us with personal data, contact privacy@managent.com and we will delete it.
Changes to this policy
We may update this privacy policy as the service or the law evolves. The date at the top of this page reflects the latest revision. Material changes affecting how we use your personal data will be communicated where appropriate.