Privacy Policy

Data Controller Information

prozican S.A. is the data controller for the personal information we collect. You can contact us at:

Data We Collect

The data we collect depends on how you interact with our services. We may collect the following types of personal information:

Contact and Identity Information

• Name and contact details (email address, phone number, postal address)
• Professional information (job title, company name)
• Communication preferences
• Information provided through contact forms or enquiries

Technical Information

• IP address and browser information
• Device information and operating system
• Website usage data and analytics
• Cookie data and preferences

Client Information

• Financial information relevant to our services
• Investment preferences and risk tolerance
• Documentation required for regulatory compliance
• Transaction and account information

How We Use Your Information

We use of your data is based on legitimate business interests, contractual necessity, legal obligations, and your consent where required. Specifically, we use your information to:

• Provide asset management services and financial advice
• Respond to your enquiries and communications
• Comply with legal and regulatory requirements
• Improve our website and services through analytics
• Send relevant marketing communications (with your consent)
• Protect against fraud and ensure security
• Maintain business records and conduct internal operations

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please see our Cookie Policy.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contract: Processing necessary for the performance of our services
• Legitimate Interest: For business operations, security, and service improvement
• Legal Obligation: To comply with financial regulations and legal requirements
• Consent: For marketing communications and non-essential cookies

Data Sharing and Disclosure

We may share your personal information with:

• Regulatory authorities and government agencies as required by law
• Professional service providers (legal, accounting, audit firms)
• Technology service providers who support our operations
• Financial institutions and custodians for client services
• Third parties with your explicit consent

We do not sell your personal information to third parties for commercial purposes.

Data Retention

We retain personal information for as long as necessary to fulfil the purposes outlined in this policy, comply with legal obligations, and resolve disputes. Specific retention periods include:

• Client records: 7 years after relationship termination (regulatory requirement)
• Marketing data: Until consent is withdrawn or 3 years of inactivity
• Website analytics: 26 months (Google Analytics default)
• Communication records: 3 years for business enquiries

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your data (subject to legal requirements)
• Restriction: Limit how we process your data
• Portability: Receive your data in a portable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for marketing or cookies

To exercise these rights, please contact us at privacy@prozican.xyz or +34 935 187 638.

International Data Transfers

We primarily process data within the European Union. When we transfer data outside the EU, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the European Commission
• Standard contractual clauses approved by the European Commission
• Binding corporate rules for multinational organisations
• Certification schemes and codes of conduct

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Access controls and authentication systems
• Regular security assessments and monitoring
• Staff training on data protection
• Incident response procedures

Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Complaints

If you believe we have not handled your personal data in accordance with this policy, you have the right to lodge a complaint with the relevant supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD).

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website with a new "last updated" date. We encourage you to review this policy periodically.