Privacy Policy

Template for review by Spanish counsel before publication. Replace every field marked [ ] with the company’s registered details.

1. Data controller

Bimaris Capital, [legal entity name], with registered office at Calle Serrano XX, 28002 Madrid, Spain, and tax identification number [NIF/CIF], is the controller of the personal data collected through this website.

Contact for data protection matters: marina@bimariscapital.com.

2. What data we collect

• Contact form: first name, last name, email address and the content of your message.
• Application form: first name, last name, email address, telephone number, LinkedIn profile, area of interest, CV and cover message.
• Technical data: IP address, browser type and pages visited, where you have consented to analytics cookies.

3. Why we process it and on what legal basis

• To answer your enquiry — legal basis: your consent and our legitimate interest in responding to messages sent to us (Art. 6.1.a and 6.1.f GDPR).
• To assess a job application — legal basis: your consent and steps taken at your request prior to entering into a contract (Art. 6.1.a and 6.1.b GDPR).
• To operate and improve the website — legal basis: your consent for non-essential cookies (Art. 6.1.a GDPR).

4. How long we keep it

Enquiries are kept for up to [12] months after our last exchange. Applications are kept for up to [24] months so we can consider you for future openings, unless you ask us to delete them sooner. Data required by law is kept for the statutory retention period.

5. Who we share it with

We do not sell personal data. We share it only with service providers acting as processors under a written agreement — for example our email provider and website host — and with professional advisers or authorities where the law requires it. Where a provider is located outside the European Economic Area, transfers are covered by the European Commission’s Standard Contractual Clauses.

6. Your rights

You have the right to access your personal data, to rectify it, to erase it, to restrict or object to its processing, to data portability, and to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. Write to marina@bimariscapital.com to exercise any of these rights.

If you believe your data has not been handled correctly, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

7. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or alteration, and we review those measures periodically.

8. Changes to this policy

We may update this policy to reflect changes in our practices or in the law. The date at the top of this page shows when it was last revised.