exponent

Privacy policy

Last updated: October 2026.

This policy explains how we process the personal data of people who contact us or use this website, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on data protection and digital rights (LOPDGDD).

Data controller

APM Asesores Privados 2002 SL (Exponent), tax ID B97190599, Paseo de la Alameda, 1, 46010 València, Spain. Phone +34 963 318 766. Email for any data protection matter: central@exponent.es.

What data we process

Only the data you give us: name, email address and, if you provide them, phone number, company, job title and the content of your message. We do not ask for special categories of data; please do not include them in your messages. The server also logs technical connection data (IP address, date and time, page requested) to keep the website secure.

Why we use it and on what legal basis

  • To answer your enquiry or request sent by form, email or phone. Legal basis: your consent and, when you ask about a service, steps taken before entering into a contract (art. 6.1.a and 6.1.b GDPR).
  • To provide the services you hire and manage our relationship with clients and suppliers. Legal basis: performance of a contract (art. 6.1.b GDPR).
  • To meet legal obligations, such as tax and accounting duties. Legal basis: legal obligation (art. 6.1.c GDPR).
  • To send you information about our activities, only if you asked for it or are a client and have not objected, under article 21 of the LSSI-CE. You can unsubscribe at any time from the message itself or by writing to us.
  • To keep the website secure using the server’s technical logs. Legal basis: our legitimate interest (art. 6.1.f GDPR).

Reports received through the whistleblowing channel are processed under Spanish Law 2/2023 on the protection of whistleblowers, with confidentiality guarantees and, if you wish, anonymously. The channel itself provides the specific information about that processing.

We do not make automated decisions or build profiles that have legal effects on you.

How long we keep it

Enquiry data is kept for as long as needed to answer and follow up, and for one year at most if it does not lead to a business relationship. Client data is kept for as long as the relationship lasts and then for the statutory limitation periods (for example, six years for commercial and accounting records). Server logs are deleted after a short period.

Who we share it with

We do not sell or transfer your data. Only the following may access it:

  • The members of our team who need it to assist you.
  • Providers of web hosting, email and IT support, acting as data processors under a contract that requires them to protect the data and use it only on our instructions.
  • Public authorities, judges and courts, where the law requires it.

We do not transfer data outside the European Economic Area, except where a technology provider may require it, and only with the safeguards the GDPR requires (for example, standard contractual clauses or the EU-US Data Privacy Framework). The website’s fonts are loaded from Google Fonts servers, which means your browser sends your IP address to Google to download them; Google does not set cookies for this purpose.

Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time and free of charge, and withdraw any consent you have given, without affecting the lawfulness of earlier processing.

To do so, write to central@exponent.es or by post to Paseo de la Alameda, 1, 46010 València, Spain, stating which right you wish to exercise. We will only ask for additional information to confirm your identity if we have reasonable doubts about it, as provided in article 12.6 GDPR. We will reply within one month.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Security

We apply technical and organisational measures appropriate to the risk to protect data against loss, unauthorised access or alteration, including encrypted connections (HTTPS) across the whole website.

Cookies

The use of cookies is explained in the cookie policy.

Changes to this policy

We may update this policy to reflect changes in the law or in our services. The date of the latest update appears at the top.