Meta-Data
Services
Compliance NIS2 consultingENS complianceISO 27001 See the whole area →
Offensive security Infrastructure pentestingRed teamSocial engineering See the whole area →
Managed cybersecurity Managed SOCCybersecurity departmentManaged backup See the whole area →
Governance and strategy Master planExternal CISORisk assessment See the whole area →
Awareness and training Cybersecurity trainingExecutive trainingSecure development See the whole area →
Business continuity Continuity planDisaster recoveryCrisis exercises See the whole area →
SondrivaSecutivaKnowledgeAbout us
ES
Get in touch
Compliance Offensive security Managed cybersecurity Governance and strategy Awareness and training Business continuity
Sondriva Secutiva Knowledge About us Get in touch
Home/Privacy policy

Legal

Privacy policy and legal notice

How Meta-Data Digital, S.L. processes your personal data, on what legal basis and for how long, and how you can exercise your rights.

Last updated: June 2026.

The personal data you provide to us through any of the means made available on the website meta-data.es will be processed by Meta-Data Digital, S.L. in accordance with the following privacy policy.

1. Privacy policy

1.1. Identity of the controller

Identity: Meta-Data Digital, S.L. (hereinafter, the Controller).
Postal address: Paseo de Pamplona 6, 2B, 31500 Tudela (Navarra).
Telephone: (+34) 623 10 89 79.
Email: [email protected].
Data Protection Officer contact: [email protected].

1.2. Processing activities

Below we inform you of the data processing activities covered by this policy, indicating the legal basis under the General Data Protection Regulation (hereinafter, GDPR) and the retention period, to which the time needed to comply with legal obligations and address any liabilities that may arise must be added.

Processing activityLegal basisRetention period
Handling of information and enquiry requests, including the preparation of service proposals and the provision of demonstrations of our products.Art. 6.1.a GDPR (consent) and art. 6.1.b GDPR (pre-contractual measures at the request of the data subject).The time needed to handle and manage your request.
Sending commercial communications by electronic means about Meta-Data services. Where a prior contractual relationship exists, unless you object, we may send you commercial communications.Art. 6.1.f GDPR (legitimate interest, on the basis of art. 21.1 of the Spanish Law on Information Society Services and Electronic Commerce).For as long as you wish to keep receiving them and do not object.
Electronic newsletter (El Radar): management of the subscription and periodic sending of the newsletter.Art. 6.1.a GDPR (consent).For as long as you wish to keep receiving it and do not object.
Recruitment processes and talent pool: management of your application in open and future recruitment processes, including the processing of the CV you send us through the employment form.Art. 6.1.a GDPR (consent).One year in the talent pool if no hiring takes place, unless you request the erasure of your data beforehand.
Contacts and meetings at events, trade fairs and conferences where Meta-Data is present.Art. 6.1.a GDPR (consent).The time needed for the management of the event.
Representatives and contact persons: management of the relationship with the representative or contact person of an organisation. Meta-Data has a specific policy, which you can consult in the data protection policy.Performance of the contract or business relationship.According to the specific policy.

If at any time you are asked for authorisation for a processing activity that requires consent, not granting it, or withdrawing it later, will have no consequences for you. Nor will your objection to processing based on legitimate interest. In the forms, mandatory fields are marked with an asterisk; the rest are optional.

1.3. Information that may be collected

Through the website forms we collect identification and contact data, such as name, surname, email or telephone. In certain specific forms you may send us additional information, such as the reason for your enquiry or your CV in the employment form. This website does not use analytics or tracking cookies, so we do not record your browsing for that purpose.

1.4. Recipients

As a general rule, except where required by law, your data will not be disclosed or transferred to third parties without your prior consent. Some disclosures may be imposed by regulations or by obligations towards public authorities. Others will be a necessary consequence of providing the service, in which case we formalise with those third parties the required processing agreement and, where an international transfer takes place, we ensure that the country offers a level of protection equivalent to that of the European Union.

Categories of third parties that may process data on behalf of the Controller:

  • Postal, distribution and courier services.
  • Archiving, custody, storage and digitisation services.
  • Administrative services.
  • IT services: electronic custody, electronic certification, backups and others related to information technologies.

Place where the services are provided: Spain and, in some cases, the European Union.

1.5. Rights

You may exercise the rights of access, rectification, erasure and portability. In certain circumstances you may request the restriction of or object to the processing, in which case the Controller will stop processing your data, except where a legal obligation exists, or until the prescription of any actions that may apply.

You may exercise your rights by writing to [email protected], enclosing a copy of your ID document or another document attesting your identity. You may also contact the supervisory authority; in Spain, the Spanish Data Protection Agency, AEPD (aepd.es).

1.6. Security measures

As a company specialised in cybersecurity, we apply the appropriate technical and organisational measures to protect your personal data against unauthorised alteration, loss, processing and access, taking into account the state of the art and the risk associated with each processing activity.

1.7. Changes to this policy

We may update this policy to adapt it to legislative developments or to changes in our processing activities. We recommend that you review it periodically; the date of the last update appears at the top of the page.

2. Legal notice

2.1. Identification details of the owner

In accordance with article 10 of Law 34/2002, of 11 July, on information society services and electronic commerce, you are informed that the owner of this website is Meta-Data Digital, S.L., with registered office at Paseo de Pamplona 6, 2B, 31500 Tudela (Navarra), holding Tax ID (N.I.F.) 71459630, registered in the Commercial Registry of Navarra, volume 2070, page 70, sheet NA-41384.

2.2. Contact

For any matter you may contact Meta-Data Digital, S.L. at the telephone number (+34) 623 10 89 79 or at the email [email protected].

2.3. Conditions of use

Access to this website is free of charge and confers the status of user, who undertakes to make appropriate use of the content and services in accordance with the law, this legal notice and good faith.

2.4. Intellectual and industrial property

The content of this website, including texts, images, trademarks, logos and design, is owned by Meta-Data Digital, S.L. or by third parties who have authorised its use, and is protected by intellectual and industrial property regulations. Its reproduction, distribution or public communication is not permitted without due authorisation.

2.5. Liability

Meta-Data endeavours to ensure that the information on the site is correct and up to date, but does not guarantee the absence of errors or the permanent availability of the site. Meta-Data shall not be liable for damages arising from the use of the site or from the presence of viruses or other elements beyond its control.

2.6. Links

This site may include links to third-party pages. Meta-Data is not responsible for the content or the privacy policies of those external sites.

2.7. Applicable law and jurisdiction

This legal notice is governed by Spanish law. For the resolution of any dispute, the parties shall submit to the courts and tribunals having jurisdiction in accordance with the applicable regulations.

El Radar

What matters, when it matters: threats we see, regulation on the move and advice you can actually apply. No noise.

Meta-Data

End to end cybersecurity: regulatory compliance, offensive security, AI assisted managed monitoring and training. We implement it, put it to the test and defend it, with a team of certified specialists.

Services

ComplianceGovernance and strategyOffensive securityManaged cybersecurityAwareness and trainingBusiness continuity

Featured

NIS2 consultingENS complianceISO 27001Infrastructure pentestingRed team

About

About usAccreditationsTeamCareersCybersecurity in Navarra

Contact

[email protected]Get in touchEl Radar
Meta-Data
Privacy and legal noticeCookie policyData protectionInformation security policy