Privacy Notice

1. Who is responsible for your data

The data controller is Gotoclient SLU (VAT nbr ESB65149825), with registered address at Plaça de la Gal·la Placídia 5-7, escala C, 7è 1a, 08006 Barcelona, Spain. You can reach us through the contact page on this site.

2. What data we collect and why

Account data (name, email, login credentials): to create and manage your account and provide the service. Legal basis: performance of a contract.

Assessment and form data (your answers, contact details, newsletter consent): to deliver your results, respond to your enquiries and, only with your explicit consent, send you our newsletter. Legal basis: performance of a contract and consent.

Usage and technical data (pages visited, device identifiers, IP address): to keep the service secure, prevent fraud and improve the product. Legal basis: legitimate interests.

Support and contact messages: to answer you and keep a record of the conversation. Legal basis: legitimate interests.

Payment data is collected and processed directly by Paddle, our Merchant of Record; we do not store your card details.

3. Who we share data with

Service providers that process data on our behalf (hosting, analytics, email delivery and support tooling), under appropriate data-processing agreements.

Paddle, as Merchant of Record, for the sale of products, subscription management, payments, tax compliance and invoicing.

Professional advisers (legal, accounting) where necessary, and public authorities where required by law.

4. International transfers

Some of our service providers process data outside the EEA. Where this happens, we rely on adequacy decisions or Standard Contractual Clauses to ensure an equivalent level of protection.

5. Retention

We keep personal data only for as long as needed for the purposes above and for applicable legal limitation periods. When data is no longer needed, it is deleted or anonymised.

6. Your rights

Under the GDPR you have the right to access, rectify and erase your data, to restrict or object to processing, to data portability, and to withdraw consent at any time (for example, to unsubscribe from the newsletter). We respond to requests within one month.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) or your local supervisory authority.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit and access controls limited to authorised personnel.

8. Cookies

This site uses essential cookies required for sign-in and security. If analytics or marketing cookies are introduced, we will update this notice and request consent where required. You can manage cookies through your browser settings.