1. Introduction

This Privacy Policy explains how Changeist S.L. ("we", "us", "our") collects, uses, shares, and protects your personal data when you use our website (www.changeist.com), services, or interact with us. We respect your privacy and are committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

Changeist S.L.
Carrer Gonzalez Tablas 5, Esc A-3, 3-1
08034 Barcelona, Spain
CIF: B10871531
Email: privacy@changeist.com

3. Personal Data We Collect

We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped as follows:

• Identity Data: Name, title, company name, position

• Contact Data: Email address, telephone numbers, postal address

• Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform

• Usage Data: Information about how you use our website and services

• Marketing Data: Your preferences in receiving marketing from us

• Communications Data: Includes communications we have with you

4. How We Collect Your Personal Data

We use different methods to collect data from and about you including:

• Direct interactions: When you contact us, subscribe to our publications, request marketing materials, provide feedback, or attend our events

• Automated technologies: As you interact with our website, we automatically collect Technical Data

• Third parties: We may receive personal data about you from various third parties such as analytics providers and service providers

5. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Where we need to perform the contract we are about to enter into or have entered into with you

• Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests

• Where we need to comply with a legal or regulatory obligation

• Where you have given consent

Purposes for Processing

• To provide our services to you

• To manage our relationship with you

• To improve our website, services, and customer relationships

• To make suggestions and recommendations to you about services that may be of interest to you

• To comply with legal obligations

6. Legal Basis for Processing

For each type of personal data we process, we rely on one or more of the following legal bases:

• Contract: Processing is necessary for the performance of a contract with you

• Legitimate Interest: Processing is necessary for our legitimate interests or those of a third party

• Legal Obligation: Processing is necessary for compliance with our legal obligations

• Consent: You have given consent for the processing

7. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period, we consider:

• The amount, nature, and sensitivity of the personal data

• The potential risk of harm from unauthorized use or disclosure

• The purposes for which we process the data

• Whether we can achieve those purposes through other means

• The applicable legal requirements

8. Your Rights

Under the GDPR, you have the following rights:

• Access: Request access to your personal data

• Correction: Request correction of inaccurate personal data

• Erasure: Request erasure of your personal data

• Restriction: Request restriction of processing of your personal data

• Data Portability: Request the transfer of your personal data

• Objection: Object to processing of your personal data

• Withdrawal of Consent: Withdraw consent at any time where we rely on consent to process your personal data

To exercise any of these rights, please contact us at privacy@changeist.com.

9. International Transfers

We may transfer your personal data outside the European Economic Area (EEA). Whenever we transfer your personal data outside the EEA, we ensure a similar degree of protection is afforded to it by implementing appropriate safeguards, such as:

• Using specific contracts approved by the European Commission

• Using providers based in countries that have been deemed to provide adequate protection

• Obtaining your explicit consent for the transfer

10. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

11. Cookie Policy

Our website uses cookies to distinguish you from other users. This helps us provide you with a good experience and allows us to improve our website. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies.

For detailed information about the cookies we use and the purposes for which we use them, please see our Cookie Policy.

12. Third-Party Links

Our website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

13. Changes to the Privacy Policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting the new privacy policy on this page and, where appropriate, notifying you by email.

14. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us at:

Email: privacy@changeist.com
Postal address: Carrer Gonzalez Tablas 5, Esc A-3, 3-1, 08034 Barcelona, Spain

15. Complaints

You have the right to make a complaint at any time to your national data protection authority. We would, however, appreciate the chance to deal with your concerns before you approach the authority, so please contact us in the first instance.

Last updated: November 2025