1. Who processes your personal data?
The Data Controller (hereinafter the Controller) of your personal data is:
- Q-IMPACT INVESTMENT MANAGEMENT, S.A.
- C/ Jenner 3, 4th floor, 28010, Madrid.
processing of your personal data through our website www.qimpact.com (hereinafter
As User and interested party, we inform you of the incorporation of your personal data
to the treatment called “WEBSITE” of the Register of Activities of the Responsible.
The personal data that we request from you through the Website are, in general,
obligatory (unless otherwise specified in the required field) in order to fulfil the
established purposes. Therefore, if you do not provide them or you provide them
incorrectly, we will not be able to attend to your requests, without prejudice to the free
viewing of the content of the Website.
For more information, or to clarify any doubts about the processing of your personal
data, you can write to us at the postal address or e-mail address indicated in this
section. You can also consult the website of the AEPD (Spanish Data Protection
2. For what purpose do we process your personal data?
The personal data that you provide to us through the Website are processed by the
Responsible for the following purposes:
Manage your registration and registration as a User to access your Private Area, where
you can find and download all the information related to your investments.
To deal with queries, requests and doubts made by the User through the contact form
on the Website.
Manage the sending and reception of CVs of potential candidates to form part of the
internal selection processes of the Entity.
3. What personal data of the User do we
We collect the following categories of personal data through the Website:
Identification data: Data of legal representatives, address, user name or any other
similar identifier if it is a natural person, such as surname, ID number, registered office,
telephone number, email.
Contact details: address, e-mail address and telephone number.
Financial data: billing address, bank details, quarterly reports, annual reports, income,
balance sheets, as well as any personal data related to the products and services you
Transaction data: data on investments made, distributions received by the User, as
well as details of the products and services you have contracted.
Profile data: User name and password, history of investments made, in addition to all
the profile data that we could add.
Technical data: Internet Protocol (IP) address, login data, browser type and version,
time zone and location settings, browser plug-in type and version, operating system
and platform, as well as other technologies you may use on your devices to access this
Usage data: relevant information about your use of our website.
Tracking Data: Information that we, or third parties, collect about you through the use of
cookies and similar tracking technologies.
We do not collect any personal data belonging to special categories of data.
4. What is the legitimacy for the processing of your
The processing of your personal data is based on the following legal bases:
Execution of the investment agreement with us and proper service provision. To
manage the development and execution of the investment agreement and those
services that you have acquired, to manage your User profile, as well as to attend to
your queries, suggestions or requests and to communicate your personal data to our
suppliers, provided that it is necessary for the provision of the service.
Compliance with legal obligations on the part of the Data Controller. For the prevention
of fraud, communication of your data to Public Administrations and to attend eventual
Your express consent by ticking the relevant box. For the sending of the contact form,
as well as the sending of Curriculum Vitae.
5. To which recipients will your personal data be
Your personal data may eventually be communicated to our external suppliers, when
such communication is necessary for the provision of services, in particular:
For hosting, storage and data processing services, to our providers of these services.
For the management of services related to data storage in the cloud.
In addition, your personal data may be communicated to Public Administrations,
provided that it is necessary for the fulfillment of legal obligations, or to meet possible
claims from third parties, by the Responsible.
As some of our service providers are global in nature, their processing of your personal
data may involve international transfers of your data outside the European Economic
Area. In case of international transfers we ensure that they are carried out with the
security required by the applicable legislation on data protection and following the
indications of the AEPD. For more information visit the following link
6. How long will we keep your personal data?
We will retain your customer data for as long as necessary to provide the service.
Subsequently, your personal data will remain blocked and only available to the
competent authorities until such time as any liabilities that may arise from the
processing expire, after which it will either be securely deleted or anonymised so that
we can continue to use it for analytical purposes.
We will keep your data as a User of the Website until you request cancellation.
We will keep your curriculum vitae for the time necessary to carry out possible
selection processes. In order to keep it updated, we may ask you, whenever you are
interested, to send us an updated version of it, proceeding in such case to delete the
previous version and retaining only the updated version.
7. What rights do you have?
You can exercise the following rights, at any time and free of charge:
Obtain confirmation as to whether or not we are processing personal data concerning
Access your personal data.
Rectify inaccurate or incomplete data.
Request the deletion of your data.
To revoke consent to the processing of your data, if you have given it to us, for
example for the sending of commercial communications.
Request the limitation of the processing of your data when any of the conditions
provided for in the regulations are met.
Request the portability of your data.
Oppose the processing of your data, in case we are using your personal data to send
you commercial communications based on our legitimate interest.
File a complaint regarding the protection of personal data before the Spanish Data
Protection Agency (www.aepd.es).
To do so, you can contact us by writing or emailing us at the physical or email address
with the reference “Data Protection”.
As a User you must bear in mind that the security of computer systems is never
absolute. When personal data is provided over the internet, such information may be
collected and processed by unauthorized third parties without your consent and
processed by unauthorized third parties.
8. User Responsibility
As a User, by providing us with personal data through our forms, you declare that you
are of legal age and that the personal data you have provided us with are accurate,
true, complete and up to date. To these effects, as a User you are responsible for the
veracity of all the personal data you provide us with and you must keep the information
provided conveniently updated, in such a way that it corresponds to your real situation.
In addition, you warrant that you have informed the third parties from whom you
provide your personal data, if you do so, of the aspects relating to the processing of
you have obtained their express authorisation to provide us with their personal data for
the purposes indicated.
9. Links to third party websites.
Our website may include links to third-party websites, plug-ins and applications.
Clicking on those links or enabling those connections may give third parties permission
to collect or share data about you. The processing of personal data by the owners of
no responsibility or control over information collected by third parties or over the
protection and privacy of information you provide through such websites. We
encourage you to carefully review the privacy policies of all third party websites to
understand how they collect and share your information.
10. Security measures.
We treat your personal data confidentially and keep the duty of secrecy with respect to
them, adopting at all times the technical and organizational measures necessary to
ensure the security of your data and thus avoid possible alterations, loss, destruction,
processing or unauthorized access, depending on the state of the art, the nature of the
data stored and the processing thereof and the risks to which they are exposed.
In addition, all of our suppliers in charge of the processing of your data will enter into a contract with us to ensure, as far as possible, that they comply with the applicable data
competent authorities or changes in the processing of your personal data. Whenever