Privacy and Data Protection Policy
Last updated: 17 August 2026
Market2Flow is committed to protecting users’ privacy and processing their personal data lawfully, fairly, transparently and securely, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR); Spanish Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD); and all other applicable legislation.
1. Data controller
The personal data collected through this website will be processed under the responsibility of:
- Data controller: Crisdell Codeghini
- Trading name: Market2Flow
- Tax identification number: Y0891053R
- Registered address: Calle Letonia 11 1 A
- Email address: privacy@market2flow.com
- Web address: https://market2flow.com
2. Personal data processed
Depending on your relationship with Market2Flow, we may process the following categories of personal data:
- Identification and contact details, such as your name, surname, company, position, telephone number and email address.
- Professional or business information provided voluntarily.
- Information included in enquiries, assessment requests, proposals and communications.
- Data required to manage a contractual or commercial relationship.
- Technical and browsing data, such as IP address, device type, browser, access logs and information obtained through cookies, where applicable.
- Data relating to marketing communications, including preferences and consent provided.
Users must refrain from providing special-category personal data or personal information relating to third parties unless it is necessary to process their request.
3. Purposes of processing
Market2Flow may process personal data for the following purposes:
3.1. Handling enquiries and requests
To manage enquiries received, respond to requests for information, carry out initial assessments and maintain the necessary communications with the interested party.
3.2. Preparing proposals and managing pre-contractual relationships
To analyse the needs communicated, prepare proposals, quotations, demonstrations or work plans, and carry out the requested actions before entering into a contract.
3.3. Client management and service provision
To formalise, manage and provide the contracted services, maintain the professional relationship, conduct follow-ups, and manage invoicing, payments, support and after-sales assistance.
3.4. Marketing communications
To send information about Market2Flow’s services, content, news or activities when the interested party has authorised it or another valid legal basis applies.
Consent to receive marketing communications is voluntary and must be requested through a separate checkbox. The interested party may withdraw their consent at any time.
3.5. Website security and operation
To protect the website, prevent fraudulent or unlawful use, resolve technical incidents, maintain security logs and ensure the proper functioning of the systems.
3.6. Compliance with legal obligations
To comply with tax, accounting, commercial, administrative and other legally enforceable obligations.
4. Legal basis
The applicable legal bases are:
- The consent of the interested party when they voluntarily submit an enquiry or authorise processing for a purpose that requires it.
- The implementation of pre-contractual measures requested by the interested party.
- The performance of a contract or provision of the contracted services.
- Compliance with legal obligations applicable to Market2Flow.
- The legitimate interest in protecting the website, preventing fraud, ensuring system security and properly managing professional relationships, provided that the rights and freedoms of the interested party do not take precedence.
Where processing is based on consent, it may be withdrawn at any time without affecting the lawfulness of any processing carried out before its withdrawal.
5. Mandatory nature of the data
Fields identified as mandatory in the forms are necessary to process the request.
If this information is not provided, Market2Flow may not have the information required to respond or provide the requested service.
The user guarantees that the information provided is truthful, accurate, complete and up to date, and accepts responsibility for communicating any changes.
6. Data retention
Personal data will be retained for as long as necessary to fulfil the purpose for which it was collected and, subsequently, for the legally required periods to address any potential liabilities.
In particular:
- Enquiries that do not result in a contractual relationship will be retained for the time necessary to respond and provide the requested follow-up and, in any event, for no longer than 24 months, unless another legal basis applies.
- Client data will be retained for the duration of the contractual relationship and for the applicable tax, accounting and legal periods.
- Data used for marketing communications will be retained until the interested party withdraws their consent or requests to stop receiving them.
- Technical and security logs will be retained for the period necessary to ensure security and address any potential incidents or liabilities.
Once these periods have expired, the data will be deleted or duly restricted.
7. Recipients and data processors
Market2Flow will not sell or disclose personal data to third parties unless required by law, necessary to provide the service, or previously communicated to the interested party.
Certain service providers that provide services to Market2Flow may access specific data, including:
- Web hosting and domain providers.
- Email and productivity services.
- Form, automation and CRM platforms.
- Storage and backup services.
- Analytics, security and maintenance tools.
- Tax, accounting, legal and technology advisers.
- Financial institutions and payment service providers, where applicable.
These providers will act as data processors and must provide appropriate guarantees of confidentiality, security and regulatory compliance.
Data may also be disclosed to public administrations, authorities, courts and tribunals where required by law.
8. International transfers
Some technology providers may process data from countries outside the European Economic Area.
Where international transfers occur, Market2Flow will verify that they are covered by a European Commission adequacy decision, standard contractual clauses, the EU–US Data Privacy Framework where applicable, or another valid mechanism under the GDPR.
The data subject may request further information about the safeguards used by emailing privacidad@market2flow.com.
9. Automated decision-making
Market2Flow will not make decisions producing legal or similarly significant effects based solely on automated processing of personal data.
Automation tools used to organise contacts, assign tasks or facilitate follow-up will be subject to configuration, supervision and human oversight.
10. Rights of data subjects
Data subjects may exercise the following rights:
- Access: to find out which personal data Market2Flow processes.
- Rectification: to request the correction of inaccurate or incomplete data.
- Erasure: to request the deletion of data when it is no longer necessary.
- Objection: to object to processing under certain circumstances.
- Restriction: to request that processing be temporarily restricted.
- Data portability: to receive the data in a structured format or request its transmission to another controller, where applicable.
- Withdrawal of consent: to withdraw previously granted consent at any time.
- Not to be subject to automated decision-making: to request human intervention where applicable.
To exercise these rights, data subjects may submit a request to privacidad@market2flow.com, specifying the right they wish to exercise and providing the information necessary to verify their identity.
If they consider that their rights have not been properly addressed, they may lodge a complaint with the Spanish Data Protection Agency:
- Website: https://www.aepd.es
- Address: C/ Jorge Juan, 6, 28001 Madrid, Spain.
11. Marketing communications
Market2Flow will only send electronic marketing communications where there is a valid legal basis.
Where consent is required, it will be requested through a specific, voluntary checkbox, separate from the acceptance required to submit an enquiry or contract a service.
Each communication will include a simple and free method for unsubscribing. Withdrawal of consent will not affect the handling of enquiries or the provision of services already contracted.
12. Third-party data
If a person provides personal data relating to third parties, they declare that they are authorised to do so and that they have previously informed those third parties about the processing of their data.
Market2Flow may request evidence of such authorisation where necessary.
13. Minors
Market2Flow’s services are intended for professionals and businesses and are not directed at children under the age of 14.
Market2Flow does not knowingly collect personal data from minors. If it becomes aware that a minor has provided information without the required authorisation, it will take the necessary steps to delete it.
14. Security and confidentiality
Market2Flow will implement reasonable and appropriate technical and organisational measures to protect personal data against loss, alteration, unauthorised access, disclosure or destruction.
Access to personal data will be restricted to those individuals and service providers who need to process it for the purposes described and who are subject to confidentiality obligations.
However, no transmission or storage system can guarantee absolute security. If a security breach occurs that could significantly affect individuals’ rights, Market2Flow will act in accordance with its obligations under applicable law.
15. Third-party links and websites
This website may contain links to third-party websites or services. Market2Flow is not responsible for their privacy practices.
Users are advised to review the privacy policies of those third parties before providing them with personal information.
16. Cookies
This website may use first-party and third-party cookies to enable its operation, maintain security, remember preferences and, where consent has been given, analyse how the website is used.
Detailed information about the cookies used, their purpose, duration and configuration is available in the Cookie Policy.
Non-essential cookies will only be installed after obtaining the corresponding consent.
17. Changes to this policy
Market2Flow may update this Privacy Policy to reflect legal or technical changes or changes related to its services.
The current version will always be available on this website and will indicate the date on which it was last updated. Where changes are significant, users will be informed through reasonable means.
18. Contact
For any enquiries concerning this Privacy Policy or the processing of personal data, you may contact Market2Flow using the following details:
Postal address: 28760
Email address: privacy@market2flow.com