Privacy Policy

This Privacy Policy explains how Iceberg Goals processes personal data when you use iceberggoalspace.digital. It applies to our insurance selection services for retirees and to related communications, forms, and website activity.

Effective Date
As stated in this policy
Scope
All users of our services
Questions?

Contact Information

Privacy email
feedback@iceberggoalspace.digital
Telephone
+34 614 95 52 70
Postal address
Calle de Miguel Fernández Criado, 2, 30620 Fortuna
Privacy contact
01
Processing purpose

Purposes of Processing

We use personal data to operate the website, respond to enquiries, assess and route insurance-related requests, communicate with users, maintain security, prevent misuse, analyse site performance, comply with legal obligations, and keep records needed for administration and dispute handling.

We limit processing to purposes that are compatible with the way the data was collected.
02
Sharing partners

Service Providers and Partners

We may share personal data with hosting, analytics, security, communications, and administrative service providers that support our operations. We may also share data with professional advisers and, where relevant, with insurance-related partners involved in responding to your request or facilitating a referral, subject to appropriate confidentiality and data protection obligations.

Service providers receive only the data needed to perform their assigned functions.
03
Legal basis

Legal Disclosures

We may share personal data with courts, regulators, tax authorities, or other public bodies when disclosure is required or permitted by law, or when necessary to protect our rights, users, or the security of our services.

We disclose data to public authorities only when a lawful basis requires it.
User Rights

Your Rights

Depending on your location and the processing involved, you may have rights to access, correct, delete, restrict, or object to certain processing, and to request portability where applicable. You may also lodge a complaint with the competent data protection authority if you believe your rights have been infringed.

Available rights depend on the legal basis and the nature of the processing.
Requests

How to Make a Request

To exercise your rights, please use the contact details in this policy and describe the request clearly. We may ask for information needed to verify your identity and to understand the scope of the request. If we cannot act on a request, we will explain the reason where permitted by law.

Requests are handled after reasonable steps to confirm identity and scope.
Data Retention

Data Retention

We keep personal data only for as long as needed for the purpose for which it was collected, to meet legal, accounting, or reporting obligations, or to resolve disputes and enforce rights. When data is no longer needed, we delete it or anonymise it where appropriate.

Retention periods are based on the purpose of the data and applicable legal duties.
Policy Updates

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our services, processing activities, or legal requirements. The revised version will apply from the date it is made available on the website, unless a different effective date is stated.

We review this notice when our practices or legal obligations change.
GDPR

GDPR Overview

Under the GDPR, we process personal data only when we have a valid legal basis, such as consent, performance of a request, compliance with legal obligations, or our legitimate interests where those interests are not overridden by your rights. We also apply data minimisation and purpose limitation principles.

Where the GDPR applies, it governs our processing of personal data of individuals in the European Economic Area, including users in Spain.

This section applies where GDPR protections are available.
GDPR Rights

Your GDPR Rights

Where the GDPR applies, you may have the right to access, rectify, erase, restrict, or object to processing, and to receive a copy of certain data in a portable format. You may also withdraw consent where processing is based on consent, without affecting prior lawful processing.

GDPR rights are available subject to legal conditions and verification of identity.
Data category

Data We Collect

We may collect identification and contact details, information about retirement-related insurance preferences, communication content, technical identifiers, device and browser data, and records of your interactions with our pages and forms. Where relevant, we may also process information you choose to provide about your circumstances so we can respond to your request or assess service suitability.

The categories of data collected depend on how users interact with the site and services.
Collection source

Sources of Data

We receive data directly from you when you submit forms, request information, or communicate with us. We also collect data automatically through your device, browser, and usage of the website, and we may receive limited information from service providers that support our operations.

Some information is provided directly, while other data is created through normal website use.
Cookie type

Types of Cookies

Our website may use essential cookies needed for security and core functions, preference cookies that remember settings, and analytics cookies that help us understand how the site is used. Cookies may be session-based or persistent, depending on their purpose and lifespan.

We use cookies that support basic operation, measurement, and preference management.
User control

Cookie Controls

We use standard cookie controls to manage preferences where required. You can block or delete cookies through your browser settings, and some browser tools allow you to limit tracking technologies. If you disable certain cookies, parts of the site may not function as intended.

Cookie settings can be adjusted through the browser or device controls available to you.