Legal
Privacy Policy
Last updated: May 2026 · Meisters Solutions S.L.
1. Data Controller
The data controller responsible for your personal data is:
Meisters Solutions S.L.
P.º del Gral. Martínez Campos, 11 – Chamberí, Madrid, Spain
Email: info@meisters.solutions
Marketing enquiries: marketing@meisters.solutions
We also maintain operations in Brazil through our Curitiba office (R. Vol. da Pátria, 475 – Sala 1212 – Centro, Curitiba, PR), acting as co-controller or operator depending on the processing activity under LGPD.
2. Personal Data We Collect
We collect only the minimum data necessary for the purposes described in this policy. The categories we may process include:
Identity & Contact Data
- Full name and professional title
- Business email address and telephone number
- Company name and industry sector
- Country / region of residence
Technical & Usage Data
- IP address, browser type and version, operating system
- Pages visited, time on site, referral source, clickstream data
- Device identifiers and viewport size
- Cookie identifiers and session tokens (see Section 9)
Professional Data (Job Applications)
- CV / résumé and cover letter
- LinkedIn profile URL (if voluntarily provided)
- Skills, work history and professional qualifications
- Correspondence during recruitment process
Communication Data
- Content of messages submitted through contact forms
- Email correspondence with our team
- Records of consent and opt-ins
We do not process sensitive/special-category data (health, race, religion, biometric data, etc.) and ask that you do not submit it through our website.
3. How We Collect Your Data
- Directly from you when you fill in a contact or application form on our website
- Through cookies and similar tracking technologies when you browse our website
- From publicly available sources such as LinkedIn or business directories, in the context of B2B outreach
- From our clients or partners where they share contact details as part of a project engagement
- Through our recruitment processes and job-application portals
4. Legal Bases for Processing
We process your personal data on one or more of the following lawful grounds:
| Purpose | GDPR basis (Art. 6) | LGPD basis (Art. 7) |
|---|---|---|
| Responding to contact form enquiries | Legitimate interests (Art. 6(1)(f)) | Legitimate interests (Art. 7(IX)) |
| Delivering contracted services | Contract performance (Art. 6(1)(b)) | Contract performance (Art. 7(V)) |
| Processing job applications | Legitimate interests / consent | Consent / legitimate interests |
| Website analytics & improvement | Legitimate interests (Art. 6(1)(f)) | Legitimate interests (Art. 7(IX)) |
| Marketing communications | Consent (Art. 6(1)(a)) | Consent (Art. 7(I)) |
| Legal & regulatory compliance | Legal obligation (Art. 6(1)(c)) | Legal obligation (Art. 7(II)) |
5. How We Use Your Data
- To respond to enquiries and provide the services you have requested
- To evaluate job applications and manage our recruitment pipeline
- To improve our website content, user experience and performance
- To send you relevant service updates or thought-leadership content (only with your consent)
- To comply with legal obligations including tax, accounting and regulatory requirements
- To detect and prevent fraud, abuse or security incidents
- To manage our contractual relationships with clients and partners
6. Data Sharing and Third Parties
We do not sell, rent or trade your personal data. We may share data with:
Service Providers (Data Processors)
Carefully selected providers acting on our instructions, including: cloud infrastructure and hosting (AWS, Google Cloud), email service providers, CRM and project management tools, analytics platforms, and recruitment software. All processors are bound by Data Processing Agreements (DPAs) that meet GDPR/LGPD requirements.
Professional Advisors
Lawyers, auditors and accountants under confidentiality obligations, where required to deliver their services.
Law Enforcement / Regulatory Authorities
Where required by applicable law, court order or legitimate governmental request in any jurisdiction where we operate.
Business Transfers
In the event of a merger, acquisition or sale of business assets, personal data may be transferred as part of that transaction, subject to continued compliance with this policy.
7. International Data Transfers
As a company with offices in Spain (EU) and Brazil, and clients across 25+ countries, your data may be transferred to and processed in countries outside the European Economic Area (EEA) or Brazil. We ensure adequate safeguards are in place for all such transfers, including:
- European Commission adequacy decisions (where applicable)
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Binding Corporate Rules (BCRs) or equivalent mechanisms under LGPD
- Your explicit consent, where required and appropriate
Brazil is recognised as having an adequate level of protection by relevant EU authorities in the context of our operations. For transfers to other third countries, appropriate safeguards are applied on a case-by-case basis.
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Contact form enquiries: up to 24 months from last interaction, unless a commercial relationship develops
- Client data: for the duration of the contract plus 7 years for accounting/tax records (as required under Spanish law)
- Job applications: 12 months if unsuccessful, unless you consent to retention for future roles
- Website analytics data: 26 months (anonymised after 14 months)
- Marketing consent records: until consent is withdrawn, plus 3 years for audit purposes
After the applicable retention period, data is securely deleted or anonymised.
9. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to operate, improve and analyse your experience. Types include:
Strictly Necessary
Essential for the website to function (session management, security). Cannot be disabled.
Analytics & Performance
Help us understand how visitors use the site (e.g. Google Analytics with IP anonymisation). Require your consent in the EU/EEA and Brazil.
Functional
Remember your preferences (e.g. language, dark/light mode).
Marketing
Used to deliver relevant advertising or content. Only activated with explicit consent.
You can manage your cookie preferences at any time via our cookie consent panel or your browser settings. Note that disabling certain cookies may affect website functionality.
10. Your Rights
Depending on your jurisdiction, you have the following rights regarding your personal data. We respond to all legitimate requests within 30 days (GDPR / LGPD standard).
Rights under GDPR (EU/EEA residents)
- Right of access – obtain a copy of your personal data
- Right to rectification – correct inaccurate or incomplete data
- Right to erasure ("right to be forgotten") – request deletion where no overriding legitimate grounds exist
- Right to restriction of processing – limit how we use your data
- Right to data portability – receive your data in a machine-readable format
- Right to object – object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent – at any time, without affecting prior lawful processing
- Right to lodge a complaint with a supervisory authority (in Spain: AEPD – www.aepd.es)
Rights under LGPD (Brazilian residents)
- Confirmation of the existence of processing
- Access to your data
- Correction of incomplete, inaccurate or outdated data
- Anonymisation, blocking or deletion of unnecessary/excessive data
- Portability to another service or product provider
- Deletion of data processed with consent
- Information about sharing with third parties
- Information about the possibility of not giving consent and consequences
- Revocation of consent at any time
- Complaint to the ANPD (Autoridade Nacional de Proteção de Dados – www.gov.br/anpd)
Additional Rights (other jurisdictions)
Residents of California (CCPA), Canada (PIPEDA), and other jurisdictions with data protection laws may have additional or equivalent rights. We honour such requests in accordance with applicable local law. Please contact us to exercise any such right.
To exercise any of the above rights, contact us at info@meisters.solutions. We may need to verify your identity before processing your request.
11. Security
We implement appropriate technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, alteration or disclosure. These include:
- Encryption of data in transit (TLS/HTTPS) and at rest
- Role-based access controls with principle of least privilege
- Regular security assessments and penetration testing
- Staff training on data protection and information security
- Incident response procedures and breach notification protocols (72-hour GDPR deadline)
12. Children's Data
Our website and services are directed exclusively at businesses and professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided us with personal data, please contact us immediately at info@meisters.solutions so we can delete it promptly.
13. Links to Third-Party Websites
Our website may contain links to third-party websites, plug-ins and applications (including LinkedIn, partner portals, and client platforms). Clicking on those links may allow third parties to collect or share data about you. We do not control those websites and are not responsible for their privacy statements. We encourage you to read the privacy policy of every website you visit.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website following any update constitutes acceptance of the revised policy.
15. Contact Us
For any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact:
Meisters Solutions S.L.
P.º del Gral. Martínez Campos, 11 – Chamberí, Madrid, Spain
General: info@meisters.solutions
Marketing & communications: marketing@meisters.solutions
You also have the right to lodge a complaint with the relevant supervisory authority in your country. In Spain: Agencia Española de Protección de Datos (AEPD). In Brazil: Autoridade Nacional de Proteção de Dados (ANPD).