Privacy policy

Our commitment

This is a translation. The Spanish version is the authoritative text: if there is any discrepancy between the two, the Spanish version prevails.

At Maude Mobility, S.L. we are firmly committed to the protection, security and confidentiality of the personal data we process in the course of our commercial and administrative activities, across each of our service lines: study stays, specialisation programmes, researchers, intra-corporate transfers (ICT), job seeking in Spain, international remote work, entrepreneurs, non-lucrative residence, amendments to authorisations and residence renewals, and applications for Spanish nationality.

We act at all times in accordance with:

• Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
• Organic Law 3/2018, on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).
• And Law 34/2002, on Information Society Services and Electronic Commerce (LSSI-CE).

Through this Policy we want to inform you clearly and transparently about how our organisation processes your personal data through our websites, digital platforms, corporate communication channels and other channels enabled for the provision of our services, such as corporate email addresses and social media profiles.

Data controller

In compliance with the principle of information and transparency set out in Article 12 of Regulation (EU) 2016/679 (GDPR) and Article 11 of Organic Law 3/2018 (LOPDGDD), users are informed that the processing of personal data arising from access to, browsing of and use of the website https://www.maudemobility.com/en, as well as from the completion of the forms provided (1. book a meeting, 2. who is writing to us? and 3. newsletter subscription), the communication channels ( info (arroba) maudemobility (punto) com and lopd (arroba) maudemobility (punto) com ) or the social media profiles associated with our organisation (Instagram and LinkedIn), is carried out by Maude Mobility, S.L.

The purposes pursued, the categories of data subjects and the essential technological means used in the processing of personal data have been determined by Maude Mobility, S.L., with tax identification number B93957090 and registered office at Calle Casares núm. 42, 29004 Málaga, which is the entity acting as information society service provider and holder of the domain name of this website, in accordance with Article 10 of Law 34/2002 (LSSI-CE).

Personal data we process

The type of personal data collected and processed by Maude Mobility, S.L. will vary depending on the services requested or used, the contact forms completed, the social networks through which you interact with us, or your choice of other communication channels such as telephone, email, digital platforms or other available means.

As a general rule, we may process the following categories of data:

• Name, surname, DNI/NIE (Spanish national identity number or foreigner identity number) or equivalent document where necessary, email address and telephone number, age, nationality, province and postcode of registered residence.
• Where the service line chosen is a study stay and/or a specialisation programme, we may require data relating to academic background, qualifications obtained, training history, professional experience, letter of admission, employment situation, functional area, professional category and social security contribution group, sufficient financial resources, health cover and accommodation, where these need to be evidenced before the competent public bodies, as well as the name of the training courses about which information is requested and/or which are contracted, prices, delivery formats and any other information necessary for our proper management.
• Identification and professional contact details of legal representatives, attorneys, designated contacts and staff of partner organisations, client companies and institutions with which Maude Mobility, S.L. has a relationship: name and surname, identity document or passport where necessary to evidence representation, position, organisation, professional email address and telephone number.
• Bank account identification details and, where applicable, information relating to debit or credit cards, as well as data necessary for issuing invoices and managing payments, collections and financing.
• Depending on the service line chosen, we may request data relating to your current administrative and immigration status in Spain, authorisations and/or visas obtained, dates of entry into and departure from the territory, and any other information required by immigration legislation for processing the file.
• Depending on the service line chosen, family data may be requested: marital status and identification details of a spouse or partner, descendants and ascendants, where the chosen arrangement requires family ties to be evidenced or includes family members in the file.
• Browsing data, on the terms set out in our cookie policy.

The services of Maude Mobility, S.L. are aimed exclusively at people over eighteen (18) years of age. We do not knowingly collect personal data from minors. If it is detected that a minor's data has been provided, it will be deleted without undue delay.

Maude Mobility, S.L. provides international mobility and immigration services and does not, as a general rule, collect data belonging to the special categories of personal data defined in Article 9 of the GDPR, relating to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, nor genetic data, biometric data for the purpose of uniquely identifying a natural person, or data concerning a person's sex life or sexual orientation.

In those service lines where it is necessary to process health data — for example, where the competent Consulate and/or Immigration Office requires a medical certificate confirming the absence of diseases that could have serious repercussions for public health — Maude Mobility, S.L. will process the data concerned on the basis of the data subject's explicit consent, in accordance with Article 9.2(a) of the GDPR. That consent is obtained separately and may be withdrawn at any time, although withdrawal will prevent the file from being processed, as the documentation is mandatory.

In addition, there will be service lines in which criminal record certificates issued by the Spanish authorities or by those of the countries the data subject has lived in must be provided. This processing is based on Article 10 of the GDPR and Article 10.1 of the LOPDGDD.

In both cases the data is obtained exclusively from the data subject, is processed for the sole purpose of submitting it to the relevant administrative procedure, is not subject to evaluation or profiling, and is retained during the processing of the file and thereafter blocked for the limitation periods applicable to actions and liabilities arising from the service relationship.

If you wish to request information about or contract any of our services, you must complete the fields marked with an asterisk (*) in the form available on our website. These fields collect the minimum data necessary to handle your request and assess the feasibility of the procedure, as applicable. If you do not provide that data, Maude Mobility, S.L. will not be able to handle your request or provide the service you are asking about. Unmarked fields are optional and omitting them has no consequences.

Website users warrant that the data provided is truthful, accurate and up to date. The user is responsible for false or inaccurate data, as well as for any direct or indirect damage this may cause to Maude Mobility, S.L. or to third parties. Users must notify us with due diligence of any relevant change to their personal data.

Information on the use of cookies and similar technologies is available in our Cookie Policy, which sets out the cookies used, their purposes, the third parties that may access the information and how to configure, accept or reject their use.

Purpose and legal basis for processing

Personal data processed by Maude Mobility, S.L. is collected for specified and legitimate purposes and will not be further processed in a manner incompatible with those purposes.

Should it become necessary to process your personal data for a purpose other than those for which it was initially collected, you will be provided with the relevant information beforehand and, where necessary, your consent will be requested or the legal basis legitimising the new processing will be identified.

Maude Mobility, S.L. will use the personal data of users of its websites, digital platforms, forms and other channels for the following purposes in particular:

• Handling requests. Responding to requests for information and contact sent through the forms provided (1. book a meeting, 2. who is writing to us? and 3. newsletter subscription), on the websites, by email, telephone, social media, digital platforms or other available channels.
• Pre-contractual, contractual and administrative activity. Managing all documentation associated with our service lines: study stays, specialisation programmes, researchers, intra-corporate transfers (ICT), job seeking in Spain, international remote work, entrepreneurs, non-lucrative residence, amendments to authorisations and residence renewals, and applications for Spanish nationality.
• Compliance with legal obligations. Complying with the legal obligations applicable under current accounting, tax, employment, commercial, transparency and archiving legislation, fraud prevention, handling of rights requests and cooperation with public authorities where required.
• Commercial and promotional communications. Sending commercial communications, including campaigns and promotions relating to our areas of collaboration: international mobility for students; international talent recruitment; international strategic alliances; international consultancy and projects; and bespoke consultancy and training, by electronic or equivalent means, in compliance with Article 66.1 of Law 11/2022 of 28 June, the General Telecommunications Act. This processing is based on the user's prior consent or, where applicable, on legitimate interest where the applicable legal requirements are met.
• Browsing analysis. To analyse browsing data, assess how the websites are used, carry out measurement or advertising segmentation, improve page functionality and understand user preferences and behaviour.

As a general rule, the personal data processed is provided directly by the data subject. However, in the course of our international service lines, Maude Mobility, S.L. may receive personal data from partner organisations established in the data subject's country of origin or residence, with which it has collaboration agreements and which take part in identifying, advising on or pre-selecting candidates and students, as well as from companies and employer organisations, universities, training centres and institutions involved in the file.

In such cases, the categories of data received will be those described in the previous section, limited to what is strictly necessary to assess the feasibility of the procedure and provide the service requested. Those organisations have contractually undertaken to inform data subjects in advance and to obtain, where required, their consent for the communication of their data to Maude Mobility, S.L. For its part, Maude Mobility, S.L. will inform the data subject of the identity of the organisation from which their data originates and of the processing to be carried out, within a maximum of one month from obtaining it and, in any event, in the first communication addressed to them, in accordance with Article 14 of the GDPR.

Legal bases for processing your personal data

The legal bases legitimising the processing of your personal data by Maude Mobility, S.L. are as follows:

• The consent given by the data subject for the processing of personal data, in accordance with Article 6.1(a) GDPR.
• The application of pre-contractual, contractual and administrative measures to which the data subject is party, where processing is necessary to handle a request and/or manage a subscription, in accordance with Article 6.1(b) GDPR.
• Compliance with applicable legal obligations, in accordance with Article 6.1(c) GDPR.
• The legitimate interest of Maude Mobility, S.L., provided that such interest does not override the fundamental rights and freedoms of the data subject, in accordance with Article 6.1(f) GDPR.
• The user's prior consent to receive commercial communications, in accordance with Article 66.1(a) and (b) of Law 11/2022 of 28 June, the General Telecommunications Act.

When you contact us directly by telephone, email or WhatsApp; by completing the forms provided on our websites; or through any of the social networks on which you have previously requested contact and provided your personal data (LinkedIn and Instagram), the legal bases will be, as applicable, your own consent so that we may respond to requests for information (Art. 6.1(a) GDPR); the application of the pre-contractual, contractual and administrative measures requested (Art. 6.1(b) GDPR); or the legitimate interest of Maude Mobility, S.L. in properly managing the communications received (Art. 6.1(f) GDPR).

In the same way that you give us your consent to process your personal data, you may withdraw it at any time, without this affecting the lawfulness of processing carried out prior to its withdrawal, by writing to Maude Mobility, S.L. at Calle Casares núm. 42, 29004 Málaga, or by sending an email to lopd (arroba) maudemobility (punto) com , on the terms of the applicable legislation.

Disclosure of data

Maude Mobility, S.L. may disclose users' personal data to third parties where such disclosure is necessary to handle a request, manage the pre-contractual, contractual or administrative relationship, comply with legal obligations, manage ancillary services or carry out the purposes set out in this Privacy Policy.

In particular, personal data may be disclosed to the following categories of recipient:

• Public administrations, official bodies and competent authorities.
• Insurance companies.
• Banks, financial institutions and payment service providers, where necessary to manage payments, collections, financing, bookings, refunds, invoicing or the contracting of services.
• Service providers (communications, advisory services, marketing, technology, CRM, IT support, digital platforms, etc.) acting as data processors under a formal contract. Those providers will process personal data on behalf of Maude Mobility, S.L. and in accordance with the corresponding data processing agreement, on the terms of Article 28 of the GDPR.
• Partner organisations in any of our service lines, established in Spain or in third countries, with which Maude Mobility, S.L. has collaboration agreements, as well as the sub-agents, collaborators or local representatives they use, in all cases subject to equivalent confidentiality and data protection obligations. Unless expressly stated otherwise, these organisations act as independent data controllers.
• Companies, universities, training centres and institutions receiving applications, where the service requested consists of identifying, pre-selecting or presenting profiles with a view to a training or selection process. The disclosure will be limited to the data strictly necessary to assess the profile and does not imply transfer for any other purpose.

How long we keep personal data

The personal data provided will be kept for as long as necessary to fulfil the purposes for which it was collected and to determine any legal liabilities arising from the processing.

The following retention criteria apply in particular:

• Requests, pre-contracting and contracting. Data will be kept for the duration of the contractual relationship or provision of the service and, once it has ended, for the limitation period applicable to the corresponding legal actions.
• Contact forms. Data will be kept for the time strictly necessary to handle the request, manage the contact, process the subscription, issue the corresponding invoice or provide the service requested and, once completed, for the limitation period applicable to any legal actions that may arise.
• Commercial or promotional communications. Data will be kept until the data subject withdraws consent or requests erasure of or objects to the processing. Where communications are based on a prior contractual relationship or on the legitimate interest of Maude Mobility, S.L., data may be kept for as long as that relationship lasts and for the time reasonably necessary to manage communications about similar services, provided the user does not object.
• Browsing data and preferences. This will be kept in accordance with the periods indicated in the applicable Cookie Policy and, in any event, in line with the preferences configured by the user, for as long as consent is not withdrawn.
• Compliance with legal obligations. Data will be kept for the periods established by the applicable legislation in each case. Once the main purpose of the processing has been fulfilled, personal data will be kept blocked, available exclusively to judges, courts or competent authorities, for the applicable statutory limitation periods.

Maude Mobility, S.L. will not collect personal data whose relevance is not justified for the management of its service lines and its commercial and administrative work. Should unnecessary data be collected in error or accidentally, it will be deleted without undue delay.

Maude Mobility, S.L. will not take automated individual decisions producing legal effects on the user, in accordance with Article 22 of the GDPR.

Users may request detailed information on the retention periods applicable to their personal data by writing to lopd (arroba) maudemobility (punto) com . Such requests will be dealt with as promptly as possible.

In all cases, the retention, blocking or erasure of data will be carried out in accordance with current legislation on documentation and archives.

Principles applied to data processing

Maude Mobility, S.L. will process users' personal data applying at all times the principles set out in Article 5 of the GDPR, notably:

• Lawfulness, fairness and transparency: data will be processed lawfully, fairly and transparently for the user.
• Purpose limitation: data will be collected for specified, explicit and legitimate purposes and will not be further processed in a manner incompatible with those purposes.
• Data minimisation: only data that is adequate, relevant and limited to what is necessary in relation to the stated purposes will be processed.
• Accuracy: data must be accurate and kept up to date.
• Storage limitation: data will be kept for as long as necessary to fulfil the purposes of the processing and to address applicable legal liabilities.
• Integrity and confidentiality: data will be processed in a manner that ensures its security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.
• Accountability: Maude Mobility, S.L. will apply appropriate technical and organisational measures to ensure and be able to demonstrate compliance with data protection legislation.

Your rights

In relation to the processing of your personal data, Maude Mobility, S.L. guarantees users the exercise of the rights recognised in the GDPR and in applicable data protection legislation:

• Right of access.
• Right to rectification.
• Right to object.
• Right to erasure (“right to be forgotten”).
• Right to restriction of processing.
• Right to data portability.
• Right not to be subject to automated decisions.
• Right to withdraw consent given.

Maude Mobility, S.L. has adopted the technical and organisational measures necessary to prevent unauthorised access, loss or misuse of personal data by third parties.

To exercise the above rights you may write to Maude Mobility, S.L. at Calle Casares núm. 42, 29004 Málaga, or send an email to lopd (arroba) maudemobility (punto) com , stating the right you wish to exercise and evidencing your identity where necessary.

Maude Mobility, S.L. will respond to requests without undue delay and, in any event, within one month of receiving the request. This period may be extended by a further two (2) months where necessary, taking into account the complexity and number of requests to be handled.

If you consider that the processing of your personal data does not comply with applicable legislation, you may lodge a complaint with the Spanish Data Protection Agency: https://www.aepd.es/

Security of personal data

Maude Mobility, S.L. will process users' personal data ensuring at all times the confidentiality, integrity, availability and resilience of processing systems and services, as required by Article 32 of the GDPR.

In order to prevent unauthorised access, misuse, loss, alteration, disclosure or accidental or unlawful destruction of personal data, Maude Mobility, S.L. has implemented appropriate technical and organisational measures.

These measures include:

• Periodic assessment of the risks inherent in data processing.
• Application of internal data protection policies.
• Minimising the volume and categories of data processed (data minimisation).
• Pseudonymisation and encryption of personal data where appropriate.
• Implementation of the principles of data protection by design and by default.
• Transparency in processing functions.
• Implementation of systems to prevent loss of control over data, including measures against unauthorised access, identity theft, loss of confidentiality, destruction or reputational, financial or social harm.
• Periodic security audits and the application of access controls and traceability of operations, in line with regulatory compliance standards, including the Spanish National Security Framework where applicable.

Personal data arising from email communication is currently hosted on our own servers located at our registered office, at Calle Donoso Cortés núm. 9-11, 29002 Málaga. Data associated with the website is hosted on servers contracted with the provider Hostinger, whose data centre is located in Frankfurt (Germany).

Where providers act as data processors, the corresponding processing agreements will be formalised in accordance with Article 28 of the GDPR. Should those services involve international data transfers, the safeguards required by applicable legislation will be adopted.

Third countries and international transfers

In the course of the operations of Maude Mobility, S.L. and the provision of its international service line, organisations located outside the European Economic Area may be involved. Unless expressly stated otherwise at the time of collection, those organisations will act as independent data controllers, determining their own purposes and legal bases in accordance with the legislation applicable to them. Where an organisation processes personal data on behalf of Maude Mobility, S.L., the corresponding data processing agreement will be signed in advance with the content required by Article 28 of the GDPR.

Maude Mobility, S.L. does not, as a general rule, carry out international transfers of personal data outside the European Economic Area (EEA), except where necessary for the provision of one of its service lines, for collaboration with organisations, providers or professionals located outside the EEA, for interaction with social networks, or for processing files linked to training programmes, international mobility, study stays, insurance, document management or related services.

Those organisations will act as independent data controllers and will process personal data in accordance with their own purposes, legal obligations and privacy policies, without prejudice to the safeguards required by the GDPR for the international communication of data.

The involvement of professionals or organisations located outside the EEA may be limited, depending on the case, to document review, legal advice, immigration support, administrative management or verification of requirements linked to the relevant service line, applying at all times criteria of minimisation, confidentiality, restricted access and traceability.

Where personal data is disclosed to a partner organisation established in a third country without an adequacy decision from the European Commission, Maude Mobility, S.L. will sign in advance the Standard Contractual Clauses approved by the European Commission or another transfer instrument provided for in Article 46 of the GDPR. In the absence of such safeguards, the transfer will only take place where it is necessary for the performance of the contract entered into with the data subject or for the implementation of pre-contractual measures taken at their request, in accordance with Article 49.1(b) of the GDPR, the data subject being informed of this beforehand.

Likewise, the use of social networks such as LinkedIn, Instagram and Facebook may involve the processing of certain personal data by their respective providers, particularly when users interact with our profiles, posts or contact forms. In the case of providers located in the United States, such as Meta Platforms, Inc. or LinkedIn Corporation, international transfers may rely, where appropriate, on the European Commission's Adequacy Decision regarding the EU-U.S. Data Privacy Framework, provided the recipient entity is enrolled in and certified under that framework.

In all cases, international data transfers will only be carried out where an adequate legal basis exists and the safeguards required by the GDPR are adopted, such as adequacy decisions, standard contractual clauses, binding corporate rules or other legally established mechanisms, together with appropriate technical and organisational measures to guarantee the confidentiality, integrity, availability and security of personal data.

For further information on any applicable international data transfers, users may write to lopd (arroba) maudemobility (punto) com .

Updates

Maude Mobility, S.L. reserves the right to amend or update this Privacy Policy to adapt it to legislative or case-law developments or to interpretations issued by the Spanish Data Protection Agency. Users will in any case be informed through the website or websites when significant changes occur.

Date of last update: September 2026.