LEGAL INFORMATION

Privacy Policy

At Mergers & Partners SL we take the confidentiality of your assets and personal data very seriously. Below we detail the processing we carry out under the General Data Protection Regulation (GDPR).

Last update: February 6, 2026

1. Data Controller

In accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (GDPR), we inform you that the controller of your data is:

Mergers and partners SL

CIF: B64274939

Address: Passeig Manuel Girona 16, 1º1ª, 08034, Barcelona, Spain

Contact: info@mergersand.com

2. Data Collected and Purpose

We collect different types of information to provide our consultancy and valuation services:

  • Identification Data: Name, surname, and professional position provided in contact forms.
  • Contact Data: Email and corporate telephone to manage strategic advice.
  • Valuation Data (Online): Historical and projected financial information of your company necessary to generate the algorithmic valuation report.
  • Payment Data: Mergers & Partners does not store card data. Payment processing is carried out entirely through the encrypted gateway of Stripe, Inc.

The main purposes are the provision of the online valuation service, the management of action plans for value creation, and commercial communication requested by the user.

3. Legal Basis for Processing

We process your data based on the following legal premises:

  • Contract Execution: Necessary to provide the online valuation service once the user accepts the terms and makes the payment.
  • Consent: When completing a contact form or subscribing to Rethink M&A. You can revoke this consent at any time.
  • Legitimate Interest: To improve our platform, ensure technical security, and prevent fraud in transactions.

4. Data Retention

We will keep your data as long as the contractual relationship lasts or until you request its deletion. However, we will keep the necessary data blocked to comply with legal, tax, and accounting obligations for a maximum period of 10 years, according to current regulations in Spain.

5. Third-Party Communication and Stripe

Your personal data will not be sold or transferred to third parties for commercial purposes. It will only be communicated to:

  • Stripe: As the payment processor. Your financial data travels encrypted directly to their servers (PCI-DSS compliance).
  • Public Bodies: Only when there is a mandatory legal obligation.
  • Hosting Servers: Located in the European Union to guarantee data protection under GDPR standards.

6. Your Rights

You have full control over your information. You can exercise the following rights:

  • Access and Rectification: Consult what data we have and correct errors.
  • Erasure (Right to be forgotten): Request the total deletion of your data when they are no longer necessary.
  • Objection and Restriction: Request that we do not process your data for specific purposes such as marketing.
  • Portability: Obtain a copy of your data in digital format.

To exercise these rights, send an email to info@mergersand.com attaching valid proof of identity.

7. Security and Confidentiality

In the M&A sector, confidentiality is critical. We use high-security SSL certificates to encrypt communication between your browser and our platform. Financial and valuation data are processed under strict perimeter security controls to ensure that your strategic information remains private and intact at all times.

Absolute confidentiality guarantee · Mergers & Partners SL · Barcelona