PRIVACY POLICY

Last updated: August 2026

This is an English courtesy translation. The legally binding version is the Spanish one, available at Política de Privacidad. In the event of any discrepancy, the Spanish text prevails.

1. DATA CONTROLLER

In compliance with Regulation (EU) 2016/679 (GDPR) and other applicable data protection legislation, users are informed that the personal data provided through this website will be processed by:

Owner: Patrick Bardinet de Horna

Trade name: ShopShift

Spanish tax ID (NIF): 05293818T

Business address: Calle Luis Cabrera, 28002, Madrid, Spain

Contact email: business@shopshift.eu

Hereinafter, “ShopShift”.

2. PERSONAL DATA WE COLLECT

We may collect and process the following categories of personal data:

Identification data

• Name and surname
• Company
• Job title
• Email address
• Telephone number

Commercial and professional data

• Industry sector
• Information about the business
• Commercial or training needs
• Information provided during meetings or consulting sessions

Technical data

• IP address
• Browser type
• Operating system
• Browsing information
• Cookies and similar technologies

Assessment data (skills tests and team assessments)

• Questionnaire answers and calculated results
• Declared professional role
• Campaign source parameters (UTM) of the access link

Data arising from the contractual relationship

• Invoices
• Quotes
• Contracts
• History of contracted services

3. PURPOSES OF PROCESSING

Personal data may be used for the following purposes:

Handling enquiries

Responding to requests sent through forms, email or any other contact channel.

Provision of services

Managing the contracting, delivery and follow-up of training, consulting and advisory services.

Administrative and accounting management

Issuing quotes, invoices and documentation relating to the provision of services.

Professional communication

Sending communications relating to projects, meetings, proposals or contracted services.

Marketing and commercial communications

Where there is express consent or a prior professional relationship in accordance with applicable legislation, we may send information about:

• New services
• Events
• Webinars
• Training
• Professional resources
• ShopShift updates

Users may unsubscribe at any time.

Capability assessment

Producing the level reports for the free test on the website and the capability reports for team assessments commissioned by a client company, whose individual results are shared with the contact person designated by that company.

Website security

Ensuring the proper functioning, maintenance and security of the website.

4. LEGAL BASIS FOR PROCESSING

The legal bases legitimising the processing of data are:

Consent of the data subject

When the user submits forms, requests information or agrees to receive commercial communications.

Performance of a contract or pre-contractual measures

Where processing is necessary to manage quotes, proposals, contracts or requested services. This basis also covers team assessments commissioned by a client company, the delivery of which requires results to be shared with the contact person designated by that company.

Compliance with legal obligations

Particularly in tax, accounting and administrative matters.

Legitimate interest

To maintain professional relationships with clients and potential clients, improve our services and protect the security of the website.

5. DATA RETENTION

Personal data will be retained for as long as necessary to fulfil the purposes for which it was collected.

It may subsequently be kept blocked for the periods required by applicable legislation in order to address any potential legal liabilities.

As a general rule:

• Contact data: for as long as a professional relationship or legitimate interest exists.
• Contractual and billing data: for the legal periods required by tax and commercial legislation.
• Marketing data: until the user withdraws consent.
• Assessment data: for as long as the relationship with the client company or the data subject is maintained, or until the data subject requests its deletion.

6. DATA RECIPIENTS

ShopShift does not sell or transfer personal data to third parties.

However, certain technology providers may access the data solely in order to provide services necessary for our activity, such as:

• Web hosting providers
• Email marketing and transactional email tools
• Web analytics tools
• Videoconferencing platforms
• CRM systems
• Business management tools
• Cloud storage providers
• Tax or accounting advisers

All of them act as data processors and are subject to the corresponding legal obligations.

7. INTERNATIONAL TRANSFERS

Some technology providers may be located outside the European Economic Area.

Where an international data transfer takes place, ShopShift will adopt the appropriate safeguards provided for in the GDPR, including standard contractual clauses approved by the European Commission or other legally recognised mechanisms.

8. USER RIGHTS

Users may exercise the following rights:

• Access
• Rectification
• Erasure
• Objection
• Restriction of processing
• Data portability
• Withdrawal of consent

To exercise any of these rights, a request may be sent to:

business@shopshift.eu

stating:

• Full name
• The right they wish to exercise
• The information needed to verify their identity

Data subjects may also lodge a complaint with the competent supervisory authority.

In Spain:

Spanish Data Protection Agency (AEPD)

www.aepd.es

9. DATA SECURITY

ShopShift applies reasonable technical and organisational measures designed to protect personal data against loss, alteration, unauthorised access or improper disclosure.

However, no security system can guarantee absolute protection.

10. COOKIES

The website uses only the following technologies:

• Technical local storage: necessary to save progress in tests and assessments and the user’s cookie choice. It does not require consent.
• Analytics cookies (Google Analytics): these allow us to understand, in aggregate form, how the website is used. They are only installed if the user expressly accepts them in the cookie notice, and with the IP address anonymised. The provider is Google LLC (USA), which may involve an international transfer covered by the safeguards described in section 7.

Users may withdraw their consent at any time by clearing this site’s browsing data in their browser or by writing to business@shopshift.eu.

We do not use advertising or profiling cookies.

11. LINKS TO THIRD-PARTY SITES

The website may contain links to external websites.

ShopShift is not responsible for the privacy practices of such sites, and users are advised to review their respective privacy policies.

12. MINORS

ShopShift’s services are aimed at professionals and companies.

We do not knowingly collect personal data from persons under 18 years of age.

13. AMENDMENTS TO THIS POLICY

ShopShift may update this Privacy Policy where necessary to adapt it to legal, technological or business changes.

The version in force will always be the one published on the website.

14. CONTACT

For any matter relating to this Privacy Policy or to the processing of your personal data, you may contact:

ShopShift

Email: business@shopshift.eu

Website: www.shopshift.eu