Privacy policy

About this privacy policy

The purpose of this Privacy Policy is to inform the user (hereinafter, the “User”) of the website (hereinafter, the “Website”) about the collection and use of his/her personal data.


What is the company responsible for processing your data?

The company responsible for processing your data is Garitano Advisors S.L.U. (hereinafter, “Indaru”), holder of Tax. I.D. number B01881986, with corporate domicile in Avenida Diagonal 640, 08017, Barcelona.

Access and/or use of the Website confers the condition of the User, and implies acceptance of this Privacy Policy.

The User may contact Indaru in connection with the present Data Privacy and Protection Policy at the following e-mail address at [email protected].


Why is Indaru legitimized to process your data?

Indaru processes the personal data of Users with a view to providing the services engaged through the Website. By accepting the present Privacy Policy, the User provides his/her consent to said processing.

Indaru takes the protection of your privacy and personal data very seriously. For this reason, your personal information is kept safely and treated with utmost care, in compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “General Data Protection Regulation” or “GDPR”).

This Privacy Policy regulates access to and use of the website and the services that Indaru makes available to Users interested in the services and content hosted on the Website. In this sense, the legitimacy used by Indaru for the treatment of the User’s data are:

  1. The execution of a contractual relationship.
  2. The consent of Users to the processing of their personal data for the purposes specified in each case.

With regard to the latter, the User may withdraw consent at any time by sending a message to the following email address: [email protected].


What are the purposes of the processing of your personal data?

This Privacy Policy regulates the access to and use of the services (hereinafter, the “Services”) which Indaru makes available to the Users interested in the services and/or content hosted on the Website.

Under the provisions of the GDPR, we hereby inform you that your personal data will be processed for the following purposes:

  1. To provide the services requested by the User on the Website.
  2. Communicate and inform the User about the requests made.
  3. To deliver commercial communications and/or newsletters to the User by email or other equivalent means of communications in connection with activities and promotions of interest to the User.

However, Users may revoke their consent in each of the commercial communications made available to them and by sending an email at any time to [email protected].


Data preservation

The data collected by Indaru will be kept during the full term of the service provision agreement entered by the parties, provided that the User does not request the prior suppression of said data. Subsequently, if necessary, Indaru will keep the information blocked within the legally established deadlines.

We hereby inform the User that his/her data will be collected only for the purposes stated in the above paragraphs and will not be processed in a way which is incompatible with said purposes.


Veracity of the data provided by the Users

The User guarantees the veracity of the personal data supplied and undertakes to communicate to Indaru any changes in said data. The User shall be responsible, in any event, for the veracity of the data supplied, and Indaru reserves the right to exclude from the services any Users who may supply false data, without prejudice to any other actions which may be initiated under the law.

It is recommended that Users protect their data with utmost diligence by using appropriate security tools. Indaru will not be liable for any theft or unlawful amendment or loss of data. Any amendments or updates of the data must be communicated to Indaru through the means of communication provided in the present Privacy Policy.


How can I revoke my consent and exercise my rights?

Users are entitled to:

  1. Access their personal data;
  2. Request the rectification of any inaccurate data;
  3. Request the erasure of their data;
  4. Request that the processing of their data be limited;
  5. Object to the processing of their data;
  6. Request the portability of their data.
  7. Not to be the subject of decisions based solely on automated data processing.

In order to exercise said rights, Users must provide proof of their identity to Indaru by sending a photocopy of their Passport or any other documents approved by law for this purpose. Users can exercise all these rights at the following email address [email protected]. The User can also send his request by post mail to the following address:

Garitano Advisors S.L.U.
Avenida Diagonal 640,
08017 Barcelona.

Without prejudice to any other administrative and/or judicial actions which may be at their disposal, Users shall be entitled to file a claim before the Supervisory Authority, in particular in the Member State where they have their usual residence or their workplace or in the place where any alleged infringement has taken place, if they consider that their personal data have not been processed in accordance with applicable regulations and/or if they have been prevented from exercising any of their rights. The Supervisory Authority receiving the claim shall inform the claimant of the situation and result of the same.


Data security and preservation

The protection of the privacy and personal data of its clients and visitors is very important to Indaru. Therefore, Indaru uses all its best efforts to prevent your data from being used inadequately. Only authorized personnel have access to your data.

Indaru keeps personal data protection security levels as provided by applicable regulations and has implemented all technical means at its disposal to prevent any loss, misuse, alteration, unauthorized access to and/or theft of the data provided by the Users through its Website, without prejudice to informing Users that security measures on the Internet are not impregnable.

Indaru undertakes to comply with its duty to maintain the secrecy and confidentiality of personal data as provided by applicable law.


Updates and changes in our Privacy Policy

Indaru reserves the right to make amendments in this Privacy Policy. For this reason, please check this Privacy Policy regularly to read the most recent version. However, any changes to this Privacy Policy will be communicated to the User.



This Website may include links to other websites. Note that we are not responsible for any data processing which may be performed by the holders of other websites. This Privacy Policy will be applied exclusively to information which we compile on this Website. We recommend that you read the privacy policies of other websites which you may access through links located on our Website or which you may visit otherwise.



If you have any questions about this Privacy Policy or the processing of your data, please contact Indaru by e-mail at the following address: [email protected].