Data protection

Privacy policy

What personal data ownex.co collects, what it is used for, who else processes it and how to ask for it to be deleted. This is all there is: a contact form and a usage measurement that is only switched on if you accept it.

In force since 2 September 2026

1. Data controller

The personal data collected through ownex.co is processed by Jaime Fernández Elegido, as the person responsible for the Ownex project. For any matter relating to your data, including the exercise of the rights in section 8, write to that address.

2. What data we collect and what for

Only the data you voluntarily provide in the contact form is collected:

• First and last name (required): so we can address you when we reply.
• Email (required): to answer your request and arrange the call.
• Company (required): to prepare the conversation knowing the brand.
• Sector, size of community and the round you are considering (optional): to assess the fit before talking.

The page you arrive from is also recorded, along with whether the submission comes from the calculator, so we know which part of the website originates each conversation. No special categories of data are collected, no bank details or personal financial data are requested, and there is no profiling or automated decision-making.

3. Legal basis

The processing of the form data relies on your consent, which you give when you submit it (Art. 6(1)(a) GDPR), and on the pre-contractual measures requested by you (Art. 6(1)(b)), which is what happens when you ask for a call to assess the service.

The usage measurement described in section 4 relies exclusively on your consent (Art. 6(1)(a) GDPR), the consent you give in the cookie banner. Legitimate interest is not invoked here: the current measurement installs an identifier on your device and records the course of your visit, so Art. 22.2 of Spanish Law 34/2002 requires prior permission and no other basis is available. If you do not give it, no browsing data is processed. You can withdraw it whenever you want from Cookie preferences, in the footer of the home page, without that affecting the lawfulness of the processing carried out beforehand.

4. Analytics and session recording

Use of the website is measured with PostHog, on its European instance, and with Google Analytics 4. They are only activated if you accept them in the banner. Until then neither tool is downloaded and nothing is written on your device.

If you accept, the following is recorded: pages viewed and time spent, clicks and elements pressed, scroll depth, sections read, FAQ questions opened, use of the calculator, form submissions, where the visit came from and technical browser data (device type, operating system, language and an approximate city-level location, inferred from the IP address).

Only PostHog records the course of the visit. Google Analytics receives pages viewed, time spent, where the visit came from and the same usage events, with Google's advertising signals switched off.

The course of the visit is also recorded, so that scrolling and clicks can be replayed later to understand where people leave the page. What you type into the form fields is masked at source and is never recorded, so that recording does not contain your name, your email or anything else you type.

All of it is associated with a random browser identifier, not with your identity: neither PostHog nor Google receives your name or your email, not even when you submit the form. The cookie-by-cookie detail is in the cookie policy.

5. Providers that process data

These providers process data on behalf of the controller, as processors, and only for what is stated:

• Vercel Inc. (United States): website hosting and running the form.
• Intuit Inc., Mailchimp (United States): the platform where your contact details are stored and from which communications about the project are sent.
• PostHog (European instance, data hosted in the European Union): usage analytics and session recording, only with your consent.
• Google Ireland Limited (Ireland, with possible access from Google LLC in the United States): usage analytics with Google Analytics 4, only with your consent.

Data is not sold or transferred to third parties. Beyond these processors, data would only be disclosed if a legal obligation required it.

6. Transfers outside the European Union

Vercel, Intuit and Google LLC are established in the United States and are certified under the EU-US Data Privacy Framework, which the European Commission recognises as providing an adequate level of protection. Their processing terms also incorporate the standard contractual clauses approved by the Commission.

7. Retention

The form data is kept for as long as the conversation is live and, afterwards, for as long as you remain interested in the project. You can unsubscribe whenever you want, and every communication we send includes a one-click link to do so.

After unsubscribing or after a deletion request, the data is erased, except for anything that has to be retained for the applicable statutory limitation periods.

8. Your rights

As the data subject you have the right to:

• Access the data we hold about you.
• Rectify it if it is inaccurate or incomplete.
• Request its erasure when it is no longer necessary.
• Object to the processing or restrict it.
• Request portability of the data you provided to us.
• Withdraw your consent at any time, without that affecting the lawfulness of the processing carried out beforehand.

To exercise them, write to privacidad@ownex.co. The request is handled within one month. If you consider that the processing does not comply with the regulations, you can lodge a complaint with the Spanish Data Protection Agency, at aepd.es.

9. Changes to this policy

This policy will be updated when the processing activities or the providers change, for example when the platform opens to investors. If the change is significant and you are already in contact with us, we will let you know by email before applying it.

Last updated: September 2026