Privacy policy
Last updated: 19 August 2026
1. Controller
BUFETE SALAS, S.L.P., Spanish tax ID B75378257, C/ del Archiduque Luis Salvador no. 7B, 07004 Palma de Mallorca, Illes Balears, Spain. Contact: info@regtechtrust.com.
2. Personal data we process
We may process identification and contact details, information included in enquiries, professional, contractual or billing data, and the minimum technical data required to secure the website.
3. Free assessment
Answers to the website assessment are processed exclusively in your browser using deterministic logic. They are not received, stored or associated with an identity. If you request a review by email, we process only the data you voluntarily include.
The custom GPT assessment is provided through ChatGPT, an external service. Before using it, review its terms and privacy policy, and do not enter personal, confidential or sensitive information.
4. Contact through WhatsApp
If you start a conversation through WhatsApp, your telephone number, profile name, message and any other information you provide will be processed to respond to your enquiry or take steps at your request before entering into a contract. WhatsApp is an external service governed by its own terms and policies and may involve international data transfers.
5. Purposes and legal bases
Enquiries and requests: steps requested before entering into a contract (Article 6(1)(b) GDPR) or, for other voluntary enquiries, our legitimate interest in responding (Article 6(1)(f)), subject to a balancing assessment. Consent is used only for specific processing that requires it. Providing services: performance of a contract (Article 6(1)(b)). Tax, accounting or professional duties: legal obligation (Article 6(1)(c)). Security and legal claims: legitimate interests (Article 6(1)(f)), subject to a balancing assessment. Marketing communications: consent (Article 6(1)(a) GDPR and section 21.1 of Spain's Information Society Services Act) or, where all statutory requirements are met, a prior contractual relationship concerning similar services.
6. Required information
Information marked as required is necessary to deal with a request or provide a service. If it is not provided, we may be unable to proceed. Please do not send sensitive data or third-party information unless it is necessary.
7. Use of artificial intelligence
AI may be used as a supporting tool, subject to human review, data minimisation and confidentiality measures. We do not make decisions producing legal or similarly significant effects based solely on automated processing. BUFETE SALAS, S.L.P. accepts editorial responsibility for published content.
8. Retention
Personal data is retained for as long as necessary for each purpose and for any applicable legal periods or periods required to bring or defend legal claims.
9. Recipients
We do not sell personal data. Service providers acting as processors may have access under contract and confidentiality obligations, and data may be disclosed to authorities where required by law. Data entered directly into external services is also processed under the relevant provider's policies.
10. International transfers
Where a provider processes personal data outside the European Economic Area, the applicable transfer mechanism will be used and information will be provided on how to obtain a copy of the relevant safeguards.
11. Your rights
You may request access, rectification, erasure, restriction, portability or object to processing, and withdraw consent without affecting the lawfulness of prior processing, by emailing info@regtechtrust.com. You may lodge a complaint with the Spanish Data Protection Agency.
12. Security
We apply proportionate technical and organisational measures to protect the confidentiality, integrity and availability of personal data.
13. Cookies
This version of the website does not use advertising or analytics cookies. Only strictly necessary technical resources may be used. If non-exempt technologies are introduced, the relevant information and consent mechanism will be provided.
14. Changes
This policy may be updated to reflect regulatory, technical or service changes.