This Privacy Policy (hereinafter, the “Privacy Policy”) shall apply to all personal data provided by the User to “ACK3 Consultoría de Riesgos Globales SL” (hereinafter, “ACK3“), with the latter being the Controller and Owner of the website.

ACK3 provides Users with this document in order to comply with the legal obligations regarding Data Protection.

Any person accessing this website shall be considered a User. Users undertake to observe and comply strictly with the provisions of this document, as well as any other applicable legal provisions.

In order to use some of the services provided by ACK3, the User must provide personal data beforehand. ACK3 will process these data manually/automatically/mixed and will apply the corresponding security measures in order to comply with the provisions of current legislation.



In accordance with current legislation, we inform you that the personal data provided by you as a User will be processed as Controller by ACK3 with registered address at Calle Manuel de Falla 14, 1ºA, 28100, Alcobendas, Madrid, Spain.

You can contact the Data Protection Officer of ACK3 via Email:

The capitalized terms included in this privacy policy correspond to the definitions included in the General Conditions of Access to Digital Services.

User data will be processed in accordance with the provisions of current legislation on personal data protection, Regulation (EU) 2016/679 of April 27, 2016 (hereinafter “GDPR”) and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights. The processing of User’s personal data shall be subject to the principles set out in Article 5 of the GDPR.



The contact form implies the need for the User to provide, at least, the data requested therein identified as mandatory. The refusal to provide this data implies the impossibility of completing the contact form, and, consequently, of providing any kind of service and of properly fulfilling our contractual commitments to you. Additionally, you may provide other additional data not requested in the contact form with the aim of improving the provision of ACK3 services.

The processing of your data allows ACK3 to contact you to offer and hire the required services. Simultaneously, all personal data provided to ACK3 will be necessary, in addition to facilitating the contracting process, to keep you informed through our personalized newsletters and to facilitate and carry out personnel recruitment processes.



We collect, store, and process personally identifiable information that identifies you or makes you identifiable through other records. Specifically, we collect data from your device related to geolocation, IP address, unique identifiers, and other data related to your activity on the Website. We also collect personal data about registration on the Website, specifically, data such as your name, surname, email or postal address, and other personal data that you provide us with.



Personal data is collected and managed by ACK3 for the following purposes:

  • Maintaining communications with you to send notifications related to our services, provide technical information, and solve any problems through customer service. This purpose is based on the proper execution of the contract entered into with ACK3.
  • Personalized advertising purposes. This purpose is based on User’s consent.
  • Carrying out commercial communications related to our services and the marketing and promotion of our websites and products. This processing purpose is based on the consent provided by the User. It may be based on ACK3’s legitimate interest as long as the User already has the status of a customer for having had previous commercial relationships with ACK3 and has not withdrawn their consent for the processing of their data.
  • Conducting statistical and analytical tests and studies in order to improve the Website. This processing purpose is based on ACK3’s legitimate interest in analyzing and improving its services and content.
  • Organizing, selecting, and carrying out selection processes for new employees for ACK3. This processing purpose is based on the User’s consent when submitting their personal information.



As a User, you may exercise any of the following rights against the Data Controller at any time:

  • Right of access: You may request ACK3 to indicate whether your personal data is being processed or not and, if so, you have the right to obtain information, free of charge, about the processing that has been carried out or will be carried out on your personal data, as well as all information about the recipients of such data.
  • Right to erasure: You have the right to request ACK3 to erase your personal data when:
    • The personal data collected are no longer necessary for the purposes for which they were collected, nor are they necessary, specifically, for the execution of contractual obligations between you and ACK3.
    • You have withdrawn your consent to the processing of your personal data and there is no legitimate reason to continue with the processing.
    • Personal data have been processed unlawfully.
    • Personal data must be erased due to compliance with a legal obligation.
  • Right of rectification: You have the right to modify your personal data provided erroneously, inaccurately, or incompletely at any time.
  • Right to restriction: You may request ACK3 to restrict the processing of your personal data when:
    • a) The data subject challenges the accuracy of the personal data, for a period allowing the controller to verify the accuracy thereof;
    • b) The processing is unlawful and the data subject opposes the erasure of the personal data and requests instead the restriction of their use;
    • c) The controller no longer needs the personal data for the purposes of the processing, but the data subject needs them for the establishment, exercise or defense of legal claims;
    • d) The data subject has objected to processing pursuant to the Right to Object. while it is being verified whether the legitimate grounds of the controller prevail over those of the data subject.
  • Right to data portability: You may request ACK3 to receive your own personal data in a structured, commonly used, and machine-readable format and to transmit them to another controller without hindrance from the Controller when:
    • The processing is based on consent
    • The processing is carried out by automated means
    • You may exercise any of these rights by written communication addressed to the data processor, specifying:
      • Name, surname of the User, and ID.
      • Request with specific reasons for the request or information to be accessed.
      • Address or email for notifications.
      • Date and signature of the applicant.
      • Any document supporting the request made.
This request and any other attached document may be sent to the following address and/or email:
  • Postal address: Paseo de la Castellana, 259 C, 28046 Madrid, Spain
  • Email:




You, as a user, are responsible for ensuring that the data you provide to ACK3 is accurate, true, complete, and up-to-date. You, therefore, will be responsible in any case for the veracity of all the data you provide and will have the duty to keep the provided information duly updated to adapt it at all times to your real situation.

Similarly, as a User, you will be responsible for the false, erroneous, and inaccurate information provided through forms, electronic or postal correspondence, and any other means of providing information to ACK3, as well as for the damages, whether direct or indirect, that this information may cause to ACK3 or third parties.

If applicable, you as a User are responsible for having the required legal capacity to process, provide, and use personal data of third parties, being the responsibility of the USER to properly comply with their data protection obligations and to have the consent of the individual owners of such personal data.



We are fully committed to protecting the privacy and security of minors in the online environment. For this reason, the Website is not designed or intended for use by minors. Under no circumstances will we allow the use of our services by minors without the prior authorization or consent of a parent or legal guardian. Additionally, we do not intentionally collect any kind of personal information from minors. If a parent or legal guardian becomes aware that their child has provided us with personal information without their authorization, we kindly ask them to contact us immediately. By accepting this Privacy Policy, you declare and warrant that you are over 18 years of age.



You have the right not to be subject to a decision based solely on automated processing of your personal data. Therefore, decisions that may affect you will always, at the very least, be reviewed and ratified by a human component of ACK3.



The personal data provided by you, as a User, will not be disclosed to third parties, unless it is necessary for the provision of the requested services or when you have expressly agreed to their disclosure.

Personal data provided by the User WILL be communicated to group companies, provided that they are involved in the provision of the services requested by the User. Personal data to third-party group companies are solely for the purpose of executing the contract with the User.

Personal data may be communicated to the competent Authorities, Administrations, and Public Bodies in accordance with current legislation and when there is a legal obligation to do so.



Contact details for sending commercial communications will be processed until the moment when the User revokes consent for their sending, exercising their right as indicated in the section on User Rights. Data of registered Users will be processed until the request for unsubscribing, the loss of such status for any other reason, or for a maximum period of THREE (3) YEARS.

The data required for specific requested services will be retained for as long as they are necessary for the provision of such services, and subsequently, your data will be retained for the legally established periods for any liabilities arising from the services provided.



ACK3 has implemented the necessary technical and organizational measures, according to the appropriate level of security for the risk of the personal data collected, with the aim of guaranteeing the security of personal data and preventing the destruction, loss, or accidental or unlawful alteration of personal data transmitted, stored, or otherwise processed, or unauthorized access to or disclosure of such data.

In any case, ACK3 cannot guarantee absolute security of your personal data.

Therefore, we inform you that there is a risk of unauthorized and fraudulent access to personal data. ACK3 is committed to informing the User, without undue delay, if a security breach of personal data occurs, and, if applicable, if it is likely to entail a high risk to the rights and freedoms of individuals. In accordance with the provisions of the GDPR, a “security breach” is understood to be any breach of security that results in the destruction, loss, or accidental or unlawful alteration of personal data transmitted, stored, or otherwise processed, or unauthorized access to or disclosure of such data.



ACK3 may modify its Privacy Policy in accordance with the legislative developments that may be applicable at any time.

In any case, any modification of the Privacy Policy will be duly notified to you with the aim of informing you about the changes made in the processing of your personal data.