Privacy Policy

From MIRAI ADVISORY, S.L.U. (hereinafter, the "Controller", “we” or "Mirai"), We want to give you all the details about how we process the personal data you provide when interacting with us. This policy applies to all individuals who have provided us with personal data through any means where this policy is referenced, such as forms on this website. Protecting the personal data of our clients and users is a core value for Mirai.  

In accordance with both REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons concerning the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation - GDPR) and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights, this is the detailed information on the processing of your personal data:

1. Identity of the data controller

• Name: MIRAI ADVISORY, S.L.U.  
• Registered office: Ponce de León 2, 1ºC, 28010, Madrid, Spain.
• Tax ID Num.: B-86759743
• Contact email: gdpr@mirairisktech.com
• Data Protection Officer contact email: dpo@mirairisktech.com.

2. Purposes of the data processing

Mirai processes your personal data for the following purposes:

• Management of inquiries and requests for registration for our events and webinars.
• Management of reservations for demo versions of our products.
• Management of requests and contact through various forms, in addition to the above, and established contact means for this purpose on the web.
• Reception of CVs from candidates interested in the vacancies published through the website.
• The management, administration, provision, and improvement of our services, as well as the maintenance and improvement of our website.
• Sending newsletters about our products or services that we consider may be of interest to you.
• Communication for purely administrative or internal organizational purposes with the other companies in our group, located in the United States, Mexico, and the United Kingdom:
  • Mirai Risk Tech UK Limited
  • Mirai Advisory USA Inc.
  • MIRAI ADVISORY MX S DE RL DE CV.

3. Legal basis for the data processing

The legal basis for the processing of your data will depend on the purpose for which the personal data is being processed:

• With respect to the management of inquiries and requests we may receive through our forms (including the management of requests to attend events and webinars), as well as the management, administration, and improvement of services, and the sending of newsletters, we will process your personal data if you have given us your express, free, and unequivocal consent, in accordance with the provisions of Article 6.1.a) GDPR.
• Regarding requests to reserve a demo version of our products, as well as in the case of managing CVs received in response to vacancies published on the website, the processing of personal data will be based on the implementation of pre-contractual measures (Article 6.1 (b) GDPR).
• Finally, and with respect to communications to the other entities in our group, this processing will be based on the legitimate interest of Mirai, for purely administrative, internal, and financial management purposes, in accordance with the provisions of Article 6.1.f) GDPR and 19 LOPDGDD.  

The data we request is adequate, relevant, and strictly necessary to carry out the described purposes.

You guarantee the authenticity, accuracy, and truthfulness of all information you provide and commit to keeping your data updated to reflect your current situation at all times. 

4. Who do we share your data with?

• Your personal data may be transferred to the public authorities if we must comply with a legal obligation or in response to a request from such authorities.
• On the other hand, it is possible that HubSpot, as the entity on whose environment our website is based and through which the cookies we use for service improvement are installed, may at some point access the information extracted from your browsing on it.
• Furthermore, we may communicate them to the companies related to us mentioned above for the control and administrative and financial management of Mirai and the rest of the associated entities, or for sending newsletters if expressly consented, or to effectively manage attendance at events and webinars organized by said third entities.
• Finally, we inform you that the aforementioned data communications may involve the transfer of data to third countries, which may or may not offer a level of protection equivalent to that guaranteed by us. However, we want to inform you that we have entered into appropriate data processing agreements with these third parties, which require them to adopt sufficient security measures to guarantee the protection of your personal data. In any case, we are at your disposal to clarify any questions regarding the processing of your data by us or by these third parties.

5. How long will we keep your data for?

Mirai will keep the data for the time necessary to fulfill the purpose for which it was collected, to guarantee the provision of the service, and to comply with our legal obligations.  

Specifically, and with respect to those processing purposes based on the user's consent, we will keep the data until the consent is withdrawn or until they are no longer necessary to fulfill the purpose of the processing.

On the other hand, and with respect to data processed based on the establishment of pre-contractual measures:  

• With respect to the request for the demo version of our products, if a service provision contract is not finally formalized, the data will be kept for the time necessary to fulfill the purpose for which it was collected.
• If the product is subsequently contracted, the retention period will correspond to those contractual obligations and needs about which Mirai will inform at the time of contracting.
• CVs we receive that do not correspond to selected candidates will be kept for a period of one year from their reception.

Data processed based on Mirai’s legitimate interest for administrative or internal management purposes will be kept for the time necessary to fulfill the purpose of the processing, as long as the relationship between Mirai and the interested party remains active.

Once the aforementioned retention period has elapsed, your data will be deleted using appropriate security measures. However, we will keep it securely blocked for the period required by applicable law to address any potential future claims and defend our interests. You can request to unsubscribe from the newsletter, if you have subscribed to it, at any time through the link established for this purpose in the newsletter itself, or by contacting the email address gdpr@mirairisktech.com.

6. How do we protect your data?

Mirai is committed to adopting the necessary security measures to prevent the modification, alteration, loss, processing, or unauthorized access of your data, in accordance with the provisions of the GDPR.

Mirai guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of users and has communicated the appropriate information so that they can exercise them. Mirai recognizes and takes its responsibility to protect your personal data very seriously.

That is why Mirai maintains personal data security levels in accordance with the GDPR and has established all technical means at its disposal to prevent the loss, misuse, alteration, unauthorized access, and theft of the data you provide. However, please be aware that Internet security measures are not infallible. In addition, Mirai is ISO 27001 certified to ensure compliance with information security.

7. How can you manage the processing of your data?

You can exercise your rights of access, rectification, erasure, and objection, as well as those of limitation and portability, at the email address gdpr@mirairisktech.com, indicating what action you request from us. Likewise, you can contact Mirai's Data Protection Officer at the address dpo@mirairisktech.com.

The exercise of all these rights is free, and, for the sake of greater transparency, we provide you with more information about these rights: 

Likewise, you can exercise your rights before the entities that receive your personal data, of which we have previously informed you, by communicating directly with those entities.

We also inform you that you have the right to file a complaint with the Spanish Data Protection Agency www.aepd.es, although due to our strong commitment to privacy, we invite you to contact us directly to resolve any issue related to your personal data; we will be happy to help you. 

8. Modification of this personal data policy

Mirai reserves the right to modify this policy to adapt it to future legislative or jurisprudential developments, as well as to industry practices, by previously informing users through our website. We recommend that you consult this page frequently to review the most recent version. At the bottom of this document, we indicate the date of the last update.

The new Privacy Policy will be effective from the moment of its publication. If you do not accept the modifications to the new notice, you may exercise any of your rights or stop using our service. If you continue to access or use our services after these modifications come into effect, you agree to be bound by the new privacy policies. In no case will these modifications affect the choice you have made regarding how Mirai may process your personal data. If at any time we wanted to use your data for a purpose other than that established at the time of collection, we will notify you by email, requesting your consent for it.

Likewise, Mirai reserves the right to terminate the services it provides to those users who do not comply with the legal terms and conditions of use, as well as with current legislation.

Date of the last update: September 2025. 

Leer en español