Location: Barcelona, Spain
Privacy contact: info@femcert.org
1. Data we process
When you contact us or submit a certification request, we may process your name, role, organisation, country, business email, telephone number, organisation size, information about available evidence or certificates, the content of your message and technical security data associated with the submission.
2. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Answer enquiries and evaluate an initial certification request. | Your consent and steps requested before a possible contractual relationship. |
| Prepare a proposal, scope or certification process where requested. | Pre-contractual steps and, where applicable, performance of a contract. |
| Protect the form and website against misuse or fraud. | Legitimate interest in maintaining security. |
| Comply with legal, accounting or regulatory duties. | Compliance with a legal obligation. |
3. Required data
Fields marked with an asterisk are required to handle the request. If they are not provided, we may be unable to respond or assess the proposed scope.
4. Recipients and processors
Personal data may be processed by hosting, email, IT support and professional service providers acting under appropriate instructions and confidentiality obligations. If an application advances, relevant information may be shared with an eligible independent verification entity after the applicant has been informed of the applicable process.
Data is not sold. It is not disclosed to third parties for their own marketing purposes.
5. International processing
Some technology providers may process data outside the European Economic Area. Where applicable, processing will rely on an adequacy decision, approved safeguards or another valid mechanism. The language selector uses GTranslate and Google translation technology; their own privacy terms apply when the service loads.
6. Retention
Initial enquiries are normally retained for up to 24 months after the last meaningful contact. If a contractual or certification relationship begins, relevant records are retained for the duration of that relationship and for the periods required to address legal, accounting, audit or liability obligations.
7. Your rights
Subject to applicable law, you may request access, rectification, erasure, restriction, objection and portability, and may withdraw consent without affecting earlier lawful processing. Send your request to info@femcert.org with enough information to verify your identity.
You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) or the competent supervisory authority in your country.
8. Automated decisions
The contact form does not make decisions with legal or similarly significant effects. Certification levels are not issued automatically from the information submitted through this website.
9. Security and updates
Reasonable technical and organisational safeguards are applied according to the nature of the data and the service. This policy may be updated when processing activities, providers or legal requirements change. Last updated: 8 August 2026.