Privacy Policy

1. Who is the Data Controller?

The data controller is Marga Guitart ("5MC"), a company duly incorporated under the laws of [COUNTRY], with tax identification number [TAX ID / CIF] and registered office at [FULL REGISTERED ADDRESS].

Where 5MC has appointed a Data Protection Officer, you may contact them at hello@margaguitart.com.

2. How Do We Collect Your Personal Data?

5MC collects and processes personal data from people who interact with us through the Website, including prospective corporate clients, mentor applicants, mentees, and general visitors. The type of information we collect depends on how you interact with us, whether you submit a business enquiry, apply to become a mentor, or simply browse the Website.

We only collect the minimum information necessary to provide our services and carry out our activity. We are firmly committed to protecting your data and your privacy, and we take every precaution to keep it secure. We do not share or sell your personal data to third parties for marketing or promotional purposes.

At the point of collection, you will be informed of the specific processing that applies (for example, through the relevant form). We also collect limited personal information and anonymous aggregate statistics from all visitors to the Website, whether because you actively provide such information or simply because you browse the Website. This information is collected through cookies and similar technologies. For further details, please see our Cookie Policy.

In addition to the information you actively provide, when you visit the Website we automatically collect certain technical information that does not, on its own, identify you, such as your IP address, browser type and language, device type, operating system, referring website, the pages you visit and the date and time of your visit. This information is collected through server logs and analytics tools (such as Google Analytics or similar services) and is used to keep the Website secure, diagnose technical issues, and understand how the Website is used so that we can improve it.

We may also receive personal data about you from third parties, for example: if you choose to register or log in using a third-party account (such as Google or LinkedIn), in which case we receive the profile information you authorise that service to share with us; if a colleague or corporate contact refers or invites you to 5MC's Website or programmes; or from professional data enrichment providers, which may supplement the information we hold about your organisation or job title in order to better tailor our services to you. Where we receive data in this way, we only use it for the purposes described in this Policy.

3. For What Purposes Do We Process Your Personal Data?

At 5MC, we process the information you provide us in order to respond to your enquiries, manage our relationship with corporate clients and mentor applicants, deliver and administer our corporate mentoring services, and keep you informed, through the channels you have authorised, about matters relating to our activity and services similar to those you have previously requested or shown interest in.

Some of the (non-exhaustive) reasons why we may process your data include:

• Responding to enquiries you send us regarding our corporate mentoring services.
• Assessing and managing applications from individuals who wish to join 5MC as mentors, including reviewing professional background, credentials and suitability.
• Administering our contractual and pre-contractual relationships with corporate clients, mentors and mentees.
• Communicating with you about 5MC's services, programmes and relevant updates.
• Improving the Website and the experience of the people who use it, including through analytics.
• Keeping the Website secure and diagnosing technical issues.
• Handling and resolving complaints or queries addressed to 5MC.
• Complying with applicable law and regulatory or contractual requirements.

Direct marketing. Where permitted, we may use your contact details to send you information about 5MC's services, programmes or events that may be of interest to you, based on your consent or on our legitimate interest as described in Section 5. You may object to or opt out of these communications at any time, free of charge, either by following the unsubscribe instructions included in each communication or by contacting us at hello@margaguitart.com. Opting out of marketing communications will not affect any transactional or service-related communications we may still need to send you.

4. What Data Do We Collect?

Depending on how you interact with 5MC, the information we may collect includes, without limitation:

• Identification data: full name and, where relevant, date of birth.
• Contact details: postal address, phone number(s) and email address.
• Professional data: job title, company, sector, professional experience, background, languages and areas of development (in particular for mentor applications and corporate enquiries).
• Where required for mentor applications, verification data such as professional credentials, certifications, references and, where necessary for compliance or safeguarding purposes, identity verification documents.
• Records of your correspondence and interactions with 5MC.
• Information you submit when you contact us or book a discovery call, or via form (if any).
• Technical and browsing data collected automatically through cookies, server logs and analytics tools, such as your IP address, browser type, device information and pages visited (see our Cookie Policy).
• Any other information you choose to share with 5MC.

5. What is the Legal Basis for Processing Your Data?

The processing of your data is based, depending on the purpose, on one or more of the following legal grounds:

Performance of a contract or pre-contractual steps: where processing is necessary to respond to your enquiry, assess your mentor application, or manage the services requested by a corporate client.

Legitimate interest: the sending of information about our activity and services, as well as the technical operation, security and improvement of the Website, are based on 5MC's legitimate interest as data controller. Where our legal basis is legitimate interest, 5MC has carried out a balancing test between the interest pursued and your rights and freedoms, and concluded that the former does not override the latter. You may request further information about this balancing test by contacting us through the channels indicated in this Policy. You may object at any time to this type of processing, without this affecting any ongoing relationship with 5MC unless you request otherwise.

Consent: where the purpose of processing requires your consent (for example, certain uses of cookies or optional fields in our forms), this will be given through a clear affirmative action when you voluntarily complete the relevant form and accept this Policy. You may withdraw your consent at any time, without retroactive effect.

Compliance with a legal obligation: where processing is necessary to comply with legal or regulatory requirements applicable to 5MC.

6. Who Receives Your Data?

As a general rule, we do not disclose your personal data to third parties, except in the following cases:

• Where a judicial or administrative authority lawfully requests data from our files, in which case we will disclose it to the extent required by law.
• To service providers and collaborators that process data on 5MC's behalf as data processors, such as hosting and IT providers, video-conferencing and scheduling tools used to deliver mentoring sessions, customer relationship management (CRM) systems, communications and email platforms, analytics providers, translation services, and, where applicable, providers that assist with the verification of mentor credentials. These third parties only access the data strictly necessary to perform the contracted service, are contractually bound to use it exclusively for the specified purposes, and are subject to strict confidentiality obligations under a formal data processing agreement that ensures compliance with applicable data protection law.
• To mentors, mentees or corporate clients directly involved in a mentoring engagement, to the extent necessary to manage matching, sessions and follow-up. For example, a mentor's professional profile (such as name, background, areas of expertise and, where provided, photograph) may be shared with corporate clients and mentees for matching purposes, and only with the relevant participant's knowledge.
• In the context of a corporate transaction. If 5MC is involved in a merger, acquisition, restructuring, or sale of all or part of its business or assets, personal data may be disclosed to the parties involved as part of that transaction, subject to appropriate confidentiality safeguards and to this Policy continuing to apply to your data.

Personal data we store is always transmitted over secure connections, so your data travels across the Internet encrypted and protected. We only work with hosting and technology providers that offer appropriate contractual and technical guarantees and, wherever possible, are compliant with the GDPR or equivalent data protection standards.

7. How Do We Keep Your Data Safe?

We implement appropriate technical and organisational security measures to prevent the unauthorised access, use, alteration, disclosure or destruction of your personal data. Your data is stored in a secure environment and treated confidentially.

Where we rely on third-party hosting or technology providers to store or process data on our behalf, those providers may not use your personal data for any purpose other than delivering the contracted service, and are required to act consistently with this Policy and to apply appropriate security measures to protect your data.

We also take reasonable steps to ensure that our staff and collaborators who are granted access to personal data receive adequate guidance so that such data is only processed in accordance with this Policy and with our obligations under applicable law. No security measure is completely infallible, however, and we cannot guarantee the absolute security of information transmitted over the Internet. Further information about our data security practices can be provided on request by contacting hello@margaguitart.com.

8. Cookies and Do Not Track

The Website uses cookies and similar technologies (such as pixels or tags) to ensure its proper functioning, to understand how the Website is used, and, where you have consented, for analytics purposes. Further details on the categories of cookies we use, their purpose and duration, and how you can manage your preferences, are set out in our Cookie Policy.

Some web browsers offer a "Do Not Track" (DNT) signal that lets you tell websites you do not want your online activity tracked. At present, the Website does not respond to DNT signals. You can, however, manage cookies directly through your browser settings or through the cookie preference tools described in our Cookie Policy.

9. International Data Transfers

5MC's principal market is Latin America, and in the course of our activity your data may be accessed from, or transferred to, countries outside the European Economic Area (EEA), for example, where a mentor, corporate client or service provider is located in Latin America.

Where such a transfer takes place, we ensure it is carried out with all the safeguards required by the General Data Protection Regulation (GDPR) and applicable law. This means the transfer will be protected through the European Commission's Standard Contractual Clauses, an applicable adequacy decision, or other valid transfer mechanisms and appropriate safeguards recognised by law, together with any supplementary measures necessary to ensure a level of protection essentially equivalent to that guaranteed within the EEA.

You can request further details about specific international transfers, including a copy of the relevant safeguards, by contacting us through the channels indicated in Section 14 below.

10. How Long Do We Keep Your Data?

We only retain your information for as long as necessary. The retention period depends on the purpose for which the data is processed and on applicable legal or regulatory requirements, such as tax, commercial or labour regulations, or other contractual obligations we may have. Once the retention period has ended, your data will be deleted or destroyed securely, or anonymised.

As a general guide:

• Enquiries are retained for as long as necessary to respond to and follow up on your request, and for a limited period afterwards to handle any related queries.
• Mentor and mentee application data is retained while your application is under review and, if accepted, for the duration of your relationship with 5MC, plus the periods required by applicable legal or contractual obligations thereafter.
• After an account or relationship with 5MC ends, we may retain limited data for as long as necessary to comply with legal obligations, resolve disputes, prevent fraud, enforce our agreements, and preserve evidence within the applicable statute-of-limitations period.
• Where processing is based on your consent (for example, to receive communications), we will periodically ask you to reconfirm that consent, and you may withdraw it at any time as described in Section 5.
• Technical and analytics data collected automatically through cookies is retained only for the period described in our Cookie Policy, in line with the retention settings of the relevant analytics tool.

We will keep your personal data for as long as our relationship with you continues, or until you exercise your right to erasure, restriction or objection. In such cases, we will block your data, without further use, unless we are legally required to retain it, in which case its recovery would only be possible for that purpose.

In accordance with applicable law, your data may thereafter remain blocked and available to courts, tribunals or public prosecutors for the purpose of addressing any liabilities arising from its processing, only for the applicable statute-of-limitations period.

11. Third-Party Links and Embedded Content

The Website may, from time to time, include links to third-party websites, or embedded content such as videos or other material hosted on third-party platforms. These third parties have their own, independent privacy policies, and 5MC has no responsibility or control over their content, practices or data handling. Embedded content behaves in the same way as if you had visited the third-party website directly, and that third party may collect data about you, use cookies, and monitor your interaction with the embedded content.

We encourage you to review the privacy policy of any third-party website or service before providing personal data to it. This Policy applies only to data collected by 5MC through the Website.

12. Children's Privacy

The Website and 5MC's services are directed at businesses and professional individuals and are not intended for, or directed at, children. We do not knowingly collect personal data from children under the age of 16 (or the relevant age of digital consent in your jurisdiction). If you believe a child has provided us with personal data, please contact us at hello@margaguitart.com so that we can delete it.

13. What Are Your Rights?

Under applicable data protection law, you may exercise the following rights, as applicable:

14. Who Can You Contact About the Protection of Your Data?

You can exercise your rights of access, rectification, erasure, portability, restriction and objection, and withdraw any consent previously given, by sending a written and signed request, together with a copy of your identity document, to hello@margaguitart.com.

Please include the reference "Data Protection Request, Exercise of Rights" in your communication. Because these are individual rights, 5MC must verify that they are being exercised by the data subject or an authorised representative. Accordingly, if we have doubts about your identity, we may request additional information to confirm it, such as a copy of your national ID, passport or equivalent identifying document (or your electronic signature). If someone exercises these rights on your behalf, they must evidence their identity and provide documentation proving their authorisation.

We will respond to your request as soon as possible and, in any event, within one month of receipt. This period may be extended by a further two months where necessary, considering the complexity and number of requests. We will inform you of any such extension within the first month following your request. Where a request is manifestly unfounded or excessive, in particular because of its repetitive character, we may, as permitted by applicable law, charge a reasonable administrative fee or decline to act on the request. We will explain our reasons if we do so.

If you believe we have not handled your personal data appropriately, you may contact us through the channels indicated above. You also have the right to lodge a complaint with the competent data protection supervisory authority. Where the controller is established in Spain, this is the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001 Madrid. Tel.: 901 100 099 / 91 266 35 17. https://www.aepd.es). If you are located outside Spain, you may also lodge a complaint with the supervisory authority in your own country of residence or place of work.

15. Updates to This Policy

This Privacy Policy was last updated on 21 July 2026. 5MC reserves the right to modify this Policy where there is a change in applicable law, case law, our business practices, or for reasons related to our own criteria. If any change is made to this Policy, the updated text will be published at this same web address, together with the revised "Last updated" date shown above.