Privacy policy

Data controller

Controller

Caelum Private Equity, S.L.U.

Tax ID (NIF)

B22718514

Registered office

Paseo de los Castellanos 25, 3.º 1.ª, 28025 Madrid

Privacy contact

info@cpexs.com

Caelum is not required to appoint a data protection officer. You can send any privacy question to info@cpexs.com. This policy covers only the cpexs.com website.

What we never do with your data

• Disclose, sell or rent them to third parties.
• Use them for advertising or profiling.
• Send you marketing messages without your prior consent.
• Make automated decisions about you (Article 22 GDPR).
• Use them to train, test or feed artificial intelligence systems, including ATLAS and CBLX, or enter them into third-party artificial intelligence services.

What data we process

Only what you enter in our three forms:

• Meeting request: name, company or fund, email, project of interest and message.
• School partnership: name, position, institution and city, type of institution, email, phone if provided, programme, project and comments.
• Student applications: name, email, school, degree and year, type of placement, project, availability, link to a professional profile if provided, motivation and confirmation that you are 18 or older.

With each form we also receive two technical details that do not identify you: the page language and how you reached the site (the campaign, if you came from an ad or tagged link, or the domain of the site that linked to us). We read them from the page address, without cookies, and use them only to learn which channels work.

Please do not send us health data, beliefs or other special categories of data: we do not need them.

When you visit the site, your browser sends your IP address so that it can receive the page. Our hosting provider uses it only to deliver the content and protect the service. Caelum has not enabled access logs and does not keep or analyse these addresses. The site uses no cookies; see the cookie policy.

Purposes and legal basis

• Replying to your request and arranging the meeting. Basis: steps taken at your request prior to a contract (Article 6(1)(b) GDPR).
• Assessing and formalising partnerships with educational institutions. Basis: pre-contractual steps requested by the institution (Article 6(1)(b) GDPR).
• Assessing student applications for placements. Basis: pre-contractual steps you request by sending your application (Article 6(1)(b) GDPR).

We do not use your data for any other purpose.

Who has access to your data

Only Caelum. We do not disclose data to third parties, unless the law requires us to provide it to an authority.

For the site to work, two providers process data on our behalf as processors (Article 28 GDPR). They may use it only on our instructions and never for their own purposes:

• Amazon Web Services EMEA SARL (Luxembourg): site hosting, receipt of the forms and delivery of their content to our mailbox. Forms are processed in its European Union region (Stockholm, Sweden) and AWS does not keep them once delivered.
• Our corporate email provider, which stores the messages in the @cpexs.com mailbox.

Pages are delivered through the AWS content delivery network, which may serve visitors from servers close to them, some outside the European Economic Area. For those cases, the processing agreement with AWS includes the standard contractual clauses approved by the European Commission (Decision (EU) 2021/914).

How long we keep it

• Requests that do not lead to a relationship: deleted no later than six months after the last contact.
• Student applications: kept for twelve months from submission, as stated in the form, so they can be considered for new placements. You can ask for earlier deletion.
• If a relationship begins, for its duration and afterwards only for the periods required by law.

Minors

The forms are intended for people aged 18 or over. A student under 18 who wishes to join the academic programme should do so through their school.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability free of charge, as well as the right not to be subject to automated decisions. Write to info@cpexs.com or to our registered office stating which right you are exercising. We will reply within one month. If we have reasonable doubts about your identity, we may ask you to confirm it.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid) or with the supervisory authority in your country.

Security

We apply technical and organisational measures appropriate to the risk: encrypted HTTPS connections, encrypted storage, least-privilege permissions for each service, rate limits on submissions to prevent abuse and a spam filter that does not track visitors. Only the people at Caelum who need the data to reply to you can access it.

Applicable law

Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), Law 34/2002 (LSSI) and Regulation (EU) 2024/1689 on artificial intelligence.

If we change this policy, we will publish the new version on this page with its date. We will never extend the use of your data without telling you first.