Privacy Policy

Last updated: September 13, 2026

This Privacy Policy explains how we collect, use, store and protect your personal data when you access and use cardanhouse.com (the "Site"), owned by Growth Forge, S.L.

This Site is informational: it requires no registration, has no user accounts and processes no payments. It does include forms to download free resources.

1. Data controller

2. Data we collect

  • Contact data you provide: if you email us (for example, to ask about our services), we process your email address, your name if provided, and the content of your message.
  • Download form data: when you request a free resource (for example, “The AI fluency scale”), we process your email address, your team size if provided, whether you agree to receive commercial communications, the requested resource, the page language and the date.
  • Aggregated technical browsing data: we use a cookieless analytics tool (Vercel Analytics) that collects aggregated, anonymous metrics (page views, country, device type). It cannot identify you and does not track you across sites.
  • Technical server logs: our hosting infrastructure may temporarily record IP addresses and technical data for security and operational reasons.

3. Purposes and legal basis

  • Handling your enquiries and requests (legal basis: pre-contractual measures at your request and/or legitimate interest in responding).
  • Delivering the resource you request through the download form and recording the request (legal basis: performance of your request).
  • Sending you commercial communications about Cardan House, only if you tick the corresponding box in the form (legal basis: your consent, which you can withdraw at any time by writing to us).
  • Ensuring the security and operation of the Site (legal basis: legitimate interest).
  • Measuring Site usage in aggregate to improve it (legal basis: legitimate interest; no cookies or personal identifiers are used).

We do not send commercial communications unless you request or expressly consent to them.

4. Recipients and processors

We do not sell or transfer your data to third parties. We use technology providers acting as data processors:

  • Vercel Inc. (Site hosting and cookieless aggregated analytics).
  • Email provider to manage the communications you send us.
  • Slack Technologies, LLC (internal communication tool where we receive download form requests).

5. International transfers

Some of our providers may process data outside the European Economic Area (EEA). In such cases, the corresponding legal safeguards apply, such as Standard Contractual Clauses or other valid measures under the GDPR.

6. Data retention

  • Email communications are kept for as long as needed to handle your enquiry and, where applicable, the subsequent relationship.
  • Download form data is kept for as long as needed to handle your request. If you agreed to commercial communications, we keep it until you withdraw your consent or ask us to delete it.
  • Data is also retained for the periods required by legal obligations or for the establishment, exercise or defence of legal claims.

7. Security

We apply reasonable technical and organisational measures to protect your data against unauthorised access, alteration, loss or destruction. However, given the nature of the Internet, absolute security cannot be guaranteed.

8. Your rights

You have the right to:

  • Access, rectify or erase your data.
  • Object to processing in certain circumstances.
  • Request restriction of processing.
  • Request portability of your data.
  • Withdraw consent at any time (where applicable).

You can exercise these rights by writing to: manu@cardanhouse.com.

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

9. Changes to this policy

We may update this Privacy Policy to reflect changes to the Site or to regulations. The current version will always be published on this page with its update date.

Contact: 📧 manu@cardanhouse.com