Privacy Policy
Privacy Policy
Last updated: 19 August 2026
At TABOGA, we respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains how we collect, use and protect personal information when you visit our website, contact us or submit information through our forms.
It also explains your rights under applicable data protection legislation, including Regulation (EU) 2016/679 (the “GDPR”) and Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (“LOPDGDD”).
1. Who is responsible for your personal data?
The data controller responsible for processing personal data through this website is:
Legal entity: TabogA
Trading name: TABOGA
Tax ID / NIF: ESY4782332W
Registered address: Calle Escultor José Capuz,28. 46006
Location: Valencia, Spain
Email: partners@taboga.solutions
Website: taboga.solutions
For any questions regarding this Privacy Policy or the processing of your personal data, you may contact us at partners@taboga.solutions.
2. What personal data do we collect?
Depending on how you interact with TABOGA, we may collect the following categories of personal data:
Contact and professional information, such as your name, company, business email address and professional role.
Market and business information, such as your target market, market development stage, therapy or product area, business objectives and the information you choose to provide when requesting a strategy call or contacting us.
Communications, including information contained in emails, enquiries, meetings or other communications with TABOGA.
Technical and usage information, where applicable, such as browser type, device information, IP address, pages visited and information about how visitors interact with our website.
We aim to collect only the personal data that is reasonably necessary for the relevant purpose, in accordance with the GDPR principle of data minimisation.
3. How do we collect your personal data?
We may collect personal data when you:
- submit a form through our website;
- request a Strategy Call;
- contact us by email or through another communication channel;
- communicate with TABOGA in connection with a potential or existing business relationship; or
- browse and interact with our website, where permitted by applicable law and your cookie preferences.
In certain B2B circumstances, we may also receive professional contact information from publicly available professional sources, business contacts, referrals or organisations with which you are associated.
Where personal data has not been obtained directly from you, we will provide the information required under applicable data protection law where necessary. The GDPR contains additional transparency requirements when personal data comes from another source.
4. Why do we process your personal data?
TABOGA may process personal data for the following purposes:
Responding to enquiries and Strategy Call requests
To review the information you submit, understand your market opportunity and contact you regarding a potential Strategy Call or business discussion.
Assessing strategic fit
To understand your company, target market, therapy or product, market development stage and business objectives, and to determine whether TABOGA's capabilities may be relevant to your needs.
Managing business relationships
To communicate with prospective clients, clients, partners and other professional stakeholders and to manage ongoing business relationships.
Providing TABOGA services
Where a commercial relationship exists, to deliver and manage agreed market development, market intelligence, stakeholder engagement, market access, business development or related services.
Improving our website and services
To understand how our website is used, maintain its security and performance, and improve the user experience.
Complying with legal obligations
To meet applicable legal, regulatory, accounting and administrative requirements.
5. What is our legal basis for processing?
Depending on the circumstances, we process personal data on one or more of the following legal bases:
Pre-contractual measures and performance of a contract
Where processing is necessary to respond to a request made by you before entering into a business relationship or to perform an agreement with you or the organisation you represent.
Legitimate interests
Where processing is necessary for our legitimate business interests, including managing B2B relationships, responding to professional enquiries, developing business opportunities, maintaining website security and operating TABOGA's business, provided those interests are not overridden by your fundamental rights and freedoms.
Consent
Where consent is required by law, particularly for certain cookies, analytics technologies or electronic communications. Where processing is based on consent, you may withdraw that consent at any time.
Legal obligation
Where processing is necessary to comply with applicable laws or regulatory requirements.
6. How long do we keep your personal data?
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected.
Information submitted through a Strategy Call or business enquiry may be retained while the potential business opportunity is being evaluated and for a reasonable period afterwards where there is a legitimate possibility of future professional engagement.
Where a contractual relationship is established, relevant personal data may be retained for the duration of the relationship and afterwards for the periods required by applicable legal, accounting, tax or regulatory obligations.
Where processing is based on consent, relevant data may be retained until consent is withdrawn, subject to any applicable legal retention requirements.
When personal data is no longer required, it will be deleted, anonymised or securely restricted where appropriate.
The GDPR requires organisations not to retain personal data for longer than necessary for the purposes for which it was collected.
7. Who may receive your personal data?
TABOGA does not sell personal data.
Personal data may be accessed by service providers that support the operation of our website and business, where necessary. These may include providers of:
- website hosting and e-commerce infrastructure;
- cloud and data storage;
- email and business communications;
- website analytics;
- customer relationship management and business administration;
- cybersecurity and technical services; and
- professional legal, accounting or compliance services.
These providers may process personal data on our behalf and are required, where applicable, to handle it in accordance with appropriate contractual and data protection obligations.
We may also disclose personal data where required by law, court order, regulatory authority or other legally binding obligation.
8. International data transfers
Some technology or service providers used by TABOGA may process or store personal data outside the European Economic Area (“EEA”).
Where personal data is transferred outside the EEA, TABOGA will take appropriate measures to ensure that the transfer complies with applicable data protection law.
Depending on the circumstances, these safeguards may include an adequacy decision adopted by the European Commission, Standard Contractual Clauses approved by the European Commission, or another legally recognised transfer mechanism.
The GDPR requires information about transfers outside the EU and applicable safeguards to be provided where relevant.
9. Cookies and analytics
Our website may use cookies and similar technologies for essential website functionality and, where applicable, analytics and performance measurement.
Non-essential cookies will be used in accordance with applicable consent requirements.
Further information about the cookies and technologies used on this website will be available in our Cookie Policy.
Where required, you will be able to manage your cookie preferences through the cookie consent mechanism available on the website.
10. How do we protect your personal data?
TABOGA applies appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.
Access to personal data is limited to persons and service providers who reasonably require access for legitimate business purposes.
No internet-based system can be guaranteed to be completely secure. However, we take reasonable measures appropriate to the nature of the personal data and the risks associated with its processing.
11. Your data protection rights
Subject to the conditions established by applicable law, you may have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete personal data.
- Request erasure of your personal data where applicable.
- Request restriction of processing in certain circumstances.
- Object to processing based on legitimate interests.
- Request data portability where legally applicable.
- Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.
- Object to direct marketing at any time.
These are among the principal rights recognised under the GDPR.
To exercise your rights, please contact:
We may request reasonable information to verify your identity before processing a request.
You also have the right to lodge a complaint with the competent supervisory authority.
In Spain, the supervisory authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD).
Spanish Data Protection Agency (AEPD)
12. Automated decision-making
TABOGA does not currently use personal data collected through this website to make decisions based solely on automated processing that produce legal effects or similarly significant effects on individuals.
If this changes, this Privacy Policy will be updated accordingly.
13. Third-party websites
Our website may contain links to third-party websites or services.
TABOGA is not responsible for the privacy practices or content of third-party websites. We encourage you to review the applicable privacy information before providing personal data to third parties.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or data processing practices.
The most recent version will always be published on this website together with the date of the latest update.
15. Contact
If you have any questions about this Privacy Policy, the way TABOGA processes personal data or the exercise of your data protection rights, please contact:
TABOGA
Taboga
ESY4782332W
Valencia, Spain
partners@taboga.solutions