Privacy Policy

Last updated: 29 April 2026

This Privacy Policy clearly and transparently explains how personal data collected through the website www.coactivat.com is processed. The website is owned by Fimar 21, S.L., the entity responsible for CoActiva’t Coworking.

1. Data controller

2. Personal data we may process

We may process the personal data that users voluntarily provide when contacting us, requesting information, booking a visit, contracting services or communicating through the website, telephone, email, WhatsApp or social media.

Depending on each case, the data processed may include:

• First name and surname.
• Email address.
• Telephone number.
• Message or information included in contact forms.
• Data required to manage visits, commercial requests, bookings or the contracting of coworking services, offices, business address services or related services.
• Billing, tax, contractual or administrative data when there is a commercial or contractual relationship.
• Technical browsing data, such as IP address, online identifiers, device, browser or cookie preferences, where applicable.
• Data derived from interaction with CoActiva’t or Fimar 21, S.L. social media profiles when the user contacts us through those platforms.

3. Purposes of processing

Personal data may be processed for the following purposes:

• To respond to information requests received through forms, email, telephone, WhatsApp or social media.
• To manage bookings for visits to the CoActiva’t workspace.
• To manage the pre-contractual or contractual relationship with interested parties, clients, coworkers, companies or professionals.
• To provide coworking services, office rental, business address services, receipt of communications, meeting rooms or other related services.
• To send information related to the requested services.
• To manage invoicing, payments, accounting, tax, administrative and legal obligations.
• To guarantee the security, maintenance and proper functioning of the website.
• To analyse website usage through analytical cookies, only when the user has given consent.
• To send commercial communications about similar or related services when there is a legal basis to do so or when the user has given consent.

4. Legal basis for processing

The processing of personal data is carried out in accordance with the following legal bases:

• User consent: when the user submits a form, accepts non-essential cookies, requests information or authorises commercial communications.
• Performance of pre-contractual or contractual measures: when the data is necessary to manage a request, visit, quotation, booking, contract or provision of services.
• Compliance with legal obligations: especially in tax, accounting, commercial, administrative matters or in response to legal requirements.
• Legitimate interest: to maintain website security, prevent misuse, manage communications with users or clients and improve services, always respecting the rights and freedoms of the data subjects.

5. Data retention

Personal data will be kept for the time necessary to fulfil the purpose for which it was collected and, subsequently, for the legally required periods.

• Enquiries received by form, email, telephone or WhatsApp may be kept for the time necessary to respond to the request and carry out reasonable commercial follow-up.
• Data relating to clients or contracting users will be kept while the contractual relationship remains in force and during the periods required by applicable tax, accounting, commercial or legal regulations.
• Data processed on the basis of consent will be kept until the user withdraws that consent.
• Data linked to cookies will be kept as indicated in the Cookie Policy.

6. Data recipients

We do not sell personal data to third parties.

Data may be communicated to or processed by third parties only when necessary to provide the service, comply with legal obligations or properly manage the activity. These may include:

• Hosting providers, website maintenance providers, email services, form tools, CRM systems, analytics tools, cybersecurity providers or communication management tools.
• Tax, accounting, legal or administrative advisors.
• Banks or payment gateways when necessary for financial management.
• Public authorities, the Tax Agency, courts, law enforcement bodies or competent organisations when there is a legal obligation.
• Third-party tools such as Google, Meta, WhatsApp or other platforms, only when the user interacts with those services or has accepted the relevant cookies.

When a provider processes personal data on behalf of Fimar 21, S.L., the corresponding data processing agreement will be sought in accordance with applicable regulations.

7. International data transfers

As a general rule, no international data transfers outside the European Economic Area are planned, unless they are necessary due to the use of technology providers or external platforms such as Google, Meta, WhatsApp, email services, hosting, analytics or similar tools.

If international transfers occur, the legally required safeguards will be adopted, such as adequacy decisions, standard contractual clauses or other mechanisms recognised by data protection regulations.

8. User rights

Users may exercise the following rights at any time:

• Access.
• Rectification.
• Erasure.
• Objection.
• Restriction of processing.
• Data portability.
• Withdrawal of consent.
• Not to be subject to automated decisions, including profiling, where applicable.

To exercise these rights, users may send a request to hola@fimar.info, indicating the right they wish to exercise and providing, where necessary, sufficient information to verify their identity.

Users also have the right to lodge a complaint with the Spanish Data Protection Agency through its official website: www.aepd.es.

9. Commercial communications

Commercial communications will only be sent when there is user consent, a prior relationship that legally allows it or another applicable legal basis.

Users may request at any time to stop receiving commercial communications by writing to hola@fimar.info or by using the unsubscribe mechanism included in the communication, where available.

10. Contact forms

The purpose of the website forms is to handle information requests, visits, bookings or enquiries related to CoActiva’t Coworking and the services offered.

By submitting a form, the user declares that the data provided is true, accurate and up to date. Fields marked as mandatory are necessary in order to properly manage the request.

11. Use of WhatsApp, telephone and email

If the user contacts us by WhatsApp, telephone or email, their data will be processed to respond to the enquiry, manage the commercial relationship or provide the requested service.

The use of WhatsApp or other external platforms also implies that the user accepts the terms and privacy policies of those platforms.

12. Social media

CoActiva’t or Fimar 21, S.L. may have a presence on social media. When users interact with social media profiles, their data may be processed to manage that interaction, respond to messages, comments or requests and maintain the relationship with the community.

Data processing carried out by each social network will also be governed by its own privacy policies.

13. Cookies and similar technologies

This website may use technical cookies that are necessary for its operation and, if the user accepts them, analytical, preference or third-party cookies.

Users can obtain more information in the Cookie Policy.

14. Data security

Fimar 21, S.L. applies reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, misuse or unauthorised disclosure.

However, no system connected to the Internet can guarantee absolute security, so users should also act prudently when providing personal information through digital channels.

15. Minors

CoActiva’t services are aimed at professionals, companies, self-employed workers and adults. We do not intentionally collect data from minors.

If a minor has provided personal data without authorisation, their legal representatives may request its deletion by writing to hola@fimar.info.

16. Accuracy of data

The user guarantees that the personal data provided is true, accurate, complete and up to date. The user shall be responsible for any incident arising from false, inaccurate or outdated data.

17. Changes to this Privacy Policy

Fimar 21, S.L. may update this Privacy Policy to adapt it to legal, technical, organisational or service-related changes.

When relevant changes are made, the date indicated at the beginning of this page will be updated.