Data controller
Controller: Cem Nalbantoğlu (CNAL Consulting)
Tax ID (NIF): ESY8832830Q
Registered address: Calle de Barrilero, 15, 1B, 28007 Madrid, Spain
Email: info@confirmsupplier.com
Phone: +34 603 342 162
Processing principles
Any personal data that may appear in our reports comes from official public registries and is processed in line with the GDPR under the legal basis of legitimate interest, article 6.1.f. Data sent through the contact form is used only to reply to your enquiry.
Data retention
We keep data for as long as it is needed for the purpose that created it.
Enquiries that do not lead to an engagement: kept while there is still a realistic prospect of resuming contact, and deleted when that prospect ends, or sooner if you ask us to.
Clients: for the duration of the relationship and, once it ends, for the periods required by Spanish commercial and tax law, including the six years set by article 30 of the Commercial Code.
Analytics data: fourteen months, as configured in Google Analytics.
Providers that process data on our behalf
To deliver the service we work with providers that access personal data only on our instructions and under each provider's data processing agreement.
Netlify, Inc. Website hosting and receipt of messages sent through the contact form.
Zoho. Business email, hosted in European Union data centres.
Google. Web analytics, only if you allow analytics in the cookie notice.
We do not disclose personal data to third parties for any other purpose and we do not sell data.
International transfers
Netlify, Inc. is established in the United States, so website hosting and contact form messages involve a transfer outside the European Economic Area. That transfer relies on Netlify's participation in the Data Privacy Framework between the European Union and the United States and, should that framework cease to apply, on the standard contractual clauses approved by the European Commission (Decision 2021/914). Both safeguards are set out in the provider's data processing agreement, which is incorporated into its terms of service.
Email remains in data centres located in the European Union.
You can request information about these safeguards by writing to info@confirmsupplier.com.
Cookies
This website sets no cookies until you choose. On your first visit a banner offers two identical buttons, Reject and Allow analytics, and nothing is loaded until you use one. Refusing is a single click, exactly like accepting, and refusing means no request to Google is ever made rather than a request made politely. Scrolling or continuing to browse is not consent. If you allow analytics, Google Analytics sets two cookies, _ga and _ga_*, both expiring after two years, which tell us which pages are read and how visitors arrive; Google is the processor under its Privacy Policy and the data is retained for 14 months. Advertising storage, ad user data and ad personalisation stay denied at all times: this site has no advertising account. We also store two technical values in the local storage of your browser, your answer to this banner and the fact that you dismissed the language notice; neither identifies you and neither is sent to any server. You can change your mind at any time using the Cookie settings control in the footer of any page.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to info@confirmsupplier.com. You can also file a complaint with the Spanish Data Protection Agency (www.aepd.es).
Last updated: 21 September 2026.