Effective Date: January 1, 2026
Last Updated: February 12, 2026
Prospectify Sales Solutions, S.L. (“Prospectify”, “we”, “us”, or “our”) is committed to protecting personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Spanish data protection laws.
This Privacy Policy explains how we collect, use, process, and safeguard personal data in connection with our B2B outreach and sales development services.
1. Data Controller
Prospectify Sales Solutions, S.L.
Registered in Spain
Registered Office: Valencia, Spain
Email: support@weprospectify.com
Website: www.weprospectify.com
Lead Supervisory Authority:
Agencia Española de Protección de Datos (AEPD)
Prospectify acts as an independent Data Controller when conducting B2B outreach activities on behalf of itself or its clients.
2. Categories of Personal Data We Process
We process strictly professional contact data necessary for B2B communication:
Professional Contact Data
- Full name
- Business email address
- Business phone number
- Job title
- Employer / company name
- Professional location
Business Context Data
- Industry
- Company size
- Publicly available company information
Technical Data
- IP address
- Browser type
- Website interaction data (via cookies)
Communication Data
- Email correspondence
- Meeting notes
- Call logs
- Campaign interaction data
We do not intentionally process special category data (Art. 9 GDPR), sensitive personal data, or private consumer data.
3. Sources of Personal Data (Art. 14 GDPR)
We may obtain professional contact data from:
- Publicly accessible sources (e.g., LinkedIn, corporate websites, company registers)
- Reputable B2B data intelligence providers
- Business networking platforms
- Referrals or direct interactions
- Our clients (where relevant for campaign execution)
Where data is obtained indirectly, we inform individuals at first contact or within 30 days, as required under Article 14 GDPR.
We do not act as a data broker and do not sell personal data.
4. Legal Basis for Processing
We process personal data under the following lawful bases:
Legitimate Interest (Art. 6(1)(f) GDPR)
For professional B2B outreach, lead generation, and business development activities.
We have conducted a Legitimate Interest Assessment (LIA) to ensure that:
- Processing is necessary for B2B communication;
- Only professional data is processed;
- Outreach is relevant to the individual’s professional role;
- Individuals can object easily at any time.
Contractual Necessity (Art. 6(1)(b))
To fulfill obligations to our clients.
Consent (Art. 6(1)(a))
For newsletter subscriptions and certain tracking technologies.
Legal Obligation (Art. 6(1)(c))
For accounting, tax, or regulatory compliance.
5. Profiling and Segmentation
We may conduct limited profiling for business relevance, including:
- Industry segmentation
- Company size filtering
- Role suitability analysis
- Campaign engagement scoring
This profiling:
- Is strictly related to professional roles;
- Does not produce legal effects;
- Does not significantly affect individuals;
- Is used solely to assess the relevance of business communication.
You are entitled to object to profiling at any time.
6. How We Share Data
We do not sell personal data.
We may share data only with:
Sub-processors
Including:
- Cloud hosting providers
- CRM systems
- Email automation platforms
- Analytics providers
All sub-processors are contractually bound by Data Processing Agreements and GDPR safeguards.
Authorities
When legally required.
We do not contribute prospect data to third-party commercial databases.
7. International Data Transfers
Where data is transferred outside the EEA (e.g., to the United States), we ensure safeguards such as:
- European Commission Adequacy Decisions
- Standard Contractual Clauses (SCCs)
- Additional technical and organizational safeguards
8. Data Retention
Client Data
Retained for the duration of the contract plus statutory retention periods (typically 5–10 years).
Prospect Data
Retained for a maximum of 24 months after last interaction, unless:
- An objection is received earlier; or
- Continued engagement justifies lawful retention.
Suppression List
If you object to marketing communication, your contact details will be retained in a suppression list to prevent future contact.
Suppression data is retained indefinitely for compliance purposes.
9. Your Rights Under GDPR
You have the right to:
- Object to processing (Art. 21)
- Access your data (Art. 15)
- Rectify inaccurate data (Art. 16)
- Request erasure (Art. 17)
- Restrict processing (Art. 18)
- Data portability (Art. 20)
- Lodge a complaint with AEPD
To exercise your rights:
support@weprospectify.com
We respond within 30 days.
10. Data Security
We implement appropriate technical and organizational measures, including:
- Encryption in transit and at rest
- Role-based access control
- Regular data audits
- Vendor compliance reviews
- Limited internal data access
11. Marketing Communications
All outreach communications:
- Clearly identify Prospectify or our client
- Provide a opt-out mechanism
- Are limited to professional relevance
- Respect objection requests immediately
12. Updates
We may update this Privacy Policy to reflect legal or operational changes. The “Last Updated” date will reflect revisions.