Privacy policy

This policy explains what personal data is processed when you visit this website and when you take the Portfolio Management Excellence online assessment, and what your rights are under the EU General Data Protection Regulation (GDPR) and the Spanish Organic Law 3/2018 (LOPDGDD).

Controller

Corporate Innovators, S.L., Calle Riobamba 48, 28027 Madrid, Spain – info@corporate-innovators.com. Represented by Juan Luis Blanco Acebes.

1. Visiting this website

This website sets no cookies and uses no tracking or advertising services. The hosting provider (Vercel Inc.) processes the technical data your browser sends – IP address, date and time, requested page, browser type – in server logs in order to deliver the page and to keep it secure (Art. 6(1)(f) GDPR, legitimate interest). Logs are kept for a short period only. Fonts are loaded from Google Fonts; when the page loads, your browser sends your IP address to Google (Art. 6(1)(f) GDPR).

2. Taking the assessment

The assessment tool asks for context data that makes the benchmark meaningful: your role, years of experience, industry, company size and the scope of the portfolio you rate. Your name, e-mail address and company name are stored only if you give your consent in the form; if you decline, the assessment is submitted anonymously. Your answers and the context data are stored in a PostgreSQL database operated by Supabase on servers located in the European Union (Frankfurt, Germany).

• Your results are calculated from your answers and shown to you (Art. 6(1)(b) GDPR, performance of the service you requested).
• The benchmark uses answers in aggregated, anonymised form only; no person or company is identifiable in benchmark data or in the Benchmark Report (Art. 6(1)(f) GDPR).
• Enterprise dashboards show results of participants who used their organisation's dedicated link, at role and unit level, never as identifiable individual answers unless the participant chose to enter a name.
• The Benchmark Report is sent by e-mail only if you entered an e-mail address for that purpose (Art. 6(1)(a) GDPR, consent – revocable at any time).

The assessment stores your progress in your browser's local storage so you can pause and continue; this data never leaves your device unless you submit.

When you submit, a summary of your results is generated with the help of an AI model (Anthropic PBC). Only the numeric maturity scores are sent to that service – never your name, e-mail address, company or free-text answers.

3. Contacting us

If you write to us, we process your name, e-mail address and message to answer your request (Art. 6(1)(b) and (f) GDPR). Correspondence is kept as long as required to handle the request and by statutory retention periods.

4. Recipients and transfers

We use the following processors under data-processing agreements: Vercel Inc. (hosting of this website and of the assessment tool, USA – transfer safeguarded by the EU standard contractual clauses / EU-US Data Privacy Framework), Supabase Inc. (database, hosted in the EU, Frankfurt), Resend Inc. (sending the confirmation e-mail and the report, USA – EU standard contractual clauses) and Anthropic PBC (results summary from numeric scores only, USA – EU standard contractual clauses). We do not sell data and do not share it with third parties for their own purposes. Aggregated, anonymised benchmark results are shared with our research partner EBS Business School.

5. Retention

Assessment answers are kept as long as they are part of the benchmark data set; personal identifiers (name, e-mail, company) are deleted 24 months after your last submission or on request. Contact correspondence is deleted once the request is settled unless we are legally required to keep it.

6. Your rights

You have the right to access, rectify and erase your personal data, to restrict or object to its processing, to data portability and to withdraw consent at any time with effect for the future. Write to info@corporate-innovators.com. You may also lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos, www.aepd.es) or the supervisory authority of your country of residence.

Last updated: November 2026