PRIVACY POLICY — META CHANNEL CORPORATION LTD.
Last updated: April 1, 2026
This policy complies with Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 (LOPDGDD), and the Data Protection Act 2018 of Ireland.
1. Data Controller
Controller: META Channel Corporation Ltd.
CRO: 801240 (Companies Registration Office, Ireland)
Address: 34 Holywell Avenue, Feltrim Hall, Swords, Dublin, K67 Kf22, Ireland
Privacy Contact: info@metachannelcorp.com
For any questions regarding the protection of your personal data, you may contact us at any time via info@metachannelcorp.com.
2. Principles Governing Our Processing
We process your data in accordance with the principles of lawfulness, fairness, and transparency; purpose limitation; data minimization; accuracy; storage limitation; integrity and confidentiality; and accountability (Art. 5 GDPR). We only collect data strictly necessary for each stated purpose.
3. Processing activities: breakdown by purpose
3.1 Business contact form
What data we collect: name, company, email, phone number, country, free-form message.
Why we use it: to respond to your inquiry, request for information, or proposal for commercial collaboration, and to follow up with you during the pre-contractual or negotiation process.
Legal basis: Art. 6.1.b GDPR — implementation of pre-contractual measures at the data subject’s request. Subsequent non-intrusive follow-up is based on the legitimate interest of META Channel Corporation Ltd. (Art. 6.1.f GDPR).
How long we retain the data:
If no contractual relationship is established: 1 year from the last communication.
If a contractual relationship is formalized: for the duration of the contract plus 5 years, in accordance with the general statute of limitations for contractual claims.
To whom we disclose the data: the data is accessible only to authorized personnel of META Channel Corporation Ltd.. As data processors, the data is hosted on Google Workspace systems (Gmail, Drive) and on Odoo S.A. (business management system), with whom we maintain data processing agreements in accordance with Art. 28 GDPR.
International transfers: Google LLC (U.S.) adheres to the EU-U.S. Data Privacy Framework (European Commission Adequacy Decision, July 2023), which guarantees a level of protection equivalent to that in Europe. Odoo S.A. operates servers within the European Union; no transfers occur outside the EEA.
3.2 Integration forms in META Channel Legal Desk
Applicable to: Partner Network (Lawyer Spain), International Network (International Lawyer), Business Club, and University Program.
What data we collect: full name, professional email address, phone number, date of birth, country, location, LinkedIn, professional website, professional photo, bar association details, license number, years of practice, practice areas, languages, availability, practice format, motivation, references, resume, and supplementary documentation.
Why we use it: to evaluate, process, and manage the application for membership in the corresponding META Channel Legal Desk network or program; to manage membership if accepted; and to facilitate internal coordination among network members in the provision of Legal Desk services.
Legal basis: Art. 6.1.b GDPR — performance of pre-contractual measures at the express request of the data subject, who voluntarily initiates the application process.
Regarding the professional photograph: it is collected as an element of identification and presentation in the Legal Desk professional directory. Its provision is voluntary; its absence does not prevent the processing of the application.
How long we retain the data:
If the application is accepted: during the period of active membership plus 5 years after its termination.
If the application is rejected or remains unresolved: 1 year from receipt of the application.
CVs and attached documentation: these are deleted or unlinked once the application has been resolved, unless the accepted member requests that an updated version be retained in the file.
To whom we disclose the data: authorized personnel of META Channel Corporation Ltd. For the purposes of internal network coordination, the professional profile data (not sensitive personal data) of accepted members may be accessible to other members of Legal Desk to the extent strictly necessary for the provision of the service, a circumstance that the data subject is aware of and accepts when applying for membership.
As data processors, the data is hosted and processed on the following systems:
Google Workspace (Google LLC, USA): text data from the form is stored in Google Sheets; attachments (CV, photo, documents) are stored in Google Drive, accessible only via a private link with restricted access.
Odoo S.A. (Belgium, EU): internal management of professional relationships and contacts. Servers located in the European Union.
IONOS SE (Deutsche Telekom, Germany, EU): email delivery service (SMTP) for automatic acknowledgment and welcome notifications generated when the form is submitted.
Google reCAPTCHA v2: This form incorporates Google LLC’s reCAPTCHA service to prevent automated submissions. reCAPTCHA collects user navigation and interaction data (IP address, browser information, mouse movements) and transmits it to Google, which acts as an independent data controller for such data in accordance with its own privacy policy: https://policies.google.com/privacy. This transmission is covered by the EU-US Data Privacy Framework.
International transfers: Google LLC (U.S.) — EU-U.S. Data Privacy Framework. IONOS SE and Odoo S.A. operate within the EU; no transfers outside the EEA take place.
3.3 Application Form (Job Openings and Unsolicited Applications)
What data we collect: name, company, email, phone number, country, desired position, resume, comments.
Why we use it: to manage the selection process for filling advertised vacancies or to evaluate unsolicited applications. If there is no suitable vacancy at the time of application, we retain the profile to consider it in future processes, always within the specified timeframe.
Legal basis: Art. 6.1.b GDPR — implementation of pre-contractual measures at the data subject’s request (selection process). In the event that the candidate requests that their profile remain in the database for future processes: Art. 6.1.a GDPR (explicit consent, requested separately).
How long we retain the data: 1 year from receipt of the application, unless the candidate has given express consent for retention in the talent pool, in which case until such consent is withdrawn or for a maximum of 3 years.
To whom we disclose the data: only authorized personnel at META Channel Corporation Ltd. involved in the selection process. The data is hosted on Google Workspace.
International transfers: identical to those described in section 3.1.
3.4 Marketing communications and newsletters
What data we collect: name and email address.
Why we use it: to send informational communications, publications, regulatory updates, and commercial communications regarding META Channel Corporation Ltd.’s services
Legal basis: Art. 6.1.a GDPR — express consent of the data subject, given freely, specifically, in an informed manner, and unambiguously through a positive action (double opt-in). This consent may be withdrawn at any time without affecting the lawfulness of processing prior to its withdrawal.
How long we retain the data: until the data subject withdraws their consent, unsubscribes, or requests the deletion of their data.
To whom we disclose the data: authorized personnel at META Channel Corporation Ltd.. For the technical management of mailings, Odoo S.A. (Belgium, EU) will be used as the email marketing platform, with a data processing agreement in accordance with Article 28 of the GDPR. No data will be disclosed to third parties for purposes other than sending the requested communications.
International transfers: Odoo S.A. operates with servers in the European Union; no transfers occur outside the EEA.
3.5 Customer Management and Contractual Relationships
What data we collect: identifying data, contact information, information relevant to the provision of the contracted service, and billing data.
Why we use it: provision of the contracted services, administrative management and billing, and compliance with legal obligations arising from the contractual relationship.
Legal basis: Art. 6.1.b GDPR (performance of the contract) and Art. 6.1.c GDPR (compliance with legal obligations regarding tax, commercial, and accounting matters).
How long we retain the data: for the duration of the contractual relationship plus the applicable statutory limitation periods: 6 years for contractual obligations (Statute of Limitations, Ireland), 5 years for civil actions in Spain, and 10 years for accounting and tax documentation (Law 58/2003 General Tax Law; Companies Act 2014).
To whom we disclose the data: tax and accounting advisors at META Channel Corporation Ltd., banking institutions for the management of collections and payments, and public agencies when required by applicable regulations. Additionally, Google Workspace and Odoo as internal management platforms.
3.6 Cookies and Tracking Technologies
The processing of data resulting from the use of cookies and similar technologies is fully described in our Cookie Policy, which forms an integral part of this policy.
4. Your rights
Under the GDPR and applicable regulations, you have the right to:
Access: to know what data we process about you and how.
Rectification: to request the correction of inaccurate or incomplete data.
Erasure (“right to be forgotten”): to request the deletion of your data when, among other cases, it is no longer necessary for the purpose for which it was collected.
Restriction of processing: request that we temporarily suspend the use of your data under certain circumstances.
Portability: receive your data in a structured and commonly used format, when the processing is based on consent or a contract and is carried out by automated means.
Objection: object to the processing of your data in cases based on legitimate interest, including profiling based on such interest.
Withdrawal of consent: in any processing based on consent, withdraw it at any time without retroactive effect.
Not be subject to automated individual decision-making that produces significant legal effects.
How to exercise your rights: by sending a written request to info@metachannelcorp.com, indicating your first and last names, a copy of your identification document, and the specific right you wish to exercise. We will respond within a maximum of one month from receipt of the request (extendable by an additional two months due to complexity).
5. Right to lodge a complaint with supervisory authorities
If you believe that the processing of your data does not comply with current regulations, you may file a complaint with:
Irish Data Protection Commission (lead authority, company incorporated in Ireland):
Data Protection Commission (DPC)
https://www.dataprotection.ie
info@dataprotection.ie
Spanish Supervisory Authority (processing carried out from Spain):
Spanish Data Protection Agency (AEPD)
https://www.aepd.es
https://sedeagpd.gob.es
The exercise of this right does not affect any other administrative or judicial remedies to which you may be entitled.
6. Data Security
META Channel Corporation Ltd. has adopted the necessary technical and organizational measures to ensure the security of personal data and prevent its alteration, loss, unauthorized processing, or access, taking into account the state of technology, the nature of the data, and the risks to which it is exposed. These measures include encryption in transit (HTTPS/TLS), role-based access control, and confidentiality agreements with authorized personnel.
7. Minors
META Channel Corporation Ltd.’s services are intended exclusively for professionals and individuals over the age of 16. We do not knowingly collect data from individuals under this age. If we discover that we have received data from a minor without parental consent, we will immediately delete it.
8. Updates to this policy
This policy may be updated to reflect changes in our processing practices or in applicable regulations. The date of the last update appears at the beginning of the document. We recommend that you review it periodically. Substantial changes will be proactively communicated to the affected data subjects.