Privacy Policy

 This policy explains how LeaderNess collects and uses personal data when you visit our pages, register for a webinar, apply to a program, book a call with us, or take part in one of our programs.

1. Who is responsible for your data

  • Controller: Carbau Leadership SL, trading as LeaderNess

  • Tax ID (NIF): B70814579

  • Registered address: Carrer Volta dels Garrofers, 58, 08340 Vilassar de Mar, Barcelona, Spain

  • Contact for privacy matters: info@leaderness.net

  • Website: leaderness.net

We have not appointed a Data Protection Officer because the law does not require one for an organisation of our size and activity. You can contact us about anything in this policy at the email above.

2. What data we collect

  • Webinar registration form: name, email, chosen session, role and company (optional), any question you send us.

  • Program application form: name, email, LinkedIn profile, role and company, team size, chosen level and track, your answers about your goals and challenges, who will pay, how you heard about us.

  • Call booking (Google Calendar): name, email and any note you add to the booking.

  • Emails and calls with us: what you tell us, and our notes of the conversation.

  • Leadership assessments: your answers to the LeaderNess assessment questionnaires, the answers of the people you invite to rate you, and the resulting scores and reports (see section 3).

  • Program participation: billing details (name, company, tax ID, address), coaching session notes and attendance.

  • Our pages: technical data needed to show the page (such as IP address and browser type), handled by our hosting and form providers.

We don't ask for special categories of data (such as health, beliefs or ethnicity). Please don't include them in open answers. If something personal comes up in a coaching session, it stays between you and your coach and is used only for that coaching.

We also collect the referral source when you arrive through a link with a tracking parameter (for example from LinkedIn or a partner organisation), so we know which channels work.

3. Why we use it and on what legal basis

  • Send you the webinar invitation and run the session: your consent when you register (GDPR art. 6.1.a).

  • Review your application and reply to you: steps taken at your request before a contract (art. 6.1.b).

  • Hold the call you booked: steps taken at your request before a contract (art. 6.1.b).

  • Deliver the program, including the leadership assessments, coaching and materials: performance of the contract (art. 6.1.b).

  • Invoice and keep accounting records: legal obligation under Spanish tax and commercial law (art. 6.1.c).

  • Send you one follow-up about the program after a webinar: your consent (art. 6.1.a).

  • Send news about future programs and events: your consent, asked for separately (art. 6.1.a); or, if you were a client, our legitimate interest in offering similar services, with an opt-out in every email (LSSI art. 21.2).

  • Understand which channels bring participants: our legitimate interest in improving our communication (art. 6.1.f), using referral data only.

  • Research on leadership, using anonymised assessment data: see below. Once data is anonymised it no longer identifies you and is no longer personal data; turning it into anonymous data is a use compatible with the original purpose (GDPR art. 5.1.b and 89).

You can withdraw consent at any time by replying to any of our emails or writing to info@leaderness.net. Withdrawing doesn't affect what we did before.

We don't make decisions about you using only automated means. Every application is read by one of the LeaderNess partners.

Leadership assessments and research

Part of our programs is the LeaderNess leadership assessment: a questionnaire you complete about yourself and that people you choose (colleagues, team members, people from your personal life) complete about you. We use it to give you a personal report and to guide your coaching.

  • Who sees your results: you, and the LeaderNess coaches working with you. We don't share your individual results with your company or anyone else without your permission.

  • People who rate you: you invite them and tell them the questionnaire is part of your development. Their answers are used only to build your report.

  • How we store it: in providers that meet European data protection standards, with access limited to the LeaderNess team, in line with the GDPR and the Spanish Data Protection Act (LOPDGDD).

  • Research: we may anonymise assessment data, removing names, emails and anything else that could identify you or your raters, and use it in combination with other participants' data for research on leadership. This includes statistical analyses, improving and validating our assessment, and academic publications. Research results are always reported in aggregate and never identify a person or a company.

  • Your choice: if you'd rather your data were not included in research, write to info@leaderness.net before it is anonymised and we will leave it out.

4. Who we share it with

We don't sell your data. We share it only with:

  • Service providers acting on our behalf (data processors), under contracts that oblige them to protect it:

  • Typeform S.L. (Barcelona, Spain): webinar registration and application forms

  • Google Ireland Ltd: email, calendar, Google Meet and document storage (Google Workspace)

  • Your company, if your company pays for the program: we share invoicing details and attendance, never the content of your assessment or coaching unless you agree.

  • The partner organisation that referred you, if you came through one: only the fact that you enrolled and the level, so we can settle their referral fee.

  • Public authorities, when the law requires it (for example the tax authorities).

International transfers

Some providers (such as Google and Typeform's infrastructure) may process data outside the European Economic Area, including in the United States. When that happens, the transfer is covered by the EU–US Data Privacy Framework where the provider is certified, or by the European Commission's Standard Contractual Clauses.

5. How long we keep it

  • Webinar registrations: 12 months after the webinar, then deleted, unless you apply or ask to hear from us.

  • Applications not followed by enrolment: 12 months after the cohort starts, so we can contact you about the next one. You can ask us to delete it sooner.

  • Program participants (assessments, coaching notes, attendance): for the duration of the program and 3 years after it ends, so we can support you and compare results if you return. After that we delete it or keep it only in anonymised form.

  • Invoices and accounting records: 6 years, as required by Spanish commercial law.

  • Newsletter consent: until you unsubscribe.

When the period ends, we delete the data or anonymise it so it can no longer identify you. We may keep anonymised, aggregated results (for example average scores of a cohort) to improve the program.

6. Your rights

You can ask us at any time to:

  • Access the data we hold about you and get a copy

  • Correct data that is wrong or incomplete

  • Delete your data when we no longer need it or you withdraw consent

  • Restrict how we use it while a question is being resolved

  • Object to uses based on our legitimate interest, including any marketing

  • Port the data you gave us to another provider in a common format

  • Withdraw consent you gave earlier

Write to info@leaderness.net with the subject "Data protection" and tell us what you'd like. We may ask you to confirm your identity. We reply within one month.

If you think we haven't handled your data properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es). We'd appreciate the chance to fix it first, so please write to us.

7. Security

We keep your data in accounts protected with two-step verification, limit access to the LeaderNess partners and the coaches working with you, and choose providers that meet European data protection standards.

8. Cookies

Our program pages don't use advertising or analytics cookies. The forms and booking tools we link to (Typeform and Google) set the cookies they need to work and may show their own cookie notice. [If you add analytics or the LinkedIn Insight Tag later, add a cookie banner and a cookie policy before turning them on.]

9. Changes to this policy

If we change how we use your data, we'll update this page and the date at the top. If the change is significant and we have your email, we'll tell you.