DATA GESTION

What DATA GESTION does

DATA GESTIÓN (legal entity Aucón Asesores, S.L.) is a privately held Spanish compliance and data protection consultancy founded in 2003 and headquartered in Granada, with a secondary office in Málaga and a stated headcount of 1–10 employees. The company sells a vertically integrated compliance stack that combines proprietary in-house SaaS platforms — Plataforma DATAGEST, Canal Ético / Canal de Denuncias, and Control Horario — with professional services including external Data Protection Officer (DPO/DPD) mandates, RGPD/LOPDGDD consulting, new technologies advisory, and website legal certification. Its technology stack pairs the proprietary DATAGEST platform with a Moodle-based learning management system (formacion.datagestion.net), and the ethics channel is deployed as a white-label link on client websites with automated Ley 2/2023 7-day and 3-month deadline alerts.

The business model blends three revenue streams: (i) professional services and SaaS subscriptions sold consultatively to Spanish SMEs and public administrations, (ii) self-serve e-commerce training course sales priced between €99 and €480 per participant, and (iii) embedded FUNDAE (Spanish state training fund) bonification management that is included free of charge and can reduce net training cost to zero for eligible employers. Customer segments are led by Spanish SMEs across hospitality, healthcare, legal, retail, and construction, public administration entities (ayuntamientos, colegios profesionales), and HR departments needing time-tracking and workplace data-protection compliance; secondary segments include healthcare providers handling RGPD Art. 9 special-category data and organizations deploying AI tools that must meet AI Act Art. 4 AI literacy obligations.

Go-to-market is content-led: an SEO-optimized Spanish-language blog on RGPD, AI Act, Ley 2/2023, and time-tracking topics feeds a top-of-funnel demand engine, supplemented by the PACTO DIGITAL trust signal, an extensive client logo wall, and direct consultant-led engagement for larger compliance contracts. The company holds documented GDPR/LOPDGDD compliance, an Esquema Nacional de Seguridad (ENS) policy published November 2025, PCI-DSS compliant payment processing for the training catalog, and operates exclusively within the Spanish domestic market with no disclosed international or LATAM expansion.

Name

DATA GESTION

Legal name

Aucón Asesores, S.L.

Website

https://datagestion.net

Company type

Private

Founded year

2003

Operating status

Operating

Headcount range

1–10 employees

Short description

DATA GESTIÓN is a Granada-based Spanish compliance consultancy selling proprietary SaaS (DATAGEST, Canal Ético, Control Horario), external DPO services, and FUNDAE-subsidized online training in RGPD, AI Act, and labor-law compliance to SMEs, public administrations, and HR departments across Spain.

Ownership category

akta.pro rank

Product category

Regulatory Compliance Services

NAICS

Custom Computer Programming Services (541511), Management Consulting Services (54161)

SIC

Services-Computer Programming Services (7371), Services-Management Services (8741)

akta.pro primary industry

Data Privacy, Consent & Compliance Management (HDAEADAG)

akta.pro secondary industries

Data Governance Platforms (Policies, Stewardship, Workflows) (HDAEADAB), Data Strategy & Governance Services (BPAEAHAA)

Keywords

• Data protection consulting
• Regulatory compliance services
• Online compliance training
• Ethics channel software
• Time tracking solutions

Headquarters

HQ city

Granada

HQ country

Spain

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Compliance Consulting Services: Consulting engagements for data protection (RGPD/LOPDGDD), new technologies law, and general regulatory compliance. Includes acting as external Data Protection Officer (DPD/DPO). Revenue generated through professional service engagements with businesses and public entities in Spain. Sold consultatively via direct sales.
2. Online Training Courses: Sale of individual online courses (e-commerce model) through the datagestion.net catalog. Courses are 100% online, self-paced, and conclude with a certificate of completion. Individual course prices range from €99 to €280. Additionally, group/corporate license purchases allow companies to train multiple employees with individual, non-transferable licenses.
3. Software Platform Subscriptions (DATAGEST): Subscription-based access to proprietary compliance software platforms including the ethics/whistleblowing channel, time tracking tool, and DATAGEST compliance management platform. Delivered as SaaS, licensed per organization or user, with annual or multi-year subscription models.
4. FUNDAE Training Management: Full management of FUNDAE (Fundación Estatal para la Formación en el Empleo) training subsidy process for corporate clients. Included with training sales — not separately priced. Generates revenue through course fees that are offset (wholly or partially) by government training credits, reducing net cost to the client to zero or near-zero.
5. Web Certification Services: Legal compliance certification for websites covering LSSI-CE, RGPD, and LOPDGDD requirements. Includes legal text review, cookie consent implementation, e-commerce legal advisory, and issuance of a compliance certificate.

Pricing tiers

Go-to-market motion1 record

Distribution channels4 records

Marketing channels6 records

Core offering

Datagestión provides data protection (RGPD/LOPDGDD) consulting, regulatory compliance services (ethics channel implementation, time tracking), and online professional training courses for Spanish businesses and public administrations. The firm operates proprietary SaaS platforms — including Plataforma DATAGEST for centralized compliance management, Canal Ético for whistleblowing, Canal de Denuncias for complaints, and Control Horario for employee time tracking — bundled with external Data Protection Officer services and FUNDAE-managed training.

Product overview

DATA GESTION operates a platform-plus-services model. The core product is the Plataforma DATAGEST, a SaaS compliance management platform that encompasses sub-modules for ethical/whistleblowing channels (Canal Ético, Canal de Denuncias), time tracking (Control Horario), and integrated compliance tooling. This platform is supplemented by standalone consulting services including data protection consulting (RGPD/LOPDGDD), external DPO services, web certification, and new technologies advisory. A parallel online training catalogue (Formación Online) delivers sector-specific courses on GDPR, responsible AI, time tracking, and workplace compliance via a Moodle-based platform, with courses priced from €120–€350 and bonification through FUNDAE.

Differentiator

Problem solved

Functional benefit

Products and services

• Plataforma DATAGEST SaaS compliance management platform enabling organizations to manage regulatory obligations — including data protection, ethics channels, and time tracking — from a single centralized interface. Targeted at Spanish businesses and public entities that need a unified tool for multi-regulation compliance.
• Canal Ético Whistleblowing and ethics management module enabling anonymous or identified reporting, designation of an external responsible person, automated deadline alerts (7-day acknowledgement / 3-month investigation per Ley 2/2023 Art. 9), and integrated RGPD data protection compliance. Deployed as a white-label link on clients' own websites. Targeted at Spanish organizations required to maintain an internal whistleblowing channel under Spanish Law 2/2023.
• Canal de Denuncias Complaints channel module providing whistleblowers with unique access codes to create, submit, and track the status of their reports through the regulated Spanish ethics channel. Targeted at Spanish organizations needing a formal, auditable complaints intake process compliant with Ley 2/2023.
• Control Horario Employee time tracking tool providing a non-editable audit trail, worker self-access to personal logs, 4-year automatic retention, remote and telework adaptation, and built-in GDPR compliance. Targeted at Spanish employers required to record employee working hours under Art. 34.9 Estatuto de los Trabajadores.
• Certificación Web Website legal compliance certification service covering LSSI-CE, RGPD, and LOPDGDD adaptation including legal text review, cookie consent implementation, e-commerce legal advisory, and issuance of a compliance certificate. Targeted at Spanish organizations with public-facing websites and online stores that need documented legal compliance.
• Delegado de Protección de Datos (DPD) External Data Protection Officer service acting as appointed DPO or providing advisory support to internal DPOs. Targeted at Spanish organizations legally required or operationally advised to designate a DPO under RGPD Art. 37.
• Consultoría en Protección de Datos Data protection consulting services helping Spanish companies comply with RGPD and LOPDGDD obligations including privacy risk management, breach protocols, and regulatory mapping. Targeted at Spanish businesses and public entities needing project-based or ongoing data protection advisory support.
• Consultoría Nuevas Tecnologías New technologies consulting covering e-commerce compliance, IT contracts, and legal advisory for technology-related regulatory obligations. Targeted at Spanish organizations deploying digital channels or technology solutions that require legal and regulatory guidance.
• Formación Online (Catálogo) Online training catalogue delivered via Moodle platform covering data protection (40h, €280), responsible AI (50h, from €99 promotional), time tracking (20h, €150), workplace risk prevention, equality, and sector-specific GDPR courses for local administration and educational centers. Certificates are issued upon completion; FUNDAE bonification available. Targeted at Spanish employees and organizations needing documented compliance training.
• Curso de Inteligencia Artificial Responsable y Cumplimiento Normativo Standalone 50-hour online course on responsible AI and regulatory compliance covering AI Act Art. 4 (AI literacy), RGPD applied to AI, and practical AI tools. FUNDAE bonifiable. Targeted at Spanish organizations that must demonstrate AI literacy compliance for employees using AI tools.
• Curso de Iniciación a la Protección de Datos Standalone 40-hour online introductory GDPR course priced at €280 per participant, with sector-specific variants for hospitality, local public administration, and educational centers. FUNDAE bonifiable; certificate of completion included. Targeted at employees of Spanish organizations needing foundational data protection training.
• Curso de Control Horario: Normativa, Obligaciones y Herramientas Standalone 20-hour online course priced at €150 covering Spanish time-tracking law (Art. 34.9 Estatuto de los Trabajadores), RGPD requirements, and practical time tracking tools. FUNDAE bonifiable. Targeted at HR managers, business owners, and employees in Spanish organizations required to comply with employee time recording obligations.

Quantifiable outcome

• RGPD maximum fine: €20M or 4% global annual turnover for very serious infringements; Ley 2/2023 absence of ethics channel: up to €1M for legal entities
• +3 more outcomes

Named customers37 records

Segments6 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Scale indicators2 records

Recent moves5 records

Expansion highlights5 records

Direct peers

• Data Privacy Manager (Septeo): Spanish software group (Septeo) with dedicated RGPD, LOPDGDD, and ethics channel products serving law firms, SMEs, and corporates. Direct SaaS competitor in Spanish privacy and compliance management with broader parent backing.
• Grupo Sincro (Legalbono): Spanish compliance and data protection firm providing RGPD consulting, DPO outsourcing, and ethics channel services primarily to SMEs and public sector. Similar size, customer focus, and regulatory offering as DATAGESTION.
• Atico34: Spanish compliance consultancy specializing in data protection, time tracking, and ethics channels for SMEs and public administration. Very similar profile to DATAGESTION in terms of customer segment, regulatory focus (RGPD, LOPDGDD, Ley 2/2023), and integrated software + services model.

Broad incumbents

• TrustArc: Privacy compliance and data governance SaaS platform offering RGPD programs, consent management, and DSAR/privacy rights automation. Comparable product overlap in privacy management software, though globally focused with less depth in Spanish-specific regulatory tooling.
• OneTrust: Global privacy, security, and governance software platform offering ethics/whistleblowing, consent management, RGPD compliance, and DPO tooling. Competes in the same SaaS categories (ethics channel, privacy management) but with vastly broader international footprint and enterprise focus.
• ECIJA Legal: Large Spanish law firm with a dedicated privacy, technology, and compliance practice advising on RGPD, AI Act, and regulatory matters. Overlaps with DATAGESTION's DPO and data protection consulting services but serves primarily enterprise and large public-sector clients.
• Lefebvre (Wolters Kluwer Spain): Major Spanish legal publisher and compliance content provider offering RGPD/LOPDGDD advisory, compliance software, and training. Comparable as a one-stop Spanish compliance content + software + services provider, though with significantly larger scale and brand recognition than DATAGESTION.
• Wolters Kluwer Spain: Global compliance, legal, and regulatory information publisher with strong Spanish presence (including Lefebvre). Overlapping offerings in compliance software, regulatory content, and training across RGPD, labor law, and ethics channels — competes on breadth and brand rather than localized service.
• Auren Compliance: Multinational Spanish audit and advisory firm with a dedicated compliance practice covering RGPD, ethics, and regulatory advisory. Comparable as a Spanish compliance services competitor with broader portfolio (audit, tax, consulting) and larger scale.

Emerging players

• Collibra: Data intelligence and governance platform with privacy and consent management modules overlapping with DATAGESTION's compliance platform ambitions. Serves enterprise rather than SMB and is positioned as data catalog/governance rather than compliance-led.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks5 records

Key highlights6 records

Customer concentration

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about DATA GESTION