Data of the data controller

Company name: Kategora Investments, S.L.

NIF: B95419917

Address: C/ Gran Vía Don Diego López de Haro 2 – 8º, 48001 Bilbao

Email: info@kategora.com

Web Page: www.kategora.com

Data Protection Officer: dpd@aiblu.es

Applicable regulations

Our Privacy Policy has been drafted in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation or GDPR), concerning the protection of natural persons with regard to the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC, and with Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, along with its implementing regulations. ⁣⁣

Kategora may modify this Privacy Policy in order to adapt it to legislative or jurisprudential developments or to the interpretations of the Spanish Data Protection Agency. These privacy conditions may be supplemented by the Legal Notice, Cookie Policy and General Terms and Conditions that may apply to specific products or services, particularly when access to such services involves specific considerations regarding the processing of personal data.

Purpose of Personal Data Processing

The personal data we collect are processed for the following purposes: ⁣⁣

  • To manage your requests submitted via the contact form.
  • To send you commercial information based on your explicit consent. ⁣⁣
  • To send you our newsletter, if you have subscribed to it.

Legal Basis for Processing

  • Contact form: The legal basis is your explicit consent given when providing your data, confirmed by ticking the corresponding acceptance checkbox.
  • ⁣⁣Commercial communications: The legal basis is your consent, given by selecting the appropriate checkbox on our website. ⁣⁣
  • Newsletter: The legal basis is your express consent for subscription.

How long will we keep your data?

  • Contact form: We will retain your personal data from the moment you provide your consent until you revoke it or request limitation of processing. In such cases, your data will be blocked and retained only for the legally required periods. ⁣⁣
  • Commercial information: Your data will be retained as long as you do not withdraw your consent.
  • ⁣⁣Sending of the newsletter: Your data will be retained as long as you do not unsubscribe.

Transfers

Your data will not be transferred, except:

  • Compliance with legal obligations

International transfers

We use services provided by Hubspot, a leading global provider, which implements appropriate safeguards for data transfers within and outside the EU in accordance with applicable regulations. Specifically, Hubspot is certified under the EU-U.S. Data Privacy Framework.

Security measures

As part of our commitment to ensuring the security and confidentiality of your personal data, we inform you that we have adopted the necessary technical and organizational measures to safeguard your data and prevent its alteration, loss, or unauthorized processing or access, taking into account the current state of technology, the nature of the data, and the potential risks. ⁣However, you should be aware that no internet security system is entirely invulnerable. ⁣

⁣⁣You may obtain further information about our security measures by contacting us through the channels provided at the beginning of this Privacy Policy, under the section “Data Controller Details.”

Data Subject Rights

As a data subject, you have the following rights, which you may exercise by contacting the Data Controller:

  • ⁣⁣If the legal basis for processing your data is consent, you have the right to withdraw it at any time, without this affecting the lawfulness of the processing carried out prior to its withdrawal. ⁣⁣
  • Right to request access to your personal data. ⁣⁣
  • Right to request rectification of your data if it is inaccurate, or to request its erasure (for example, if you believe it is no longer necessary for the purposes for which it was collected). ⁣⁣
  • Right to request the restriction of processing, provided that any of the conditions established by law are met; in such cases, we will retain your data solely for the establishment, exercise, or defense of legal claims.
  • ⁣⁣Right to object to the processing of your data, for example, regarding the sending of commercial information by us; in such cases, we will cease processing your data for that purpose, unless we have compelling legitimate grounds or it is necessary for legal claims.
  • ⁣⁣Right to data portability. ⁣⁣
  • Right to lodge a complaint with the Spanish Data Protection Agency (the competent supervisory authority), especially if you have not obtained satisfaction in the exercise of your rights: www.aepd.es