Data of the data controller

Company name: Kategora Investments, S.L.

NIF: B95419917

Address: C/ Gran Vía Don Diego López de Haro 2 – 8º, 48001 Bilbao


Web Page:

Data Protection Officer:


Applicable regulations

Our Privacy Policy has been designed in accordance with the General Data Protection Regulation of the EU 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons with regard to the treatment of personal data and the free circulation of these data and by which Directive 95/46/CE (General Data Protection Regulation) is repealed, with Organic Law 3/2018, of December 5, on Data Protection Personal and guarantee of digital rights, and its development regulations.

The company may modify this privacy policy to adapt it to new legislation, jurisprudence or interpretation of the Spanish Agency for Data Protection. These privacy conditions may be supplemented by the Legal Notice, Cookies Policy and the General Conditions that, where appropriate, are collected for the sale of certain products or services, if said access implies any specialty in terms of personal data protection.


Purpose of the processing of personal data

The treatment we carry out of your personal data responds to the following purposes:

  • Manage what you request through the contact form.
  • Send you commercial information based on your express consent.
  • Send you the Newsletter if you have subscribed to it.


Legitimation to process the data collected

  • Contact form: The legitimacy for the processing of your data is your express consent atthe time you provide us with the information, manifested by marking the correspondingacceptance box.
  • Commercial information: The legitimacy for the processing of your data is your expressconsent, manifested by marking the corresponding acceptance box.
  • Newsletter: The legal basis is your express consent to subscribe to it.


How long will we keep your data?

  • Contact form: We will keep your personal data from the time you give us your consent until you revoke it or request the limitation of the treatment. In such cases, we will keep your data blocked for the legally required periods.
  • Commercial information: We will keep your personal data from the time you give us your consent until you revoke it.
  • Sending of the newsletter: We will keep your personal data for this treatment as long as you do not withdraw your consent for this sending.



Your data will not be transferred, except:

  • Compliance with legal obligations


International transfers

No international transfers will be carried out.


Security measures

Within our commitment to guarantee the security and confidentiality of your personal data, we inform you that the necessary technical and organizational measures have been adopted to guarantee the security of personal data and prevent its alteration, loss, treatment or unauthorized access, taking into account the state of the technology, the nature of the data stored and the risks to which they are exposed. Notwithstanding the foregoing, the user must be aware that security measures on the Internet are not impregnable. You can obtain more information about the security measures that we apply by contacting us through the channels indicated at the beginning of this Privacy Policy in the identification section of the Data Controller.


Rights of the Interested Party

The interested party has the following rights regarding the processing of their personal data, and may exercise them by contacting the Data Controller:

  • If the legal basis of your treatment is consent, the right to withdraw it at any time, without this affecting the treatment prior to its withdrawal.
  • Right to request access to your personal data.
  • Right to request their rectification if they are inaccurate, or request their deletion (for example, if you consider that they are no longer necessary for the purposes for which they were collected).
  • Right to request the limitation of their treatment, provided that any of the conditions provided for in the regulations is met, in which case we will only keep them for the exercise or defense of claims.
  • Right to oppose the treatment, in which case we will stop treating your data for that purpose, except for compelling legitimate reasons, or the exercise or defense of possible claims.
  • Right to data portability.
  • Right to file a claim with the Spanish Data Protection Agency (competent Data Protection control authority), especially when you have not obtained satisfaction in the exercise of your rights: