Privacy Policy (Spain) — Thalen EquiBridge
1. Scope and purpose of this policy
This Privacy Policy explains how Thalen EquiBridge processes personal data when you visit and use https://thalen-equibridge-ai.org (the “Site”) and its associated functions (e.g., user panel, analytics tools, support, and operational communications). Its purpose is to describe what data is collected, for what purposes, for how long, with whom it may be shared, and what rights you can exercise.
2. Data Controller and contact information
2.1 Controller
Thalen EquiBridge (hereinafter, “Thalen EquiBridge”, “we” or “the Platform”).
2.2 Support and privacy contact
- Support email: [email protected]
- Phone: +34 911 32 48 70
- Address: Calle de Alcalá 121, 28009 Madrid, Spain
3. Age requirements
The Platform is intended exclusively for individuals over 18 years of age. If we detect that a minor's data has been processed, we may request age verification and proceed to delete or block the account and associated data where appropriate.
4. What data we may collect
4.1 Data you provide
- Identification and contact: name, surname, email, phone number.
- Account data: credentials (e.g., password in encrypted/hashed format), preferences, and settings.
- Support: content of your requests, incidents, attachments, and communications with our team.
4.2 Data generated by Site usage
- Technical logs: IP, device identifiers, browser type, pages visited, dates/times, security events.
- Panel usage data: activity, preferences, interactions with tools, operational metrics (no intrusive “profiling” unless indicated).
4.3 Third-party data (if applicable)
When you connect third-party services or execution/infrastructure providers, strictly necessary data may be exchanged to enable the integration (e.g., session identifiers or technical references). Thalen EquiBridge does not assume custody of funds or assets; the exact scope depends on the integrations you activate.
5. What we use your data for (purposes)
- Create and manage your account, authentication, and access to the panel.
- Operate the Site, maintain performance, stability, and fraud prevention.
- Handle support requests, complaints, and operational inquiries.
- Send essential communications: confirmations, security notices, policy changes, technical notifications.
- Comply with legal obligations when applicable (e.g., requests from competent authorities).
- Internal analytics to improve functions and detect failures (preferably with aggregated or pseudonymized data where possible).
6. Legal basis for processing (GDPR)
We process personal data according to one or more of these bases:
- Performance of a contract or pre-contractual measures: to provide the service and manage the account.
- Legitimate interest: security, abuse prevention, service improvement, and incident management.
- Compliance with legal obligations: when required by regulations.
- Consent: when necessary (e.g., certain cookies or non-essential communications, if you enable them).
7. Data Retention
We retain data for the time necessary for the indicated purposes and according to criteria of:
- Account validity and recent activity.
- Applicable legal retention and prescription periods.
- Security needs (e.g., access logs for incident investigation).
When no longer necessary, they are reasonably and proportionally deleted or anonymized.
8. Data Sharing and Recipients
We may share data with:
- Technology providers (hosting, analytics, transactional email, support), under agreements that limit their use and require protection measures.
- Infrastructure or execution partners “where applicable” and only if you activate or use functions that require it.
- Competent authorities and bodies when there is a legal obligation or valid request.
We do not sell your personal data.
9. International Transfers
If any provider processes data outside the European Economic Area, we will apply appropriate safeguards where applicable (e.g., Standard Contractual Clauses or other recognized mechanisms). You can request additional information about these measures through the contact channels.
10. Security and Account Protection Expectations
We apply technical and organizational controls aimed at reducing risks (e.g., in-transit encryption, access controls, event logging). Nevertheless, no system is infallible.
10.1 User Obligations
- Use strong and unique passwords.
- Activate additional security measures if available (e.g., 2FA).
- Do not share credentials or allow unauthorized access.
- Immediately report any suspicion of compromise to [email protected].
11. Cookies and Similar Technologies
The Site may use cookies or equivalent technologies for: essential operation, security, preferences, and analytics. Where required by law, we will request your consent before installing non-essential cookies. You can manage cookies from your browser and, when available, from the banner or preferences panel.
12. Your Rights (access, rectification, erasure, etc.)
In accordance with GDPR and applicable Spanish regulations, you can exercise the following rights: access, rectification, erasure, objection, restriction, portability, and not to be subject to automated decisions in certain cases.
- Write to [email protected] with the subject “Privacy — Rights Request”.
- Indicate your identity (name/account email) and the right you wish to exercise.
- To protect you, we may ask for additional verification before executing the request.
If you believe your rights have not been addressed, you can file a complaint with the Spanish Data Protection Agency (AEPD).
13. Changes to this Privacy Policy
We may update this policy to reflect operational, legal, or security changes. We will publish the current version on the Site and, when the change is relevant, we may notify you by reasonable means (e.g., notice in the panel or transactional email).
14. Contact
For privacy or security inquiries:
Email: [email protected]
Phone: +34 911 32 48 70
Address: Calle de Alcalá 121, 28009 Madrid, Spain