By accepting this Privacy Policy, the user is informed that the personal data provided through the Aftrad platform (hereinafter, the "Platform") will be processed by Bidex, as well as the data derived from your browsing and any other data that you may provide in the future to Bidex.

The user must carefully read this Privacy Policy, which has been drafted in a clear and simple manner, to facilitate its understanding, determining freely and voluntarily if he/she wishes to provide his/her personal data to Bidex.

The data processed in the Platform, in general, are mandatory (unless otherwise specified) to fulfill the established purposes.

Therefore, if they are not provided or are not provided correctly, they will not be able to be addressed, without prejudice that you can freely view the content of the Platform.

Personal data provided through the Platform will be processed by Bidex in accordance with the following purposes:

1. Management of access and use of the Platform. The user's data will be processed for this purpose to allow the user access to the Platform, as well as to enjoy its contents.
2. Tracking, recording and measurement of interactions. The user's data will be processed for this purpose in order to carry out, by Bidex, the monitoring, recording and measurement of the interactions that the user makes with the contents of the Platform.
3. Ordering of results and traffic, based on interactions. User data will be processed for this purpose in order to allow the sorting of the results to be displayed to the user, based on their interactions with the contents of the Platform.
4. Sending commercial communications. The user's data will be processed for this purpose in order to commercially impact you with promotional information that may be of interest to you.

The navigation and use of the Platform by the user may be managed and analyzed by means of cookies or other similar tracking tools. The user can obtain more information about this in our Cookies Policy.

BIDEX will process the following categories of user data on the Platform:

1. Management of access and use of the Platform: identification data; contact data; and data derived from navigation and use of the Platform (IP, interactions, preferences, clicks, device, etc.).
2. Tracking, recording and measurement of interactions: identification data; contact data; and data derived from navigation and use of the Platform (IP, interactions, preferences, clicks, device, etc.).
3. Sorting of results and traffic, based on interactions: identification data; contact data; and data derived from navigation and use of the Platform (IP, interactions, preferences, clicks, device, etc.).
4. Sending of commercial communications: contact information.

In the event that the user provides data of third parties, he/she declares to have the consent of the same and undertakes to transfer the information contained in the Privacy Policy, exempting BIDEX from any liability in this regard. However, BIDEX may carry out periodic verifications to verify this fact, adopting the corresponding due diligence measures, in accordance with data protection regulations.

The user's data may be communicated to:

• Public Administrations with competence in the matter.
• Courts and Tribunals, in case of specific requests made in accordance with the applicable regulations.
• State Security Forces and Corps, in case of specific requirements made in accordance with the applicable regulations.

Additionally, the data may be accessed by suppliers of BIDEX, such access being necessary for the proper fulfillment of legal obligations and/or the purposes indicated above. Such suppliers shall not process your data for their own purposes that have not been previously informed by BIDEX. BIDEX shall contract the provision of services by third parties who perform their activity, including but not limited to, in the following areas: cloud or computer hosting, sending commercial communications.

In this regard, BIDEX follows strict criteria for the selection of service providers in order to comply with its data protection obligations and undertakes to enter into a processing assignment agreement, as required by law, whereby it will impose on them, among others, the following obligations: to implement appropriate technical and organizational measures to ensure the security of personal data; to process personal data for the agreed purposes and in accordance only with the documented instructions of the controller; and to delete and return the data to the controller upon completion of the services.

Specifically, BIDEX will provide its services to the user through the use of the Platform, which is owned by the entity BIDEX MEDIA SERVICES, S.L. The management of your data will be carried out both by this entity and through the services of a Network that will act as an intermediary. Both entities will operate on behalf of BIDEX as sub-processor and processor, respectively, and with which BIDEX has signed the corresponding data access agreement, in accordance with the provisions of Article 28 of the RGPD, given that the provision of their services will involve the processing of users' personal data.

Some of our service providers may be located in countries outside the European Economic Area ("EEA").

The location of these companies outside the EEA implies the existence of an international transfer of your personal data. However, from BIDEX we have implemented measures so that such transfers do not result in a lower level of protection of your personal data.

In this regard, service providers outside the EEA will subscribe to the corresponding standard contractual clauses approved by the European Commission ("STC"), an agreement signed between both entities by which the non-EU company guarantees that it applies European data protection standards.

Therefore, the use of these providers does not result in a lesser degree of protection of your personal data than would be the case with the use of providers located in the European Union.

You may request a copy of these STCs by sending your request to [email protected].

Law 34/2002, of July 11, 2002, on information society services and electronic commerce allows commercial communications to be made through the Internet and other electronic media, provided that they can be identified as such, as well as the entity from which they are made.

BIDEX will send commercial communications by mail about similar services that are of interest to the user.

However, BIDEX will offer the recipient the possibility to object to the processing of his/her data for promotional purposes, both at the time of data collection and in each of the commercial communications sent to him/her.

Users may unsubscribe from these communications by sending a letter to the registered office of Bidex indicated above or to the following e-mail address: [email protected], indicating "unsubscribe from commercial communications".

BIDEX is present in several social networks. When you interact with any of our pages on social networks, the processing of data will be governed by the terms of use, privacy policies and access regulations that belong to the corresponding social network and previously accepted by the user.

BIDEX will process your data in order to properly manage its presence in the social network, informing you of activities, products or services, as well as for any other purpose that the regulations of social networks allow.

Please note that we have no influence over what information the social network collects or how it processes it.

BIDEX will keep the personal data of users only for the time necessary to carry out the purposes for which they were collected. Subsequently, if necessary, BIDEX will keep the information blocked until the prescription of the legal responsibilities that may have arisen as a result of the processing of the personal data of users, at which time it will proceed to the irreversible deletion of the same.

1. Management of access and use of the Platform: the data will be kept for as long as the use of the Platform lasts and, once it ceases, blocked during the period of limitation of legal actions that may arise from such use.
2. Tracking, recording and measurement of interactions: the data will be kept until the user objects and, in any case, blocked during the period of limitation of legal actions that may arise from these interactions. BIDEX may keep the information in aggregate form, without identifying users, for a longer period.
3. Ordering of results and traffic, based on interactions: the data will be kept until the user opposes and, in any case, blocked during the period of limitation of legal actions that may arise from this operation. BIDEX may keep the information in aggregate form, without identifying users, for a longer period of time.
4. Sending of commercial communications: the data will be kept until the user opposes or withdraws consent, and blocked during the period of limitation of legal actions that may arise from this activity.

The user:

• Warrants that they’re over sixteen (16) years of age and that the information he/she provides to BIDEX is true, accurate, complete and up to date. For these purposes, the user is responsible for the veracity of all the data he/she communicates and will keep the information provided conveniently updated, in such a way that it corresponds to his/her real situation.
• Warrants that they’ve informed the third parties from whom he/she provides their data, if applicable, relating to the matters contained in this document. The user also warrants that they have obtained their authorization to provide the third-party’s data to BIDEX for the purposes indicated.
• Shall be liable for any false or inaccurate information they provide through the Website and for any damages, direct or indirect, that this may cause to BIDEX or third parties.

As the owner of the data, the user may send a letter to BIDEX, at the address indicated in the heading of this Privacy Policy, or by e-mail to the address [email protected], providing proof of identity, at any time and free of charge, to exercise the following rights:

1. Right of access:

   The user has the right to be informed by BIDEX whether or not their personal data is being processed and, if so, to have access to such data and to receive information on the purposes for which it is being processed, the categories of data concerned by the processing, the recipients to whom their personal data has been disclosed and the intended period of data retention, among other information.

2. Right of rectification and suppression:

   The user will have the right to request the deletion of personal data, provided that the legal requirements are met, and the rectification of inaccurate data concerning them when, among other reasons, they are no longer necessary for the purposes for which they were collected.

3. Limitation of processing, revocation of consent and total or partial opposition to processing:

   In certain circumstances (for example, in the event that the applicant contests the accuracy of his or her data, while the accuracy of the data is being verified), the user may request that the processing of his or her personal data be restricted and processed only for the purpose of asserting or defending claims.

   They also have the right to revoke the consent given and to object to the processing at any time, for reasons related to their particular situation, if the processing is based on our legitimate interest. In this case, BIDEX will cease processing, unless legitimate reasons are demonstrated.

4. Portability of data:

   The user will have the right to receive the personal data they have provided to BIDEX in a structured, common, and machine-readable format, and to be able to transmit it to another data controller without being prevented from doing so by the data controller to whom they have provided it, in the cases legally provided for this purpose.

5. Automated individual decisions:

   Also, in addition to the above rights, in case of automated decisions, including profiling, the user has the right to obtain human intervention by BIDEX and to express their point of view and challenge the decision.

6. Others:

   Likewise, when personal data is transferred to a third country or an international organization, the user has the right to be informed about how they can access or obtain a copy of the appropriate safeguards concerning the transfer.

   They may also file a complaint regarding the protection of their personal data before the Spanish Data Protection Agency at C/ Jorge Juan, 6, 28001 - Madrid, when the interested party considers that BIDEX has violated the rights that are recognized by the applicable data protection regulations.

BIDEX will treat the user's data at all times in an absolutely confidential manner and keeping the mandatory duty of secrecy with respect to them, in accordance with the provisions of the applicable regulations, adopting for this purpose the necessary technical and organizational measures to ensure the security of your data and avoid its alteration, loss, treatment or unauthorized access, given the state of technology, the nature of the data stored and the risks to which they are exposed, whether from human action or from the physical or natural environment.

BIDEX reserves the right to revise its Privacy Policy from time to time as it deems appropriate, in which case users will be notified. For this reason, please check this privacy statement regularly to read the most recent version of BIDEX's Privacy Policy.

The user declares to have been informed of the conditions on personal data protection, accepting the content of this Privacy Policy.