1. Data controller
Identity: BRANDFY SOFTWARE, S.L. (hereinafter, “Brandfy”)
Tax ID number: B19407527
Registered office: Alameda Mazarredo 25-1º, Bilbao, Bizkaia 48009 Spain
Contact email: hello@brandfy.ai

2. Purpose of data processing
At Brandfy, we process the information provided by interested parties for the following purposes:To manage access to and use of the subscription platform for each project.Maintain the contractual relationship and comply with the legal obligations arising therefrom.Send informative and commercial communications related to the services offered by Brandfy, provided that the user has given their consent.Improve the quality of the platform and develop new functionalities through statistical analysis and usage studies.Ensure the security of services and prevent fraudulent activities

3. Legitimacy of processing
The processing of your data is based on:Execution of a contract: provision of the subscribed service.Compliance with legal obligations.Express consent of the interested party: sending commercial communications or processing certain optional data.Legitimate interest: improvement of services, platform security and fraud prevention.

4. Data retention
The personal data provided will be retained for as long as the contractual relationship is maintained and/or until the data subject requests its deletion. Once terminated, it will be kept blocked for the legally required periods to meet any possible liabilities.

5. Recipients
No data will be transferred to third parties except where legally required or when necessary for the provision of the service (e.g. technology infrastructure providers, payment gateways or communication services), always guaranteeing confidentiality and security.

6. International transfers
Brandfy may use third-party services located outside the European Economic Area (EEA). In such cases, the appropriate safeguards required by the GDPR will be adopted, such as standard contractual clauses approved by the European Commission.
‍
7. Rights of data subjects
Users may exercise their rights at any time:Access: to know what data we process.Rectification: to request the modification of inaccurate data.Erasure: to request the deletion of their data when it is no longer necessary.Restriction of processing: to request restriction in certain cases.Portability: to receive their data in a structured format and transmit it to another controller.Objection: to object to processing in certain cases (e.g. commercial purposes).To exercise these rights, you must send a written request together with a copy of your identity document to the email address hello@brandfy.ai.