Privacy Policy

1. Data controller

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter, "GDPR") and with Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (hereinafter, "LOPDGDD"), users are informed that the controller of the personal data collected through the website linkprop.ai is:

• Controller: Juan Bujosa Brun
• Tax ID (NIF): 05390666H
• Address: Calle Carretas 33, 4º CD, 28012 Madrid, Spain
• Email: info@linkprop.ai

2. Data we collect

Depending on your interaction with our website, we may process the following categories of personal data:

• Identifying and contact data: name, email address and phone number, provided voluntarily via the ambassadors-and-agencies request form.
• Browsing data: IP address (anonymised), browser type, pages visited, duration of visit, and other technical data collected through web-analytics tools.

3. Purposes of processing

The personal data you provide is processed for the following purposes:

• Managing your request to collaborate as an ambassador or agency and maintaining the necessary communications.
• Responding to your queries and requests for information.
• Analysing user behaviour on the website in aggregate to improve our services.
• Preventing fraud and abusive use of the form through verification systems (reCAPTCHA).
• Complying with applicable legal obligations.

4. Legal basis for processing

The legal basis for processing your personal data is:

• Consent of the data subject (Art. 6(1)(a) GDPR) for managing collaboration requests and for processing arising from non-technical cookies.
• Legitimate interest (Art. 6(1)(f) GDPR) for preventing fraud, ensuring website security and carrying out aggregate analytics.
• Compliance with legal obligations (Art. 6(1)(c) GDPR) where applicable.

The consent given may be withdrawn at any time, without this affecting the lawfulness of the processing based on the consent prior to its withdrawal.

5. Retention period

Personal data will be kept for as long as necessary to fulfil the purpose for which it was collected and to determine any liabilities that may arise from that purpose and from the processing of the data.

• Contact-form data: up to 2 years from the last communication, unless applicable regulations require longer retention or the data subject requests deletion.
• Browsing data: as indicated in the Cookie Policy.

6. Recipients and international transfers

No data is shared with third parties except where legally required. In order to provide certain services, we use technology providers (processors) that may have access to your personal data on behalf of the Controller:

• Google Cloud / Firebase (Alphabet Inc.): storage of form data on servers located in the European Union (europe-west region). Google is certified under the EU-US Data Privacy Framework.
• Vercel Inc. (USA): website hosting and web-analytics service (Vercel Analytics). Vercel is certified under the EU-US Data Privacy Framework and offers the Standard Contractual Clauses approved by the European Commission.
• Google Ireland Ltd. (reCAPTCHA): anti-spam system for the form. Information collected by reCAPTCHA may be transferred to Google LLC in the United States, covered by the EU-US Data Privacy Framework.
• Resend (Resend, Inc. — USA): sending automated emails arising from the form. The international transfer is covered by the Standard Contractual Clauses approved by the European Commission.

In all cases, these international data transfers are made with the appropriate safeguards provided for in Chapter V of the GDPR.

7. Data-subject rights

You may exercise the following rights over your personal data, free of charge, by sending a request to info@linkprop.ai indicating the right you wish to exercise and attaching a copy of your ID or equivalent identification document:

• Access: to know what personal data we are processing about you.
• Rectification: to request the correction of inaccurate or incomplete data.
• Erasure ("right to be forgotten"): to request the deletion of your data when it is no longer necessary.
• Objection: to object to the processing of your data on grounds relating to your particular situation.
• Restriction of processing: to request the restriction of processing in the cases provided for in the GDPR.
• Portability: to receive your data in a structured, commonly used and machine-readable format.
• Withdrawal of consent: to withdraw previously given consent at any time.

If you believe that the processing of your personal data breaches applicable regulations, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Data security

The Controller has adopted the technical and organisational measures necessary to ensure the security of personal data and prevent its alteration, loss, unauthorised processing or access, taking into account the state of the art, the nature of the stored data and the risks to which it is exposed.

9. Minors

The website is not intended for children under 14. Personal data is not knowingly collected from children under that age. If you become aware that a minor has provided us with their data, please notify us so that we can delete it.

10. Modifications

The Controller reserves the right to modify this Privacy Policy to adapt it to new legislation or case law, as well as to industry practices. In such cases, the changes will be announced on this page with reasonable notice before they come into effect.

This is an informative translation of documents originally drafted in Spanish in accordance with Spanish law. In the event of any discrepancy, the Spanish version shall prevail.