Introduction

The protection of your personal data is of utmost importance to us. This Privacy Policy aims to provide you with clear and transparent information regarding how we collect, use, store, and protect your personal data when you use our services, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and any other applicable data protection laws.

Who we are

Data Controller:

• Company Name: CODECONTRACT S.L.
• Trade Name: CODE CONTRACT
• Tax Identification Number (C.I.F.): B95973996
• Address: C/ Pérez Galdós, 22 – Bilbao – Vizcaya, Spain
• Email: [email protected]

Personal data we collect

We may collect and process the following categories of personal data:

• Identification data (name, surname, national identification number or tax ID).
• Contact information (email address, telephone number and postal address).
• Professional information (position and company).
• Platform access and usage data.
• Technical information (IP address, browser type, operating system and devices used).
• Billing and payment information.
• Information and content provided by users through the platform for the purpose of delivering our services.

Purposes of processing

Provision of services

We use your personal data to provide, maintain and improve our services, including account management, customer support and issue resolution.

Communications

We may send you information regarding our services, updates to our policies and other communications necessary for the proper delivery of our services.

Service improvement

We analyze the use of our platform to improve its performance, develop new features and ensure the security of our users.

Legal compliance

We process your personal data whenever necessary to comply with legal obligations or to exercise our legal rights.

Legal basis for processing

The processing of your personal data is based on:

• The performance of a contract for the provision of our services.
• Our legitimate interest in improving and protecting the platform.
• Your consent, where required.
• Compliance with legal obligations.

Data retention

Personal data will be retained for as long as necessary to fulfill the purposes for which it was collected and for the periods required to address any legal liabilities.

Once no longer necessary, the data will be securely deleted or anonymized.

Your rights

You may exercise the following rights:

• Right of access.
• Right to rectification.
• Right to erasure.
• Right to restriction of processing.
• Right to data portability.
• Right to object.
• Right to withdraw consent where applicable.

To exercise any of these rights, please contact: [email protected]

Information security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss or alteration.

These measures include:

• Encryption of data in transit and at rest.
• Role-based access controls.
• Backup and recovery systems.
• Continuous security monitoring.
• Employee training in data protection matters.
  

International data transfers

Where it is necessary to transfer personal data outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place in accordance with the GDPR, including:

• Adequacy decisions issued by the European Commission.
• Standard Contractual Clauses approved by the European Commission.
• Other legally recognized transfer mechanisms.
  

Cookies

We use cookies and similar technologies to enhance the user experience. Additional information is available in our Cookie Policy.

Analytics and monitoring tools

To continuously improve our services, we use analytics and monitoring tools, including but not limited to:

• UserGuiding.
• Microsoft Clarity.
• Mixpanel.
• Segment.
  

The information collected is used to:

• Improve the user experience.
• Detect and resolve technical issues.
• Optimize workflows and processes.
• Develop new features.
  

Whenever possible, such data is processed in an anonymized or pseudonymized manner.

Use of Artificial Intelligence services

To provide certain functionalities of the platform, CODECONTRACT S.L. may use artificial intelligence services and models provided by third parties, including, but not limited to, OpenAI, Anthropic, Google and other equivalent technology providers.

Data, documents, instructions and content provided by users may be processed by such providers solely for the purpose of delivering the requested services, generating responses, automating processes and enabling the functionalities offered through the platform.

CODECONTRACT S.L. takes the necessary measures to ensure that these providers maintain an adequate level of protection for personal data and, where required, applies the safeguards established by applicable law for international data transfers.

Users undertake not to submit unlawful information or special categories of personal data unless strictly necessary and permitted under applicable law.

Automated Decision-Making

We do not carry out automated decision-making processes that produce legal effects or similarly significant effects on users within the meaning of Article 22 of the GDPR.

However, certain functionalities of the platform may use artificial intelligence systems to assist in content generation, information analysis and process automation. Any outputs generated by such systems are intended to assist users and should be reviewed and validated by the user before being relied upon.

Data recipients

We may share personal data with:

• Infrastructure and hosting providers.
• Analytics and monitoring service providers.
• Artificial intelligence service providers, including OpenAI, Anthropic, Google and other equivalent providers.
• Financial institutions and payment service providers.
• Public authorities where required by law.
• Other third parties with the user's consent.
  

Consequences of not providing personal data

The provision of our services necessarily requires the processing of certain personal data and the use of the technological tools required for the operation of the platform.

If a user does not agree to the processing described in this Privacy Policy, certain functionalities or the entirety of the services may not be available.

Complaints

If you believe that the processing of your personal data infringes applicable data protection laws, you have the right to lodge a complaint with the competent supervisory authority. However, we encourage you to contact us first so that we may attempt to resolve any concerns.

Contact

CODECONTRACT S.L.

Tax Identification Number (C.I.F.): B95973996

C/ Pérez Galdós, 22

Bilbao – Vizcaya, Spain

Email: [email protected]

Last updated: June 2026