Privacy Policy

The data controller for your personal data is: Marketabilityxc, S.L. CIF: B-67432918 Registered office: Calle de Serrano 41, 2nd Floor, 28001 Madrid, Spain Email: privacidad@marketabilityxc.com Registered with the Madrid Commercial Registry, Volume 42,871, Folio 96, Section 8, Sheet M-762314

We collect the following categories of personal data: a) Data provided directly by you: - Full name - Email address - Content of messages sent through the contact form b) Data collected automatically: - IP address - Browser type and operating system - Pages visited and browsing time - Cookies and tracking technologies (subject to your consent)

We process your personal data for the following purposes: a) To respond to your enquiries and information requests submitted through the contact form. b) To provide you with information about our real estate crowdlending services. c) To comply with our legal and regulatory obligations. d) To improve the browsing experience and functioning of our platform. e) To carry out anonymised statistical analyses of website usage.

The processing of your personal data is based on the following legal grounds: a) Consent: for the sending of commercial communications and the use of analytical and marketing cookies (Article 6.1.a GDPR). b) Contractual performance: to manage your relationship with the platform and respond to your requests (Article 6.1.b GDPR). c) Legitimate interest: to improve our services and ensure website security (Article 6.1.f GDPR). d) Legal obligation: to comply with current tax, commercial, and anti-money laundering regulations (Article 6.1.c GDPR).

We will retain your personal data for the time strictly necessary to fulfil the purposes described: - Contact data: for the time necessary to handle your enquiry and, subsequently, for the limitation period of applicable legal actions (5 years under Article 1964 of the Spanish Civil Code). - Browsing data: maximum 26 months from collection. - Tax and accounting data: 6 years in accordance with the General Tax Law.

We do not sell, rent, or share your personal data with third parties for their own commercial purposes. We may share your data with: a) Technology service providers acting as data processors under contract. b) Public authorities and regulatory bodies where a legal obligation exists. c) Google LLC (for analytics and advertising services, subject to your express consent as per our Cookie Policy). In the event of international data transfers, these will only be made to countries offering an adequate level of protection or through appropriate safeguards as provided for in the GDPR.

In accordance with the GDPR and LOPDGDD, you have the right to: - Access: know what personal data we process about you. - Rectification: request the correction of inaccurate data. - Erasure: request the deletion of your data when no longer necessary. - Restriction: request the restriction of processing in certain circumstances. - Portability: receive your data in a structured, commonly used format. - Objection: object to the processing of your data on grounds relating to your particular situation. - Withdrawal of consent: withdraw your consent at any time. To exercise these rights, you may contact privacidad@marketabilityxc.com, stating your name and the right you wish to exercise. We will respond within a maximum of 30 days. You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including SSL/TLS encryption, access controls, firewalls, periodic backups, and staff training in data protection.

We reserve the right to update this Privacy Policy to reflect changes in our practices or applicable legislation. The date of the last update will be indicated at the beginning of the document. We recommend that you periodically review this page.