Privacy Policy.

The controller of the personal data collected through the website https://silverce.com, the Silverce application and the associated services is:

Hereinafter, "Silverce", "we" or "the company".

This Privacy Policy explains how we collect, use, store, share and protect the personal data of people who access or use our website, our application, our digital platforms or any of the services offered by Silverce.

Silverce may process different categories of personal data depending on its relationship with each user, client, partner organisation or website visitor.

Among others, we may process the following categories of data:

• Identification and contact data: first name, surname, email address, phone number, postal address, access data, user credentials, registration information and other data required to create or manage an account.
• Professional or organisational data: job title, company, institution, professional sector, organisation size, area of responsibility or any other information provided through contact forms, demo requests or commercial communications.
• Verification and identity data: where necessary to provide certain services, prevent fraud or verify a user's identity, we may process data such as national ID, passport or other identification documents.
• Usage and browsing data: IP address, device identifiers, technical browser data, operating system, pages visited, access times, interactions with the website or application, usage logs, preferences and data derived from cookies or similar technologies.
• Transaction and payment data: billing information, billing address, transaction history, partial card data or other data required to process payments or comply with contractual and legal obligations.
• Communications data: the content of enquiries, messages sent to Silverce, communications held with our team or, where applicable, communications made within the platform, always within the limits allowed by applicable law.
• Image, voice or video-call data: where the user takes part in calls, video calls, interviews, support sessions, digital experiences or platform features that require it, we may process voice and image data for the corresponding purpose.
• Geolocation data: in certain services, we may process approximate or precise location data, such as latitude, longitude, postcode or geographic area, in order to offer features linked to proximity, recommendation or service availability.

Silverce processes personal data for the following purposes:

• User management and service delivery: we use data to create and manage user accounts, validate access, deliver contracted services, enable use of the website or application, maintain the contractual relationship and ensure the platform works correctly.
• Contact and handling enquiries: we process the data needed to respond to information requests, contact forms, demo requests, incidents, questions or any communication sent by the user.
• Delivery of digital and technological services: we may process data to enable platform features, personalise the experience, show recommendations, facilitate interactions between users, and manage experiences, programmes, initiatives or services linked to Silverce.
• Security, fraud prevention and misuse control: we use certain data to protect user safety, prevent abusive use, detect fraudulent activity, resolve disputes, maintain service integrity and comply with our legal obligations.
• Analysis, improvement and development of services: we process usage, browsing and interaction data to improve the user experience, fix errors, optimise our products, develop new features, analyse website performance and better understand how our services are used.
• Commercial communications: where a valid legal basis exists, we may send communications about Silverce products, services, initiatives, events, content or news that may be of interest to the user. Users may object or withdraw their consent at any time by writing to dpo@silverce.com.
• Compliance with legal obligations: we process data where necessary to comply with applicable legal, tax, accounting, administrative, regulatory, judicial or fraud-prevention obligations.

Silverce processes personal data on the following legal bases:

• Performance of a contract: where processing is necessary to provide the requested services, manage an account, execute the terms and conditions or maintain a contractual relationship with the user or client.
• User consent: where the user has given consent for specific purposes, such as receiving commercial communications, taking part in certain features or authorising additional processing. Consent may be withdrawn at any time by writing to dpo@silverce.com.
• Compliance with legal obligations: where processing is necessary to comply with obligations established by applicable law.
• Legitimate interest: where necessary to protect platform security, prevent fraud, improve our services, analyse website usage or defend our rights and interests, provided that the user's rights and freedoms do not override them.

Silverce will retain personal data for as long as necessary to fulfil the purpose for which it was collected.

In particular:

• Data associated with an account will be kept for as long as the user remains a registered user or client.
• Data linked to enquiries will be kept for the time needed to handle them and to address any potential liabilities.
• Data processed on the basis of consent will be kept until the user withdraws that consent.
• Data required to comply with legal obligations will be kept for the periods required by applicable law.
• Where data is no longer necessary, it may be kept blocked for the legally required periods in order to address potential liabilities.

Silverce will not sell users' personal data.

We may disclose or grant access to personal data where necessary to provide our services, comply with legal obligations or work with technology providers and professionals acting on behalf of Silverce.

Among others, we may work with providers of:

• Hosting and technology infrastructure.
• Cloud services.
• Web analytics.
• Payment processing.
• Security, authentication and fraud prevention.
• Technical support.
• Communication tools.
• Verification or validation services, where required.

Certain services may be hosted or delivered through providers such as Amazon Web Services (AWS), Google Cloud Platform, Google Analytics, Google reCAPTCHA or Stripe, among others.

Where these providers process personal data on behalf of Silverce, they will do so under the corresponding data processing agreements and with the safeguards required by applicable law.

Some of Silverce's technology providers may be located outside the European Economic Area or provide services from countries that do not offer an equivalent level of protection.

In such cases, Silverce will adopt appropriate safeguards in line with applicable data protection law, including, where relevant, standard contractual clauses approved by the European Commission or other legally recognised mechanisms.

Silverce's services are not directed at children under 16.

Silverce does not knowingly collect personal data from children under 16. If we become aware that data belonging to a minor has been processed without the corresponding authorisation, we will take the necessary steps to delete it as soon as possible.

If you believe a minor has provided us with personal data, you can contact us at dpo@silverce.com.

Users may exercise the following data protection rights:

• Right of access: to know whether Silverce processes the user's personal data and to obtain information about that processing.
• Right to rectification: to request the correction of inaccurate or incomplete data.
• Right to erasure: to request the deletion of personal data when it is no longer necessary for the purpose for which it was collected, among other cases.
• Right to object: to object to the processing of data in certain circumstances.
• Right to restriction of processing: to request that processing be restricted in the cases provided for by law.
• Right to data portability: to receive the personal data provided in a structured, commonly used and machine-readable format, and to transmit it to another controller where applicable.
• Right to withdraw consent: where processing is based on consent, the user may withdraw it at any time.

To exercise these rights, users can write to: dpo@silverce.com

The request must state the right the user wishes to exercise and allow the requester to be identified. Exercising these rights is free of charge, except in the cases provided for by law.

If a user considers that Silverce has not processed their personal data in accordance with applicable law, they may lodge a complaint with the competent supervisory authority.

In Spain, the competent authority is the Spanish Data Protection Agency, through its website: www.aepd.es.

Silverce applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration, disclosure or misuse.

These measures are reviewed and updated according to the nature of the data processed, existing risks and technological developments.

Silverce may send commercial communications where a valid legal basis exists.

Users may unsubscribe or ask us to stop sending commercial communications at any time by writing to: dpo@silverce.com

Unsubscribing from commercial communications will not prevent Silverce from sending communications necessary for service delivery, legal notices, security messages or transactional communications.

Users undertake to keep their data up to date, complete and accurate.

Where necessary, users can update their information through the mechanisms available on the platform or by writing to: dpo@silverce.com

Silverce uses cookies and similar technologies to enable the website to work, analyse how our services are used, improve the user experience and, where applicable, personalise content or communications.

You can find more information in our Cookies Policy.

Silverce may update this Privacy Policy where necessary to adapt it to legal, technical, operational or service-related changes.

Where changes are significant, Silverce may notify users through the usual channels or by posting a notice on the website or application.