Privacy Policy

Data Controller

Personal data collected

The Controller may collect and process personal data from users through the forms available on the Website, particularly during registration, login, and password recovery processes. Data processed may include identification and contact information such as the user's name and email address, as well as authentication data including passwords, which are stored in encrypted form. Use of the Website may also involve the collection of technical and browsing data such as IP address, device type, operating system, or browsing behaviour, in order to ensure the correct functioning and security of the service.

Purposes of processing

• ·Allow user registration and account creation.
• ·Manage access to the platform and its services.
• ·Facilitate authentication and password recovery processes.
• ·Handle information requests or queries from users.
• ·Ensure system security and prevent misuse.
• ·Improve service quality and user experience.

Legal basis for processing

The processing of personal data is based on different legal grounds depending on the purpose pursued. In general, processing is necessary for the performance of the contractual relationship established upon registration. Certain processing operations are also based on the user's consent, given by accepting this Privacy Policy. Additionally, the Controller may process certain data on the basis of legitimate interests, particularly to ensure website security and prevent unauthorised access.

Data retention

Personal data will be retained for as long as necessary to fulfil the purpose for which it was collected. For registered users, data will be kept while the account remains active. Once deletion or account cancellation is requested, data may be retained in a blocked state for legally established periods to address potential liabilities.

Data recipients

As a general rule, personal data will not be disclosed to third parties, except where required by law. The Controller may engage service providers acting as data processors, such as web hosting, email delivery, or other platform tools. In such cases, those providers will process data following the Controller's instructions and with the appropriate confidentiality and security guarantees.

International transfers

Where the Controller uses providers located outside the European Economic Area, appropriate safeguards will be adopted in accordance with applicable regulations, such as standard contractual clauses approved by the European Commission.

User rights

Users may at any time exercise their rights of access, rectification, erasure, restriction of processing, objection, and data portability by sending a request to info@hybridbeastbrain.com with a copy of their identity document. Users also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if they consider that the processing of their data does not comply with applicable regulations.

Data security

The Controller adopts the necessary technical and organisational measures to ensure an appropriate level of security, protecting personal data against unauthorised access, loss, alteration, or improper disclosure.

Minors

The Website is not directed at minors. The Controller does not knowingly collect data from minors and, upon becoming aware that data from a minor has been provided without authorisation, will proceed to delete it.

Changes to this policy

The Controller reserves the right to modify this Privacy Policy to adapt it to legislative changes or changes in the operation of the Website. Users will be informed through this section.