1. Data controller
The controller responsible for the processing described in this policy is:
Global FinTech Alliance
Calle Seminario de Nobles 4, Madrid, Spain
Website:globalfintechalliance.com
Privacy enquiries may be submitted through thecontact page.
2. Personal data we collect
Contact and membership enquiries
When a visitor submits the contact form, the Alliance may receive the visitor's name, email address, organization, enquiry category, message and any other information voluntarily included.
Publication requests
When requesting access to a report or publication, the Alliance may receive the visitor's name, email address, company or organization, professional role and selected publication.
Technical information
The website hosting and security infrastructure may process technical information such as IP address, browser type, operating system, request time, requested URL and security diagnostics.
Visitors should not submit sensitive personal data through the website forms unless specifically requested by the Alliance.
3. Purposes and legal bases
| Processing purpose | Information used | Legal basis |
|---|---|---|
| Responding to general, institutional, partnership and media enquiries | Contact details, organization, enquiry category and message | Consent and the legitimate interest in managing communications addressed to the Alliance |
| Managing membership and collaboration requests | Identity, contact details, organization and information included in the request | Steps taken at the request of the interested party and, where applicable, legitimate interest |
| Delivering requested publications | Name, email address, organization, role and publication selected | Consent and performance of the requested service |
| Protecting the website and preventing abuse | Technical records, IP address and security diagnostics | Legitimate interest in maintaining the security and integrity of the service |
| Complying with legal obligations | Information required by applicable law or competent authorities | Compliance with a legal obligation |
Personal information will not be used to send unrelated commercial communications unless separate consent has been obtained.
4. Recipients and service providers
Personal information may be accessed by authorized Alliance personnel and by service providers that support the operation of the website.
These categories may include:
- Website hosting and security providers.
- Form submission, email and communication providers.
- Technical maintenance and information technology providers.
- Professional legal, accounting or compliance advisers where necessary.
- Public authorities where disclosure is legally required.
Service providers acting on behalf of the Alliance are required to process the information only for the contracted purpose and under appropriate confidentiality and security obligations.
5. International transfers
Some technical or communication providers may process information from countries outside the European Economic Area.
Where such transfers occur, the Alliance will use an applicable legal mechanism, such as an adequacy decision, standard contractual clauses or another safeguard recognized by data protection law.
6. Retention of information
Personal information will be kept only for the time necessary to manage the purpose for which it was collected and to comply with applicable legal obligations.
- Enquiry information will be retained while the enquiry is active and for the period required to document the response or potential responsibilities.
- Publication-request information will be retained for the delivery of the requested material and any necessary administrative follow-up.
- Technical logs will be retained according to the security and operational periods applied by the hosting infrastructure.
- Information subject to a legal dispute or obligation may be blocked and retained for the applicable limitation period.
7. Your data protection rights
Subject to the conditions established by applicable law, individuals may request:
- Access to their personal data.
- Correction of inaccurate information.
- Deletion of personal data.
- Restriction of processing.
- Objection to processing.
- Portability of information.
- Withdrawal of consent, without affecting earlier lawful processing.
- Protection from decisions based solely on automated processing where applicable.
Requests may be submitted through thecontact page. The Alliance may request information necessary to verify the identity of the person making the request.
Individuals also have the right to submit a complaint to the Spanish Data Protection Agency or another competent supervisory authority.
8. Information security
The Alliance applies reasonable organizational and technical measures intended to protect information against accidental loss, unauthorized access, alteration or disclosure.
No internet transmission or electronic storage method can guarantee absolute security. Visitors should therefore avoid sending confidential or sensitive information that is not necessary for their request.
9. Children's information
The website is directed to professional, institutional and industry audiences and is not intended to collect personal information from children.
A parent or guardian who believes that a child has provided information through the website may contact the Alliance to request its review or deletion.
10. Changes to this policy
This policy may be updated to reflect changes in the website, service providers, processing activities or legal requirements.
The date shown at the beginning of the policy identifies the most recent revision.