Privacy Policy

Introduction

At ClikCredito, we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our loan comparison platform.

By using our services, you consent to the data practices described in this policy. Please read this Privacy Policy carefully to understand our practices regarding your personal data.

Data Controller

Information We Collect

We collect several types of information from and about users of our platform, including

Personal Identification Information

• Full name (first name and last name)
• Email address
• Phone number
• National identification number (DNI/NIE)

Financial Information

• Monthly income
• Employment status
• Loan amount requested
• Existing debts and financial obligations

Technical and Usage Data

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our platform
• Cookies and similar tracking technologies

How We Use Your Information

We use the information we collect for the following purposes

• To process your loan requests and match you with suitable lenders
• To communicate with you about loan offers and updates
• To improve our services and user experience
• To comply with legal and regulatory requirements
• To prevent fraud and ensure platform security
• To send you marketing communications (with your consent)
• To analyze usage patterns and conduct research

Legal Basis for Processing

We process your personal data based on the following legal grounds

Consent

When you provide explicit consent for specific processing activities, such as marketing communications.

Contract Performance

Processing necessary to fulfill our contract with you when you request loan comparisons and applications.

Legitimate Interests

Processing necessary for our legitimate business interests, such as fraud prevention and service improvement.

Legal Obligation

Processing required to comply with legal and regulatory obligations.

How We Share Your Information

We may share your personal information with third parties in the following circumstances

Financial Institutions and Lenders

We share your loan application data with our partner lenders to obtain loan offers. These partners are contractually obligated to protect your data.

Service Providers

We work with trusted third-party service providers who assist us in operating our platform, such as hosting providers, analytics services, and customer support tools.

Legal Requirements

We may disclose your information when required by law, court order, or governmental regulation, or to protect our rights and safety.

Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specifically

• Active loan requests - retained for 2 years from submission
• Completed applications - retained for 7 years to comply with financial regulations
• Marketing data - retained until you withdraw consent

Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights

Right of Access (Article 15)

You can request a copy of all personal data we hold about you.

Right to Rectification (Article 16)

You can request correction of inaccurate or incomplete personal data.

Right to Erasure (Article 17)

You can request deletion of your personal data (right to be forgotten).

Right to Restriction (Article 18)

You can request that we restrict processing of your personal data.

Right to Data Portability (Article 20)

You can request your data in a structured, machine-readable format.

Right to Object (Article 21)

You can object to processing based on legitimate interests or for direct marketing.

Right to Withdraw Consent (Article 7)

You can withdraw consent at any time where processing is based on consent.

Data Security

We implement appropriate technical and organizational security measures to protect your personal data, including

• SSL/TLS encryption for data transmission
• Encrypted storage of sensitive data
• Regular security audits and vulnerability assessments
• Access controls and authentication measures
• Employee training on data protection practices

International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure adequate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us

Complaints and Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD).