Subscribe

Privacy Policy

Last updated: 2026-08-18.

1. Who is responsible for your data

The controller of the personal data collected through bernal-fintech.com is Bernal FinTech SL, with registered address at Calle José Francisco Pérez Sánchez 20, 30120 El Palmar (Murcia), España and tax ID B56268253. You can contact us at any time at contact@bernal-fintech.com. The person in charge of the protection of personal data is the administrator of Bernal FinTech SL, reachable at that same address.

2. What personal data we collect and why

We collect the minimum data needed to run each feature, and never for unrelated purposes:

  • Account and comments: when you register, we store your username, email address and password hash. Comments you post are stored together with your username. Purpose: to provide your account and the discussion features.
  • Account security and fraud prevention: when you sign in and, periodically, while your session is active, we record your IP address (protected by encryption), the device you access from and the approximate location (country and city) derived from that IP address. We use this data to protect your account, limit concurrent sessions and detect unauthorised access or account sharing. Legal basis: our legitimate interest in the security of the service. We keep it for 90 days.
  • Contact form: the name, email address and message you send us are used solely to answer your enquiry.
  • Newsletter: if you subscribe, we store your email address and your interaction with our emails (opens and clicks, if our email service measures them) to send you our communications until you unsubscribe. Every email includes an unsubscribe link.
  • Paid subscription (when available): your account data and billing details are used to manage your subscription. Payment card data is processed directly by the external payment processor; we never see or store your full card details.
  • Company opinions: the rating or opinion you submit is stored with a cryptographic hash of your IP address (never the IP itself) to prevent abuse.
  • Usage analytics: only if you accept statistics cookies, we collect pseudonymous usage data (pages visited, approximate region, device type) through Google Analytics.
  • Server logs: our hosting company keeps standard access logs (IP address, browser, pages requested) for security and troubleshooting.
  • Consent records: your cookie choices are stored with a hash of your IP address as proof of consent, as required by data protection law.

3. Legal bases

We process your data on the following legal bases: performance of a contract (your account and subscription), your consent (newsletter, analytics cookies, contact enquiries), our legitimate interest (security, abuse prevention, service improvement) and compliance with legal obligations (keeping consent records, tax and accounting duties for paid subscriptions).

Providing your account data is a requirement necessary to enter into the contract: without it we cannot create your account or manage your subscription. Providing any other data is voluntary, and the only consequence of not doing so is that the corresponding feature cannot be used.

You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

4. Who we share your data with

We do not sell your personal data. We share it only with the companies that run this website, each bound by a data processing agreement: our hosting company (Hetzner, servers located in the European Union), Google LLC (usage analytics, only with your consent), our email delivery service (newsletter and transactional email) and, when the paid subscription is active, the payment processor you choose at checkout (PayPal or Stripe).

To display charts, some pages load open-source libraries from a public content delivery network (jsDelivr). Your browser fetches those files directly from that network, which therefore sees your IP address as part of the request; it sets no cookies and does not process personal data on our behalf.

We may also disclose data when required by law or by a competent authority. If the business is sold or merged, your data would be transferred to the new owner under the terms of this same policy.

This policy does not apply to third-party websites we link to; their own privacy policies apply there.

5. International transfers

Only two companies process your data outside the European Economic Area: Google LLC (usage analytics, in the United States, and only if you accept statistics cookies) and, if you make a purchase, the payment processor you choose at checkout (PayPal or Stripe, in the United States). These transfers are covered by the EU-U.S. Data Privacy Framework — and, for residents of Switzerland and the United Kingdom, by the Swiss-U.S. Data Privacy Framework and the UK Extension to the EU-U.S. Data Privacy Framework respectively — and, where applicable, by the European Commission's standard contractual clauses. This section lists every processing outside the EEA: if we ever add a new company located outside the EEA, we will update it before enabling that company.

6. How long we keep your data

  • Account data: until you delete your account or ask us to delete it. Accounts inactive for 24 months may be deleted.
  • Comments and company opinions: while the content remains published, or until you request its deletion.
  • Contact form messages: up to 12 months after the conversation ends.
  • Newsletter: until you unsubscribe.
  • Analytics data: 14 months (Google Analytics retention setting).
  • Access security data (encrypted IP address, device and approximate location): 90 days, then they are deleted automatically.
  • Consent records: 25 months, then they are deleted automatically.
  • Server logs: a few weeks, under our hosting company's policy.
  • Billing data (paid subscription): 6 years, as required by Spanish tax and accounting law.

7. Your rights

You can exercise your rights of access, rectification, erasure, restriction, portability and objection at any time by writing to contact@bernal-fintech.com. You can also withdraw any consent you have given (for example, change your cookie choice from the cookie policy page).

We respond to requests within one month of receipt; where the complexity or number of requests requires it, we may extend this by up to two further months, informing you of the extension within the first month. You can also raise any complaint about the handling of your data directly with us at contact@bernal-fintech.com: we will acknowledge receipt within 30 days and tell you the outcome.

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) or with your local supervisory authority.

8. Security

We apply appropriate technical and organisational measures: encrypted connections (TLS), hashed passwords and IP addresses, restricted access to systems and regular security reviews of the platform.

9. Minors

This website is a financial information service and is not directed at persons under 18. We do not knowingly collect data from minors; if we become aware of such data, we delete it.

10. Privacy rights in the United States

If you reside in a US state with a privacy law (California, Virginia, Colorado and others), you have the right to know, access, correct and delete your personal data, and to opt out of its sale or of its sharing for targeted advertising. We do not sell your personal data nor share it for targeted advertising. Because non-essential cookies are disabled until you opt in, Global Privacy Control (GPC) and Do Not Track signals are inherently respected. You can exercise these rights at contact@bernal-fintech.com.

11. Changes to this policy

We may update this policy to reflect legal or service changes. The date at the top always shows the latest version, and material changes will be announced on the site.