Privacy Policy

Last updated: January 15, 2026

At Compressiongh Inversiones S.L. (hereinafter, "Compressiongh"), we are committed to protecting the privacy and personal data of our users. This Privacy Policy describes how we collect, use, store, and protect your personal information in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

1. Data Controller

The data controller for your personal data is Compressiongh Inversiones S.L., with Tax ID (CIF) B-12456789, registered address at Calle de Serrano 78, Office 4B, 28006 Madrid, Spain. You can contact us at any time via email at privacidad@compressiongh.com or by phone at +34 91 123 45 67.

2. Personal Data We Collect

We collect different categories of personal data depending on the purpose of processing: identification data (name, surname, ID number), contact data (email address, phone number, postal address), data provided through contact forms on our website (name, email, and message), browsing data (IP address, browser type, pages visited, time spent), and technical and analytical cookies as detailed in our Cookie Policy.

3. Purposes of Processing

We process your personal data for the following purposes: responding to inquiries submitted through our contact forms, providing information about our real estate crowdlending services, complying with legal and regulatory obligations applicable to the crowdfunding sector, conducting statistical and performance analysis of our website, and sending you commercial communications only when you have given your express consent.

4. Legal Basis for Processing

The processing of your data is based on the following legal grounds under Article 6 of the GDPR: your consent when submitting contact forms or subscribing to communications, the performance of pre-contractual measures when you request investment information, compliance with legal obligations derived from Spanish and European financial regulations, and our legitimate interest in improving our services and user experience, always respecting your fundamental rights.

5. Data Recipients

We do not sell or share your personal data with third parties for commercial purposes. We may only disclose your data to: technology service providers who assist us in platform operations, subject to confidentiality agreements; regulatory authorities such as the CNMV, the Bank of Spain, or the AEAT when required by applicable legislation; and legal advisors and auditors in the exercise of their professional duties.

6. International Transfers

Your personal data is stored and processed within the European Economic Area (EEA). Should a transfer outside the EEA become necessary, we will ensure appropriate safeguards are implemented, such as standard contractual clauses approved by the European Commission or reliance on providers adhering to the EU-US Data Privacy Framework.

7. Data Retention

We will retain your personal data for as long as necessary to fulfill the purpose for which it was collected. Contact form data will be retained for a maximum of 24 months from the last interaction. Browsing data and cookies will be retained according to the timelines specified in our Cookie Policy. Once the retention periods expire, the data will be deleted or irreversibly anonymized.

8. Your Rights

In accordance with the GDPR and the LOPDGDD, you may exercise the following rights: access to your personal data, rectification of inaccurate or incomplete data, erasure of your data when it is no longer necessary, restriction of processing in certain circumstances, portability of your data in a structured and commonly used format, and objection to processing based on legitimate interest. To exercise any of these rights, send a request to privacidad@compressiongh.com indicating your identity and the right you wish to exercise. We will respond within a maximum of 30 days.

9. Security Measures

We implement appropriate technical and organizational measures to ensure the security of your personal data, including TLS encryption for all communications, role-based access controls, regular backups, and periodic security audits. Our systems are continuously updated to address new threats and vulnerabilities.

10. Changes to This Policy

We reserve the right to update this Privacy Policy to reflect changes in our practices or applicable legislation. Any modifications will be published on this page with the date of the last update. We recommend reviewing it periodically.

11. Contact and Complaints

If you have any questions about this Privacy Policy or the processing of your data, you can contact our Data Protection Officer at dpo@compressiongh.com. You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es if you believe your rights have not been adequately addressed.