I. PRIVACY AND DATA PROTECTION POLICY

In compliance with current legislation, Grants Win (hereinafter, also referred to as the Website) is committed to adopting the necessary technical and organizational measures according to the appropriate security level for the risk of data collected.

Laws Included in This Privacy Policy

This privacy policy complies with the current Spanish and European regulations on personal data protection on the Internet. Specifically, it adheres to the following regulations:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and the free movement of such data (GDPR).
• Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
• Royal Decree 1720/2007 of 21 December, which approves the Regulation for the development of Organic Law 15/1999 of 13 December on the Protection of Personal Data (RDLOPD).
• Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the Data Controller

• Address: Carrer de Can Bruixa, 16, Les Corts, 08028 Barcelona
• Contact Phone: +34 689 330 516
• Contact Email: info@acceleralia.com

Registration of Personal Data

In compliance with the GDPR and LOPD-GDD, we inform you that the personal data collected by Grants Win through forms on its pages will be included in our files to facilitate, expedite, and fulfill the commitments established between Grants Win and the User or to maintain the relationship established in the forms completed or to address a request or query. Also, following the GDPR and LOPD-GDD, unless the exception provided for in Article 30.5 of the GDPR applies, a record of processing activities is maintained, specifying, according to their purposes, the processing activities carried out and other circumstances as set out in the GDPR.

Principles Applicable to the Processing of Personal Data

The processing of the User’s personal data will be subject to the following principles set forth in Article 5 of the GDPR and Article 4 and subsequent articles of Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights:

1. Lawfulness, fairness, and transparency: User consent will be required at all times, with full transparency about the purposes of collecting personal data.
2. Purpose limitation: Personal data will be collected for specific, explicit, and legitimate purposes.
3. Data minimization: Only the necessary personal data will be collected for the intended purposes.
4. Accuracy: Personal data must be accurate and always up to date.
5. Storage limitation: Personal data will only be retained as long as necessary for the processing purposes.
6. Integrity and confidentiality: Personal data will be processed in a way that ensures their security and confidentiality.
7. Accountability: The Data Controller is responsible for ensuring compliance with the above principles.

Categories of Personal Data

The categories of data processed by Grants Win are limited to identifying information. No special categories of personal data are processed as defined by Article 9 of the GDPR.

Legal Basis for Processing Personal Data

The legal basis for processing personal data is consent. Grants Win is committed to obtaining the User’s express and verifiable consent for processing their personal data for one or more specific purposes.

The User has the right to withdraw consent at any time. Withdrawing consent will be as easy as giving it. Generally, withdrawal of consent will not affect the use of the Website.

When the User must or may provide their data through forms for queries, information requests, or matters related to the Website’s content, they will be informed if any are mandatory for the proper development of the operation performed.

Purposes of Processing Personal Data

Personal data are collected and managed by Grants Win to facilitate, expedite, and fulfill the commitments established between the Website and the User or maintain the relationship established in the forms filled out by the User or to address a request or query.

Similarly, data may be used for personalized, operational, statistical, and marketing activities specific to Grants Win’s purpose, including data extraction, storage, and marketing studies to tailor content offered to the User and improve the quality, functioning, and navigation on the Website.

Upon collection of personal data, the User will be informed of the specific purpose(s) for which the personal data will be processed; that is, the use(s) given to the information collected.

Retention Periods for Personal Data

Personal data will only be retained for the minimum time necessary for processing purposes, or until the User requests its deletion.

Upon collection of personal data, the User will be informed of the period for which the data will be retained or, when that is not possible, the criteria used to determine this period.

Recipients of Personal Data

The User’s personal data will not be shared with third parties.

In any case, the User will be informed of the recipients or categories of recipients of the personal data upon collection.

Personal Data of Minors

In compliance with Articles 8 of the GDPR and 7 of Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, only persons over 14 years old may consent to the lawful processing of their data by Grants Win. If under 14, consent from parents or guardians will be required.

Confidentiality and Security of Personal Data

Grants Win is committed to adopting necessary technical and organizational measures according to the appropriate security level to ensure personal data security and prevent accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to transmitted, stored, or otherwise processed personal data.

The Website has an SSL (Secure Socket Layer) certificate, ensuring secure and confidential transmission of personal data as data transfer between the server and User, and feedback, is fully encrypted.

However, since Grants Win cannot guarantee complete internet security, nor the total absence of hackers, the Data Controller is committed to notifying the User without undue delay in case of a security breach likely to pose a high risk to personal rights and freedoms. As defined in Article 4 of the GDPR, a personal data breach is any breach leading to accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data.

Personal data will be treated confidentially by the Data Controller, who is committed to ensuring that its confidentiality is respected by employees, partners, and anyone to whom it provides access to the information.

Rights Derived from the Processing of Personal Data

The User has the following rights under the GDPR and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights:

• Right of access, rectification, erasure, restriction, portability, opposition, and to avoid automated decision-making.

To exercise these rights, the User can write to the Data Controller with the reference “GDPR-https://grantswin.ai/.”

Third-Party Websites

The Website may include links to third-party websites. Grants Win is not responsible for their own data protection policies, and each entity has its own privacy practices.

Complaints to the Supervisory Authority

If the User believes their personal data rights are violated, they may file a complaint with a supervisory authority. In Spain, this is the Spanish Data Protection Agency (http://www.agpd.es).

II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

The User must have read and agreed with this Privacy Policy. Website use implies acceptance of this Policy.

Grants Win reserves the right to modify its Privacy Policy. This policy was updated to align with the GDPR and Organic Law 3/2018.