1. Incorporation of personal data into the files of HOLDTX SPAIN S.L

In compliance with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free movement of such data and its implementing regulations, you are informed that the personal data provided by you will be processed for the purpose of providing the requested information about our services or, if applicable, managing your registration as a potential Investor.

2. Purpose of collecting personal data

The collection of personal data through the Portal aims to enable the proper provision of services and facilitate the fulfillment and execution of the contractual relationship, sufficiently verify the user's identity to participate as an Investor in the Projects, manage collections and payments for the services, even after the relationship has ended, conduct internal studies on the effectiveness of the website, marketing, advertising, and sales, and maintain a permanent communication channel with Users.

The user who registers on our website or contracts our services expressly consents to Hausera sending communications regarding the development and purpose of the Portal, information about the main projects in funding rounds at any given time, as well as any other promotional information related to our activity. At any time, the user can inform us of their desire not to receive further communications using the means that Hausera will provide for this purpose in its electronic communications.

Hausera may also collect information on how Clients access the Portal using a unique identifier for each Client through the use of cookies. More information about the use of cookies at this link.

3. Transfer of personal data by Hausera

Hausera will not transfer or transmit any personal data collected through the Portal to third parties, except when expressly authorized by legal obligation or when absolutely essential for the proper execution of the contracted service.

Furthermore, in accordance with the General Terms and Conditions applicable to Hausera's Participatory Financing Services, the corresponding contractual templates containing Investors' personal data as contractual parties in the transaction will be provided (the specific format will depend on the type of Project involved). Therefore, for the provision of intermediary platform services, and depending on the type of Project and the specific financing structure developed for it, it may be necessary for other Investors to be aware of the particular Investor's personal data.

Investors' personal data may also be communicated to Notaries, Banks, and Registries when such communication is essential for the formalization of investments in which they participate.

In the event of a business transaction, such as a merger or acquisition by another company, or the sale of all or part of our assets, personal information will likely be included among the transferred assets. The new entity must commit to maintaining the same level of protection for your personal information as described in this Privacy Policy. If we cannot secure this commitment, we will not proceed with the transaction. In any case, we will issue a notice informing you of changes in ownership or control of personal information before such a transfer.

4. Security measures

Hausera expressly assumes the obligation to implement the necessary security measures, applying appropriate techniques to ensure an adequate level of security based on the risk analysis conducted. Hausera guarantees the confidentiality, integrity, availability, and permanent recovery of processing systems and services.

Any personal information will be encrypted before being transmitted. In this regard, Hausera operates with a secure server using the SSL (Secure Socket Layer) protocol. The secure server establishes a connection so that the information is transmitted encrypted using 128-bit algorithms, ensuring that it is only intelligible to the Client's computer and the Portal's computer. In this way, using the SSL protocol guarantees:

1. That the Client is communicating their data to Hausera's server center and not to any other entity attempting to impersonate it.
2. That data transmitted between the Client and Hausera's center is encrypted, preventing possible reading or manipulation by third parties.

5. Data retention

The personal data of users who have expressly consented to receive commercial communications will be retained as long as they do not object to such processing.

The personal data of Investors who register on our Platform to consult and invest in ongoing projects will be retained while the contractual relationship is maintained, and once it ends, it will remain locked in our systems as long as liabilities arising from such service provision may arise or a legal obligation exists.

6. Minors protection policy

Anyone providing data through this Portal's forms or emails and accepting its processing formally declares to be over 14 years old.

Access to and use of the portal by individuals under 14 years of age is prohibited.

Hausera reminds adults responsible for minors that they bear sole responsibility if a minor provides their data to register or request information about our services.

It also informs them that software exists to limit navigation by filtering or blocking specific content.

7. Data conservation

At any time, you can exercise your rights of access, rectification, deletion, objection, restriction of processing, or directly exercise the right to data portability. This can be done through a written request, accompanied by a copy of an official document identifying you, sent to contacto@hausera.io.

Alternatively, these rights can be exercised through a written request with the same characteristics sent by postal mail to Holdtx Spain's registered office at C/ CASAS DEL RETIRO 25, 30310 - CARTAGENA - MURCIA - SPAIN, referencing “RGPD Rights”.

We also inform you of your right to file a complaint with the Spanish Data Protection Agency if you believe your rights are not being respected in the processing of your data.