Privacy Policy
Last updated: March 2026
The purpose of this Privacy Policy is to inform you clearly and precisely about the processing of the personal data collected through this website (the “Website”), as well as in connection with the contracting and use of our tools and services.
This Privacy Policy has been drawn up in accordance with the data protection legislation in force.
Who is the data controller?
The controller of the personal data collected is:
- Owner: BOLD SOFTWARE SOLUTIONS, S.L. (hereinafter, “Bold”)
- Tax ID (NIF): B13948401
- Registered office: Calle Torres, 24, A9, 46018 Valencia, Spain.
- Privacy contact email: compliance@bold-factory.com
What personal data do we collect and where does it come from?
Bold collects personal data from Website users, as well as from the legal representatives and contact persons of clients or prospective clients. This data is provided directly by the data subject through:
- Contact and support forms: Identification and contact data.
- Demo scheduling systems: Data needed to coordinate and run a demonstration of our software.
- Contracting and platform registration process: Data needed to register the client and manage the commercial relationship.
- Browsing and session data: Information collected automatically (such as device type, browser type, etc.) through the use of cookies. For more information, please see our Cookie Policy.
For what purpose do we process your data and what is the legal basis?
At Bold we process your personal data for the following purposes, each supported by its respective legal basis:
| Purpose of Processing | Legal Basis |
|---|---|
| User support: Manage and respond to requests for information, questions or queries sent through any form available on the Website. | Consent of the data subject (art. 6.1.a GDPR) when submitting the query and/or our legitimate interest (art. 6.1.f GDPR) in handling your requests. |
| Demo management: Coordinate, schedule and hold explanatory meetings or proofs of concept about our tools, requested by prospective clients. | Application of pre-contractual measures (art. 6.1.b GDPR) at the data subject's request. |
| Commercial follow-up of bookings and demos: If the user starts a demo scheduling process by providing their email address or attends one, we will use that data to contact them as appropriate, assist them in completing the booking and follow up on the demonstration. | Legitimate interest of Bold (art. 6.1.f GDPR) to facilitate the contracting process initiated or requested by the user. |
| Contracting and provision of the service: Manage the contractual registration, provide the subscribed service, billing and maintenance of the commercial relationship with our clients. | Performance of a contract (art. 6.1.b GDPR) to which the data subject is a party. |
| Commercial communications and newsletter: Sending electronic communications about product updates, news and offers from Bold. | Explicit consent (art. 6.1.a GDPR) requested explicitly. In the case of clients with a contract in force, sending is based on legitimate interest (art. 21.2 of the Spanish LSSI), with the right to object at any time. |
To which recipients will your personal data be disclosed?
As a general rule, Bold will not disclose your personal data to third parties, except where legally required.
However, for the proper administrative and commercial management and operation of the Website and the platform, Bold relies on the collaboration of third-party service providers (such as calendar tools, customer or CRM management systems, web hosting and analytics services). These providers act as Data Processors and have limited access to the data strictly necessary to provide their service.
International Data Transfers: Some of the technical service providers and management tools mentioned above may have their servers located outside the European Economic Area (EEA). In these cases, Bold ensures that such international transfers are carried out lawfully, using providers adhering to recognized privacy frameworks (such as the Data Privacy Framework between the EU and the US) or by signing Standard Contractual Clauses approved by the European Commission, thereby guaranteeing an adequate level of protection in accordance with the legislation in force.
How long will we keep your data?
Personal data will be kept only for as long as necessary to fulfill the purpose for which it was collected:
- Users who contact us or request demos (prospective clients): We will keep your data to handle your request and carry out the appropriate commercial follow-up. If a contract is not formalized, your data will be deleted within a maximum of one (1) year from the last contact.
- Platform clients (SaaS): Your data will be processed for as long as the contractual relationship is in force. After the contract ends, the data hosted in the application will be destroyed within ninety (90) calendar days (unless the client gives prior instructions).
- Newsletter / commercial communications subscription: If you have agreed to receive our communications, we will keep your email until you withdraw your consent or exercise your right to object.
Solely in the case of clients with whom there has been a contractual and billing relationship, once the relationship has ended, we will keep the administrative and tax data duly blocked for the legal limitation periods required to address potential liabilities before the Public Administrations.
What are your rights?
Anyone has the right to obtain confirmation as to whether or not Bold is processing personal data concerning them. As a data subject, you may exercise the following rights free of charge:
- Access: Find out what personal data we are processing.
- Rectification: Request the correction of inaccurate or incomplete data.
- Erasure: Request the deletion of your data when, among other reasons, it is no longer necessary for the purposes for which it was collected.
- Objection: Object to the processing of your data (for example, for sending commercial communications).
- Restriction: Request the restriction of the processing of your data, in which case we will only keep it for the exercise or defense of claims.
- Portability: Receive your data in a structured, commonly used and machine-readable format, and transmit it to another controller.
- Withdraw consent: Where processing is based on your consent, you may withdraw it at any time.
You may exercise these rights by sending an email to compliance@bold-factory.com (Ref. Data Protection), indicating the right you wish to exercise. For security reasons, we may request additional information to confirm your identity.
Finally, we inform you of your right to lodge a complaint with the competent supervisory authority, the Spanish Data Protection Agency (AEPD), through its website: www.aepd.es, especially if you consider that your rights have not been adequately respected.
Data security
Bold has implemented and maintains the technical and organizational measures necessary to protect the information it collects and to prevent its alteration, loss, unauthorized processing or access, taking into account the state of technology, the nature of the data stored and the risks to which it is exposed. However, users should be aware that security measures on the Internet are not impregnable.
Other legal texts
This Privacy Policy is complemented by the Legal Notice and the Cookie Policy of our Website, which we invite you to review.