Last updated: 20 July 2026

1. Data Controller

• Company name: Predicterra SL (the “Company” or “Data Controller”)

• Registered office: Calle Gran Vía 17, 6th floor, office 611, 48001 Bilbao, Bizkaia, Spain

• Tax Identification Number (NIF): B-05499454

• Registry data: Mercantile Registry of Bizkaia, 19 May 2021, Volume 6,008, Folio 116, Section 8, Sheet BI-76914, First Entry

• Contact for data protection matters: hello@predicterra.com

The Company has not appointed a Data Protection Officer, as it is not obliged to do so under Article 37 GDPR. For any matter relating to the processing of your personal data, you may contact us at the email address above.

This Privacy Policy explains how the Company processes the personal data of users and visitors of https://predicterra.com (the “Website”), in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).

2. Purposes, legal basis, and retention

The Company processes personal data for the purposes set out below, on the legal basis and for the retention periods indicated:

a) Responding to inquiries, suggestions, or requests made through the contact form or by email.

• Legal basis: your consent and, where applicable, the application of pre-contractual measures taken at your request (Article 6(1)(a) and (b) GDPR).

• Retention: for the time needed to handle your request and, thereafter, for the applicable limitation period, after which the data is deleted.

b) Managing your registration or subscription as a user of the Website.

• Legal basis: your consent (Article 6(1)(a) GDPR).

• Retention: until you withdraw your consent or request cancellation of your registration.

c) Sending commercial communications and newsletters about our services, content, and activities by email.

• Legal basis: your consent (Article 6(1)(a) GDPR); where you are already a client, our legitimate interest in offering similar services (Article 6(1)(f) GDPR and Article 21(2) LSSICE).

• Retention: until you withdraw your consent or object, which you may do at any time via the unsubscribe link or by writing to us.

d) Providing and managing services contracted with the Company.

• Legal basis: performance of a contract (Article 6(1)(b) GDPR).

• Retention: for the duration of the contractual relationship and, thereafter, for the legally required periods (for example, tax and accounting obligations).

e) Producing aggregated, anonymized website statistics (see section 7, Website analytics).

• Legal basis: our legitimate interest in understanding and improving the use of the Website (Article 6(1)(f) GDPR).

• Retention: data is kept only in aggregated form and does not allow the identification of individuals.

f) Complying with legal obligations to which the Company is subject.

• Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR).

• Retention: the periods required by the applicable legislation.

3. Data we collect

Depending on your interaction with the Website, the Company may process:

• Identifying and contact data: name and email address, together with any other data you voluntarily include in your message.

• Technical and usage data: aggregated and anonymized browsing statistics generated by our analytics tools (see section 7).

The Website does not intentionally collect special categories of data (Article 9 GDPR). Please do not include such data in your communications with us.

You are responsible for the accuracy of the data you provide and undertake to keep it up to date. You warrant that the data provided is truthful and that, where it relates to third parties, you have informed them and obtained their consent.

4. Source of the data

The personal data processed is obtained directly from you, through the forms, subscription or registration mechanisms, and communications made through the Website or by email. We do not obtain your data from third-party sources.

5. Recipients and data processors

Personal data will not be sold or assigned to third parties, except where legally required.

To operate the Website and provide our services, the Company relies on trusted service providers acting as data processors (for example, the website hosting and site-building platform, email and communication services, and analytics providers). These providers process data on the Company’s behalf, under the instructions set out in the corresponding data processing agreements and with the guarantees required by Article 28 GDPR.

6. International data transfers

The Company prioritizes providers that process data within the European Economic Area (EEA). Where any processor is located outside the EEA, or processes data on infrastructure outside it, the Company ensures that appropriate safeguards under Chapter V GDPR are in place, such as an adequacy decision by the European Commission or the Standard Contractual Clauses.

7. Website analytics

The Website uses privacy-friendly, cookieless analytics to obtain aggregated statistics about its use (such as number of visits, pages viewed, and general country or referral source). Specifically, the Company uses:

• Plausible Analytics, a tool that does not use cookies or persistent identifiers and does not store IP addresses, operated within the European Union.

• The built-in analytics of Framer, the platform used to build and host the Website, which likewise does not use cookies or generate persistent identifiers.

These tools process certain technical data (such as IP address and browser user agent) solely and momentarily to produce an anonymized visitor count, without storing the IP address, without creating persistent identifiers, and without allowing the identification of individual users or the tracking of their activity across other websites. Because no information is stored on or read from your device, no cookie consent banner is required for this processing. The legal basis is the Company’s legitimate interest (Article 6(1)(f) GDPR) in measuring and improving the performance of the Website in a privacy-respecting manner.

8. Cookies

The Website does not use advertising, profiling, or tracking cookies, and does not use cookies that require prior consent under Article 22(2) LSSICE. Only strictly necessary or technical cookies that may be required for the correct functioning and security of the site could be used, and these are exempt from the consent requirement. Should the Company introduce cookies requiring consent in the future, it will update this policy and implement an appropriate consent mechanism and, where applicable, a separate Cookie Policy.

9. Security measures

The Company has adopted the technical and organizational measures required by Article 32 GDPR to ensure a level of security appropriate to the risk, and to protect personal data against unauthorized access, loss, alteration, or unauthorized disclosure. The Company applies recognized information security standards and best practices in the management of its systems.

10. Data subject rights

You may exercise the following rights at any time, free of charge, by writing to hello@predicterra.com and, where necessary, providing a document that proves your identity:

• Access: obtain confirmation of whether we process your data and, if so, access it.

• Rectification: correct inaccurate or incomplete data.

• Erasure: request deletion of your data where the conditions apply.

• Restriction: request that processing be limited in certain cases.

• Objection: object to processing based on legitimate interest.

• Portability: receive your data in a structured, commonly used, and machine-readable format, or have it transmitted to another controller.

• Withdrawal of consent: withdraw any consent given, without affecting the lawfulness of processing carried out before the withdrawal.

The Company will respond within the period established by the GDPR. If you consider that your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

11. Minors

The Website and its services are directed at persons over 14 years of age. The Company does not knowingly process data of minors under that age. If we become aware that we have processed such data without the authorization of a parent or guardian, we will delete it as soon as possible.

12. Automated decisions and profiling

The Company does not make decisions based solely on automated processing, including profiling, that produce legal effects on users or significantly affect them in a similar way.

13. Updates and modifications

The Company may update or modify this Privacy Policy to adapt it to legislative or case-law developments, or to changes in its processing activities. Any modification will be published on this page, indicating the date of the last update. We recommend that you review it periodically.

14. Governing law and jurisdiction

This Privacy Policy is governed by Spanish law. Any dispute arising from it shall be submitted to the Courts and Tribunals of the city of Bilbao, without prejudice to the jurisdiction that may apply by law where the user acts as a consumer.

15. Language

This Privacy Policy is published in English. Where a Spanish-language version is also made available, the Spanish version shall prevail in the event of any discrepancy, given that the Company is domiciled in Spain.