Home › Privacy policy
Privacy policy
Last updated: 8 November 2026
This is a translation for your convenience. In the event of any discrepancy, the Spanish version prevails.
This policy explains what personal data we process when you use todaslasayudas.com and todaslasayudaspro.com, why we process it and what your rights are. Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD) apply. If you use the website from Paraguay or another country, we also apply the safeguards of your local data protection law.
1. Data controller
- Owner: (registration in progress; it will be published here as soon as it is available)
- Tax ID (NIF/CIF): (registration in progress; it will be published here as soon as it is available)
- Registered address: (registration in progress; it will be published here as soon as it is available)
- Contact email: [email protected]
- Websites: todaslasayudas.com and todaslasayudaspro.com
2. What data we process and why
| When | What data | Purpose | Legal basis |
|---|---|---|---|
| You search or browse | Search terms (without identifying you) and an encrypted fingerprint of your IP address | Showing results, measuring searches anonymously and applying daily usage limits | Legitimate interest in providing and protecting the service |
| You create an account | Email address and, if you provide them, your name, country, user type and interests | Managing your account, saving your opportunities and recommending new ones | Performance of the service you request |
| You sign up for alerts | Email address, country, user type and interests | Emailing you new opportunities that match your profile | Your consent (confirmed by email) |
| You ask an expert or a financial institution for help | Name, email, phone number, country, area, user type, the grant or funding you are interested in and your message | Being contacted by up to 3 verified professionals or institutions who can help with your application | Your explicit consent (tick box), which we store with its wording, version and date |
| You talk to the AI agent or ask for a summary | What you type | Answering you | Performance of the service |
| You request access to Todas las Ayudas Pro | Your contact and company details | Contacting you and registering you as a professional user | Your consent and pre-contractual steps |
We do not make automated decisions that produce legal effects concerning you. The AI agent's recommendations are for guidance only.
3. Who we share your data with
- Verified professionals and institutions (business advisers, consultancies, banks, credit unions, guarantee societies or financial advisers): only if you ask us to by ticking the box, no more than 3, and only the data in that request. Each of them then processes your data as an independent controller in order to help you.
- Service providers (data processors): Cloudflare (hosting, database, security and artificial intelligence) and Resend (email delivery, servers in the European Union). Where a provider may access data from outside the European Economic Area, it does so with GDPR safeguards (the EU-US Data Privacy Framework or standard contractual clauses).
- Public authorities, only where the law requires us to.
We never sell your data for advertising or share it without your permission. The demand reports we offer professionals are anonymous, aggregated statistics containing no data that identifies you.
4. How long we keep it
- Account: for as long as you keep it. If you delete it from “My account”, we erase your data.
- Alerts: until you unsubscribe (there is a link in every email).
- Requests to experts or institutions: up to 2 years, or sooner if you withdraw your permission. We keep proof of consent for as long as needed to deal with any claims.
- Encrypted IP fingerprint for usage limits: a few days.
5. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to [email protected]. If you feel we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
6. Security
We use an encrypted connection (HTTPS), password-free sign-in with one-time codes, protected sessions and restricted access to the database. IP fingerprints and session tokens are stored encrypted.
7. Children
This website is intended for people aged 14 and over. If you are under 14, please ask a parent or guardian to handle your request.