Privacy Policy

JP SERVICIOS DE PUBLICIDAD Y DIRECTORIOS, S.L. complies with the General Data Protection Regulation (GDPR) 2016/679 ([EUR-Lex]1) and Spain’s Organic Law 3/2018 on Personal Data Protection and the guarantee of digital rights ([BOE]2), as the data controller for the processing activities described below.

1. Information about the data controller

The controller of the data collected through https://cazasubastas.es (the “Website”) is:

  • JP SERVICIOS DE PUBLICIDAD Y DIRECTORIOS, S.L.
  • Tax ID (CIF): B75729400
  • Address: C/ Hurtado de Amezaga 14, ent. 1.º izq., 48008, Bilbao, Vizcaya, Spain
  • Email: soporte@cazasubastas.es

For any questions related to this privacy policy, you can contact us at the email address above.

2. What purposes do we process your personal data for?

This policy applies to the processing of data provided by Website users, including registered users, newsletter subscribers, and people requesting information.

The specific purposes are:

  • Service provision: user registration management, platform access, auction alert configuration, and communications about updates related to your searches.
  • Paid services management: administration of subscriptions and payments through Stripe (or similar payment gateways). Stripe’s privacy policy is available here: https://stripe.com/privacy. ([Stripe]3)
  • Handling requests submitted through forms and Website contact channels.
  • Sending newsletters and commercial communications, including information about new auctions, promotions, or Website-related services.
  • Service improvement and optimization, as well as statistical analysis of platform usage.

You may object at any time to receiving commercial communications by writing to: 📩 soporte@cazasubastas.es

Mandatory fields in forms are necessary to fulfill these purposes. If they are not provided, we will not be able to complete the registration or the related request.

3. Who can provide us with their data?

The Website services are not intended for individuals under 18 years old, who are not authorized to register, purchase services, or receive marketing communications.

Users guarantee that the data they provide is truthful, accurate, and up to date, and they are responsible for any consequences arising from incorrect or false information.

The company reserves the right to exclude any user who provides false data or breaches this policy.

4. How do you provide us with your data?

Data may be provided by the user at different points on the Website:

  • During user registration, by expressly accepting this Privacy Policy.
  • Through contact forms or information requests.
  • When subscribing to newsletters or auction alerts.
  • When purchasing paid services or subscription plans.

In these cases, data is incorporated into the processing systems of JP SERVICIOS DE PUBLICIDAD Y DIRECTORIOS, S.L., and used to manage the relationship with the user and to send communications related to their account, contracted services, or useful auction information.

Users may exercise their rights at any time.

5. How do we protect your data?

We ensure the confidentiality of personal data, implementing the necessary technical and organizational measures to prevent loss, alteration, unauthorized access, or misuse.

User passwords are stored using appropriate encryption techniques.

We do not work with providers that do not guarantee compliance with data protection regulations, and we commit to notifying users of any security incident that poses a risk to their rights.

6. How long do we keep your information?

Data will be kept:

  • While a contractual relationship exists or the user remains registered.
  • Until the user requests deletion.
  • For the periods necessary to address potential legal liabilities arising from provided services.

Marketing data will be kept until the user withdraws consent.

7. Do we share or transfer your data?

We do not transfer personal data to third parties unless required by law or authorized by the user.

To provide the service, we work with external providers acting as data processors, such as:

  • Technology services and hosting
    • A US-based hosting provider (depending on the current Website configuration).
  • Email delivery, marketing, and newsletters
    • Email marketing and automation platforms used to manage newsletters and alerts.
  • Payments
    • Stripe Payments Europe, Ltd. (card and electronic payments). Stripe privacy policy: https://stripe.com/privacy. ([Stripe]3)
    • Stripe acts as an independent controller regarding card data.
  • User support

When any provider is located outside the European Economic Area, appropriate safeguards are ensured under GDPR Articles 44–49. ([EUR-Lex]1) For example, through Standard Contractual Clauses (SCCs): https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj/eng. ([EUR-Lex]4)

8. Consent for the use of cookies

The Website uses first-party and third-party cookies for proper operation and to analyze and improve the user experience.

To manage consent, we use a cookie management system that allows:

  • Obtaining valid consent.
  • Enabling only cookies accepted by the user.
  • Securely recording the selected configuration.

Full details are available in the Website’s Cookie Policy: https://cazasubastas.es/legal/cookies. ([My app name]5)

9. Server log files

The Website automatically collects information your browser sends to the server, including:

  • Anonymized IP address.
  • Browser and device type.
  • Date and time of access.
  • Pages visited and traffic source.
  • Cookie preferences and granted consent.

This data is used only to ensure technical security and to perform statistical analysis.

10. What are my rights as a user?

Users may exercise the rights recognized by applicable regulations:

  • Right of access.
  • Right to rectification.
  • Right to erasure.
  • Right to object.
  • Right to restriction of processing.
  • Right to data portability.
  • Right to withdraw consent at any time.

To exercise these rights, send a request to: 📩 soporte@cazasubastas.es

You also have the right to file a complaint with the Spanish Data Protection Authority (AEPD):

11. Notices

Communications or notices related to this Policy will be made in writing, preferably by email, to the contact addresses provided by the parties.

12. Jurisdiction and applicable law

This Privacy Policy is governed by Spanish law.

If the user is considered a consumer, any dispute will be submitted to the Courts and Tribunals of the user’s domicile, in accordance with consumer protection regulations.

If the user is not considered a consumer, the parties expressly submit to the Courts and Tribunals of Bilbao, waiving any other jurisdiction that may apply.