Data protection
Privacy policy
Information on the processing of personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD). The Spanish version of this policy prevails.
1. Data controller
| Controller | ALMATRIA ABIERTA SL |
|---|---|
| Tax ID (NIF) | B72813330 |
| Address | Calle Carril de las Morillas 621 A, 29010 Málaga (Málaga), España |
| anagloria@publicmarketfit.com | |
| Data Protection Officer | Not required under article 37 GDPR or article 34 LOPDGDD. Data-protection enquiries are handled at the email address indicated above. |
2. Data we process and its source
We only process the data you provide voluntarily through the contact form or by email: name, company or organisation, email address, type of enquiry and the content of your message. We do not collect data from third-party sources or special categories of data (article 9 GDPR); please do not include this type of information in your messages.
The server may log technical connection data (IP address, date and time, user agent) in activity records, for security and operational purposes.
3. Purposes and legal basis
| Handling enquiries and requests | Basis: the data subject's consent and the application of pre-contractual measures at their request (art. 6.1.a and 6.1.b GDPR). |
|---|---|
| Managing contracted services | Basis: performance of the contract (art. 6.1.b GDPR). |
| Complying with legal, tax and accounting obligations | Basis: compliance with a legal obligation (art. 6.1.c GDPR). |
| Security, abuse prevention and site maintenance | Basis: the controller's legitimate interest (art. 6.1.f GDPR). |
| Sending informational or commercial communications | Basis: express and independent consent (art. 6.1.a GDPR and art. 21 LSSI-CE). You may withdraw it at any time. |
No automated decision-making or profiling with legal effects for the data subject is carried out.
4. Retention periods
- Enquiries that do not lead to a contractual relationship: up to one year from the last contact, unless erasure is requested earlier.
- Client data: for the duration of the relationship and, afterwards, blocked for the statutory limitation periods (among others, 4 years for tax purposes under Spanish Law 58/2003 and 6 years for commercial matters under the Spanish Commercial Code).
- Subscriptions to communications: until consent is withdrawn.
- Server technical logs: short periods for security reasons.
5. Recipients and processors
Data is not disclosed to third parties except under legal obligation. To provide the service we use suppliers acting as data processors (hosting and deployment of the site, email and office tools), with whom the contracts required by article 28 GDPR have been signed.
Where any of these suppliers is located outside the European Economic Area, international transfers are covered by a European Commission adequacy decision or, failing that, by Standard Contractual Clauses with supplementary measures (articles 44 to 49 GDPR). You may request information about the safeguards applied by writing to anagloria@publicmarketfit.com.
6. Data subjects' rights
You may exercise the rights of access, rectification, erasure, objection, restriction of processing, portability and not to be subject to individual automated decisions, as well as withdraw the consent given at any time, without this affecting the lawfulness of the prior processing.
To exercise them, send a request to anagloria@publicmarketfit.com or by post to Calle Carril de las Morillas 621 A, 29010 Málaga (Málaga), España, stating the right you are exercising and attaching a copy of a document proving your identity. We will reply within one month, extendable by two further months in complex cases.
If you consider that your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan 6, 28001 Madrid — www.aepd.es).
7. Security and accuracy of data
We apply technical and organisational measures appropriate to the risk (article 32 GDPR), including encryption of communications through HTTPS and access control to information. The user warrants that the data provided is accurate and undertakes to report any change.
8. Cookies
The use of cookies and similar technologies is described in the Cookies Policy.
9. Changes to this policy
This policy may be updated to adapt it to regulatory changes or new processing activities. The current version is always the one published on this page, with its update date.
10. Free registration to view public buyer profiles
If you create a free account to see the full information on the public buyer profiles, we process your name, your work email address, the name of your company and your password, which is stored encrypted. We send you an email to confirm that the address is yours; the information is not unlocked without that confirmation.
- Purpose and legal basis: to manage your account and give you access to the information, in performance of the terms of use you accept when registering (article 6.1.b GDPR).
- Communications from Public Market Fit: only if you tick the corresponding box, which is separate and optional, we will send you information about opportunities, guides and platform news (article 6.1.a GDPR and article 21 LSSI-CE). You can withdraw this consent at any time from any communication or by writing to the address above.
- Retention: for as long as you keep the account; when you close it, the data is deleted except for any that must be kept blocked by legal obligation. We keep the date and the version of this policy you accepted as proof of your consent.
The buyer profiles show public procurement information published by public administrations. They only include institutional data: individuals awarded contracts appear as “Individual”, without their name, and no email addresses, phone numbers or signatories are published.
Última actualización: 15 de septiembre de 2026