Privacy Policy
How we handle your personal data.
1. Data controller
The data controller responsible for processing your personal data on this website is:
Avenida Mártires Maristas 24, 28035 Madrid, Spain
Email: contact@alionpatners.com
Tax ID (NIF): B22712095
2. What data we process and why
a) Visiting the website
When you visit this website, our hosting provider processes technically necessary data (IP address, date and time, pages visited and browser type) in server log files to operate the website and maintain security. Legal basis: Article 6(1)(f) GDPR (legitimate interest in secure operation). Retention period: 30 days.
b) Loan enquiry
When you submit the “Loan enquiry” form, we process the information you provide: requested loan amount and term, first and last name, email address, phone number (optional), employment status, monthly net income and purpose of the loan.
- Purpose: To handle your enquiry, assess creditworthiness, communicate with you and prepare a possible offer.
- Legal bases: Article 6(1)(b) GDPR (pre-contractual steps at your request), Article 6(1)(c) GDPR (legal obligations, including creditworthiness checks under applicable consumer credit law and anti-money-laundering requirements), and Article 6(1)(f) GDPR (fraud prevention and legal claims).
- Required information: Without the fields marked as required, we cannot process your enquiry.
Where required or permitted by law as part of a creditworthiness assessment, we may consult the credit information systems recognised under applicable law: [to be completed]. Legal basis: Article 6(1)(c) GDPR.
c) Contact form and email
If you contact us by form or email, we process your name, email address, subject and message to respond to you. Legal basis: Article 6(1)(b) or (f) GDPR.
3. Automated decisions
We do not make decisions based solely on automated processing, including profiling, within the meaning of Article 22 GDPR.
4. Data recipients
We share your data only with recipients where necessary:
- Hosting and form provider: Netlify, Inc., San Francisco, USA
- Email service providers used to receive and respond to your messages
- Credit reference agencies and credit databases where legally required or permitted, as recognised under applicable law
- Public authorities where we are legally required to disclose information (e.g. financial supervisory authorities, tax authorities and anti-money-laundering authorities)
- Professional advisers (lawyers, tax advisers and auditors) subject to confidentiality obligations
We have data processing agreements in place with service providers acting on our behalf, as required by Article 28 GDPR.
5. Transfers to third countries
Our hosting and form provider, Netlify, Inc., is based in the United States, so your data may be transferred there. Where the recipient is certified, the transfer relies on the European Commission’s adequacy decision for the EU–US Data Privacy Framework; otherwise, it relies on Standard Contractual Clauses (Article 46 GDPR).
6. Data retention
| Loan enquiry without a signed agreement | 6 months after processing is completed |
|---|---|
| Loan agreement and related documents | Duration of the agreement plus 10 years |
| Anti-money-laundering records | 10 years |
| Contact enquiries | 12 months |
7. Cookies and external content
This website does not currently use cookies that require consent or any analytics or marketing tools.
The homepage loads an image from an external server (Unsplash). Your IP address is therefore shared with that server operator.
8. Your rights
Under the GDPR, you have the following rights:
- Access to your stored data (Art. 15)
- Rectification of inaccurate data (Art. 16)
- Erasure (Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Object to processing based on legitimate interests (Article 21)
- Withdraw consent at any time with effect for the future (Article 7(3))
To exercise your rights, email contact@alionpatners.com. We will respond to your request within one month.
9. Right to lodge a complaint
You may lodge a complaint with the Spanish Data Protection Agency:
10. Data security
We use technical and organisational measures to protect your data, including encrypted transmission (HTTPS), access restrictions and regular reviews.
11. Changes
We may update this Privacy Policy when the law or our data processing practices change. The current version published on this page applies.