At Iridium Bridge we treat personal data with the same diligence we apply to our clients' transactions. This policy explains what data we collect, why, for how long, and what rights apply to the people whose data we process.
1. Data controller
- Controller
- Iridium Bridge
- Contact email
- [email protected]
- Privacy queries
- [email protected]
2. Data we process
We process only the personal data that the user provides voluntarily, primarily through the website contact form or through standard professional communication channels (email, phone):
- Full name.
- Email.
- Phone (optional).
- Company or vehicle.
- Information about the deal: type, indicative amount, timeline, description.
We do not collect sensitive data. We do not use tracking cookies. The site only uses browser local storage (localStorage) to remember the user's language preference, which is not associated with any personal identifier.
3. Purpose of processing
Data is processed exclusively to:
- Respond to the user's query or request.
- Evaluate the viability of a specific financial transaction and, where applicable, prepare the necessary documentation.
- Maintain professional communication if the user wishes to continue the process.
- Comply with the legal obligations applicable to Iridium Bridge's activity, in particular those relating to anti-money-laundering and counter-terrorist-financing (AML/CFT).
We do not use the data for unsolicited commercial communications or automated profiling.
4. Legal basis
The legal basis for processing is:
- Consent of the data subject (Article 6.1.a GDPR), provided by actively submitting the contact form.
- Iridium Bridge's legitimate interest in managing professional communications related to its activity (Article 6.1.f GDPR).
- Compliance with legal obligations (Article 6.1.c GDPR), particularly those arising from AML/CFT, tax and commercial regulations.
5. Retention period
Data is retained for as long as needed to manage the query and, where applicable, formalise the contractual relationship. Once the professional relationship has ended, data is kept blocked for the legal retention periods (AML/CFT, tax, commercial) and is then deleted.
6. Recipients
Data is not transferred to third parties except:
- By legal obligation (Tax Authority, SEPBLAC, competent authorities).
- To technical service providers essential for the site's operation (web hosting, form management), under the data-processor agreements required by GDPR.
- To the specific financiers identified to evaluate a transaction, always with the client's prior consent and under confidentiality agreements.
No international data transfers are made outside the European Economic Area.
7. Data subject rights
Any person whose data is processed by Iridium Bridge has the right to:
- Access the personal data we process.
- Request the rectification of inaccurate data.
- Request the erasure of data when it is no longer necessary for the purposes for which it was collected.
- Object to the processing.
- Request the limitation of processing.
- Request the portability of data in a structured, machine-readable format.
- Not be subject to automated individual decisions with legal effects.
To exercise any of these rights, write to [email protected] indicating the right to be exercised and attaching a copy of an identity document.
8. Complaint to the supervisory authority
If the data subject considers that the processing of their data does not comply with the regulations, they may file a complaint with the Spanish Data Protection Agency (www.aepd.es).
9. Security measures
Iridium Bridge applies the technical and organisational measures appropriate to ensure a level of security suited to the risk of processing, including communication encryption, access control, and staff training in data protection.
10. Modifications
Iridium Bridge reserves the right to update this policy to reflect regulatory changes or the evolution of its activity. Any modification will be published on this page with the corresponding update date.