Privacy Policy

Introduction

OnyxSignal S.A. ("we," "our," or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our payday loan services. Please read this privacy policy carefully to understand our practices regarding your personal data and how we treat it.

This policy applies to all personal data we collect through our website, services, and any other means. By using our services, you consent to the data practices described in this policy.

Data Controller Information

OnyxSignal S.A. is the data controller responsible for your personal information. Our contact details are:

Data We Collect

We may collect different types of personal data from you depending on how you interact with our services. The data we collect includes personal identification information, financial information, and technical data to provide our payday loan services effectively.

Personal Information

• Full name and contact details (email address, phone number, postal address)
• Date of birth and identification documents
• Employment information and income details
• Banking and financial information for loan processing
• Credit history and financial assessment data

Technical Information

• IP address and browser type
• Device information and operating system
• Website usage data and analytics information
• Cookies and tracking technologies data

How We Use Your Information

We use your personal data for specific purposes related to our payday loan services and business operations. How we use your information depends on the services you use and your relationship with us.

Primary Uses

• Processing and evaluating loan applications
• Providing customer service and support
• Conducting credit assessments and financial evaluations
• Complying with legal and regulatory requirements
• Preventing fraud and ensuring security
• Communicating about your loan status and account

Secondary Uses

• Improving our services and website functionality
• Conducting market research and analysis
• Marketing communications (with your consent)
• Maintaining business records and archives

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Contract performance: Processing necessary to provide our loan services
• Legal obligation: Compliance with financial regulations and anti-money laundering laws
• Legitimate interests: Fraud prevention, business operations, and service improvement
• Consent: Marketing communications and optional data processing activities

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Disclosure

We may share your personal information with trusted third parties who assist us in providing our services, subject to appropriate confidentiality and security measures.

Service Providers

• Credit reference agencies and financial assessment services
• Payment processors and banking partners
• IT service providers and data hosting companies
• Legal and professional advisors
• Regulatory authorities when required by law

We do not sell, trade, or otherwise transfer your personal information to third parties for their marketing purposes without your explicit consent.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal requirements. Our data retention periods are based on business needs and legal obligations.

• Loan applications: Retained for 7 years after completion or rejection
• Customer records: Retained for 6 years after relationship ends
• Marketing data: Retained until consent is withdrawn
• Website analytics: Retained for 26 months

Your Rights

Under GDPR and Spanish data protection law, you have several rights regarding your personal data:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data under certain circumstances
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent for consent-based processing

To exercise any of these rights, please contact us at privacy@onyxsignal.world or +34 962856696.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of sensitive data in transit and at rest
• Regular security assessments and updates
• Access controls and employee training
• Secure data storage and backup procedures
• Incident response and breach notification procedures

International Data Transfers

We primarily process data within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the European Commission.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out using the following contact information:

You also have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos) if you believe your data protection rights have been violated.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically to stay informed about how we protect your information.