Privacy policy of SettleMatch

1. Data controller

This Privacy Policy explains how SettleMatch handles the personal data of people who visit this website or request access through it.

SettleMatch is a product of Rossol. The data controller is the owner of Rossol, which operates the product:

• Controller: SettleMatch
• Contact: contacto@settlematch.com

2. Scope of this policy

This policy covers only this website and the access request form.

It does not cover the data processing carried out within the SettleMatch application when a company uses it to reconcile its operations: in that case the company is the data controller and SettleMatch acts as processor, under the terms of the corresponding processing agreement.

3. What data we handle

This website does not require registration. The only personal data handled are:

3.1. Data from the access request form

• Name.
• Contact email.
• Company (optional field).
• Phone (optional field).
• Your profile and your transaction volume.
• The content of the message you write.
• Confirmation that you have accepted this policy.

3.2. Technical data

• IP address, used temporarily, as a derived value, to limit form submissions and prevent abuse.
• Server technical logs and a session identifier needed to protect the form.

4. What we use the data for and on what legal basis

We do not use your data for unsolicited commercial communications.

4.1. Handling your request

• Purpose: to read your message, assess your case and respond to you, including subsequent communication.
• Legal basis: your consent (Article 6(1)(a) GDPR) and the pre-contractual measures requested by you (Article 6(1)(b)).

4.2. Security

• Purpose: to limit automated submissions and maintain the security of the site.
• Legal basis: our legitimate interest in protecting the service (Article 6(1)(f) GDPR).

5. How long we keep it

• Requests received are kept for as long as needed to handle them and, if they do not lead to a relationship, for a reasonable period to evidence the communication.
• The derived value of the IP is automatically deleted when the rate-limiting period expires.
• Technical logs are kept for a limited period for security purposes.

6. Who can access your data

We do not sell or transfer your data for commercial purposes. Certain providers access it as data processors, under contract:

• The hosting provider where this site runs.
• The email provider through which the form message is delivered.

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability at any time, and withdraw your consent.

• To exercise them, write to contacto@settlematch.com.
• If you believe the processing does not comply with the regulations, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Changes to this policy

We may update this Privacy Policy to reflect legal or service changes. The version in force is the one published on this page, with its date of last revision at the top.

9. Cookies and web analytics

We do not use advertising, marketing or third-party cookies, and we do not track you across sites.

To measure site usage we use a self-hosted, first-party web analytics tool (Umami) that records visits in an aggregated and anonymous way. It uses no cookies, does not build profiles or identify individual users, and this data is not shared with third parties.

Only strictly necessary technical cookies required for the site to function may be used, exempt from consent under applicable law.