As the owners of the website www.banana.tech (hereinafter, the “Website”), and of the Banana.tech platform and its subdomains (hereinafter and jointly, the “Platform”), and as data controllers of the personal data of the users of both (hereinafter, the “User” or “Users”), including those who purchase our products and/or services (hereinafter, the “Clients”), we inform our Users that we process their personal data with the utmost confidentiality and incorporate them into our database solely for the purposes described in this Privacy Policy, in strict compliance with the requirements of the applicable personal data protection regulations.

Accordingly, we provide our Users with all relevant information regarding the processing of personal data carried out through the Platform and the various forms available on the Website, as well as data collected through other means of contact and support that we offer to Users, such as telephone and email.

Specifically, we inform our Users who the data controller is, the purposes for which we collect and process personal data, the lawful basis for such processing, how long the data is retained, the recipients of the data, and the rights available to Users regarding data protection.

Data Controller:

FISHH SOLUTIONS, SL, with tax ID (CIF) B67862664 and registered office at Avenida Diagonal, nº622, 4º 1ª A, 08021 Barcelona, and contact email hello@banana.tech (hereinafter, “Banana.tech”).

Purposes of processing, legal bases, and data retention periods:

Website Visitors:

The Website uses its own and third-party cookies that process connection and/or device data, as well as track browsing behavior to improve the services provided. Therefore, when visiting the Website, the browser automatically sends collected visitor data to our servers or to those of third parties. For this reason, upon accessing the Website, we inform Users of such use and request their consent.

To learn more about how cookies are used on our Website, please consult our Cookie Policy.

Contact Form:

We collect and process the information provided for the following purposes:

• Register the User and manage their access to our demo platform;

• Respond to their inquiries and follow up on their request;

• If accepted, send them information about Banana.tech's products, services, and updates, including via electronic means.

The legal bases for processing the data for these purposes are:

• The User’s consent, given when requesting a demo of our services.

We will retain the data for:

• The duration of the demo period of our services.

Additionally, we inform the User that, upon completion of the demo period, and in the event of contracting our services, we will process their data as a Client of Banana.tech.

Submitting a CV via email:

If we receive a User’s resume, we will process the personal data it contains for the following purpose:

• To have the resume on file for job applications and, if applicable, manage the selection process for job openings.

The legal basis for this processing is:

• The User’s consent when submitting their personal information and resume to participate in our hiring processes.

We will retain this data:

• For the duration of the open recruitment process.

• For 12 months after receipt of the CV to consider it for future recruitment processes.

Data Recipients:

User data is confidential and is generally not shared with third parties, unless there is a legal obligation to do so, such as communication with Public Administrations, Courts, or Tribunals. In exceptional cases where data may be shared, Users will be properly informed in advance and their consent will be obtained.

We also inform Users that Banana.tech works with service providers who are essential for delivering our services. These providers, acting as data processors on behalf of Banana.tech, access and process the necessary personal data in accordance with our instructions and under a data processing agreement. These providers include electronic communication services, online office software, cloud computing, hosting, SaaS services such as CRM/ERP systems, legal, accounting, auditing services, and consultants. They will not use the data for their own purposes and will maintain strict confidentiality.

Some of these data processors have servers located in the United States or countries within the European Economic Area. Therefore, international data transfers to third countries may occur. These transfers are carried out to countries deemed by the European Commission to provide adequate levels of data protection and are supported by Commission decisions and/or Standard Contractual Clauses in compliance with current EU legislation and regulatory guidance.

User Rights:

If Users have granted consent to the processing of their personal data, they may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on prior consent and does not invalidate processing justified by other legal bases.

Users also have the right to:

• Request access to their personal data to know and receive information about the data being processed.

• Request rectification to correct or update inaccurate, incomplete, or outdated data.

• Request erasure of data when it is no longer necessary for the purposes for which it was collected.

• Request data portability to another data controller.

• Request restriction of processing, under applicable circumstances, whereby only necessary data will be retained for the exercise or defense of claims.

• Object to the processing of their data, except for legitimate grounds or for the exercise or defense of possible claims.

To exercise these rights, Users must send a formal request to Banana.tech by post to Avenida Diagonal, nº622, 4º 1ª A, 08021 Barcelona, or by email to hello@banana.tech, indicating the subject line “Personal Data Rights Request” and specifying the right they wish to exercise.

In case of disagreement regarding the processing of their personal data by Banana.tech and/or if the User believes that their rights have not been respected or have been violated, they may file a complaint with the Spanish Data Protection Agency (AEPD), located at Jorge Juan Street, 6, 28001 Madrid (www.aepd.es).

Additional Information:

Collection of personal data, obligation to provide it, and consequences of not doing so:

The personal data requested through the Platform and Website are necessary to handle Users’ requests and/or provide the services offered by Banana.tech. Failure to provide the required personal data and/or to accept this Privacy Policy by checking the corresponding box in our forms will make it impossible to fulfill the stated purposes, and therefore, Banana.tech will be unable to properly serve the User and/or provide the requested service.

Minors:

Providing personal data through the Website requires a minimum age of 14 years and, if applicable, sufficient legal capacity to contract the products and/or services offered on the Website.

Minors under 14 years of age must not provide personal data without the proper consent of their parents or legal guardians. Banana.tech is not responsible for non-compliance with this requirement by Users.

Personal data of third parties:

If Users provide personal data of third parties through the Website, they agree to inform said third parties in advance and obtain their consent for such communication, and to inform them of the content of this Privacy Policy. Banana.tech is not responsible for any failure to comply with this provision by Users.

User responsibilities and data updates:

Users commit to providing accurate and correct data and to inform Banana.tech of any changes to keep our database up to date. Banana.tech is not responsible for the accuracy of the data provided by Users.

Privacy Policy updates and changes:

Banana.tech reserves the right to modify and update this policy to adapt it to changes that may occur in the Platform and/or Website, as well as legal or jurisprudential developments that may affect its content. Users are responsible for reviewing this Privacy Policy each time they provide their personal data.

Any substantial changes affecting the processing of personal data or the information provided herein will be duly communicated to Users.