Privacy Policy

Welcome to TRATO. Your privacy is of utmost importance to us. This Privacy Notice (hereinafter, the "Notice") describes how we collect, use, store, share and protect your personal information when you use our websites (including trato.io and its subdomains), technology platform, software as a service (SaaS), mobile applications and any other product or service offered by TRATO entities (hereinafter, jointly or as applicable, "TRATO", "we", "our" or "us").

This Notice applies to all visitors, users and customers of our Services (hereinafter, "You" or the "User"). By accessing or using our Services, you acknowledge that you have read and understood this Notice.

The TRATO entity responsible for processing your personal data will depend on your geographic location and/or the entity with which you have contracted the Services:

For Users in Mexico (and as general reference for Users in the "Rest of the World", except when mandatory local provisions indicate otherwise):

For Users in Spain and the European Economic Area (EEA):

We collect personal data about you in several ways:

Data you provide directly:

Data we automatically collect when you use our Services:

Data we obtain from third parties:

You guarantee that all data provided is truthful, accurate and you commit to keeping it updated.

We process your personal data for the following purposes:

Service Provision and Management:

Communication and Support:

Service Improvement and Personalization:

Marketing and Promotion (with your consent when necessary):

Legal Compliance and Security:

The legal basis for processing your personal data varies according to the purpose and your jurisdiction:

For Users in Spain and the EEA (GDPR):

For Users in Mexico (LFPDPPP):

For Users in the Rest of the World:

We will rely on similar principles of consent, contractual necessity, legitimate interest and legal obligation, in accordance with privacy laws applicable in your jurisdiction. By default, and in the absence of specific local regulations that prevail, the principles of Mexico's LFPDPPP will be taken as reference.

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, as well as to comply with our legal obligations, resolve disputes and enforce our agreements.

The criteria we use to determine retention periods include:

Once your personal data is no longer necessary for these purposes, it will be securely deleted or anonymized, in accordance with our internal policies and applicable legislation. In some cases, data may be kept blocked, available exclusively to judges, courts or competent public administrations, to address possible liabilities arising from processing, during their limitation period.

TRATO will not transfer or sell your personal data to third parties without your prior consent, except in the following cases or when there is a legal obligation:

Service Providers: We share information with third parties who provide us services and act as data processors (for example, web hosting providers, payment platforms, analytics tools, email marketing services, technical support). These providers only have access to personal data necessary to perform their functions and are contractually obligated to protect it and use it only for the purposes for which they were hired.

TRATO Group Entities: We may share information with other companies within the TRATO group for internal administrative purposes, coordinated service provision or marketing purposes (always with your consent when necessary).

Event or Service Collaborators: If you register or participate in an event or service co-organized with a third party, we may share your information with that third party for event or service management, with prior information and, if necessary, your consent.

Legal Obligations and Competent Authorities: We may disclose your personal data if required by law, a court order or a request from a competent governmental or regulatory authority.

Rights Protection: We may share information if we believe in good faith that it is necessary to protect our rights, property or security, or those of our users or third parties, as well as to investigate fraud or respond to an emergency.

Corporate Transactions: In case of merger, acquisition, asset sale, reorganization or bankruptcy proceeding, your personal data could be transferred as part of such transaction. We will notify you of any changes and options you may have regarding your data.

International Data Transfers:

Your personal data may be transferred and processed in countries other than your country of residence, where data protection laws may be different. TRATO will take all reasonably necessary measures to ensure your data is processed securely and in accordance with this Notice and applicable law.

For EEA users, if we transfer personal data outside the EEA to countries that do not offer an adequate level of data protection according to the European Commission, we will implement appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, or rely on other legal bases for transfer, such as your explicit consent or necessity for contract performance.

You have certain rights regarding your personal data, which may vary according to your jurisdiction:

For Users in Spain and the EEA (GDPR Rights):

For Users in Mexico (ARCO Rights - LFPDPPP):

For Users in the Rest of the World:

We will strive to recognize and facilitate the exercise of similar rights to those mentioned, in accordance with privacy principles and applicable local laws.

Exercise of Your Rights: To exercise any of these rights, you can send a written request, duly proving your identity (for example, through a copy of your ID, INE, Passport or equivalent document), to the email or postal address of the Data Controller corresponding to your jurisdiction.

We will respond to your request within the timeframes and conditions established by applicable legislation.

Right to File a Complaint:

If you consider your data protection rights have been violated, you have the right to file a complaint with the competent supervisory authority. We recommend that, before filing a complaint with the supervisory authority, you contact us to try to resolve any issues amicably.

TRATO has adopted and maintains appropriate technical, administrative and physical security measures to protect your personal data against loss, misuse, unauthorized access, disclosure, alteration and destruction, taking into account the risks involved in processing and the nature of personal data, in accordance with current legislation. However, no electronic transmission or storage system is completely secure, so we cannot guarantee absolute security of your information.

We use cookies and similar technologies to improve your experience on our Website and Services, analyze traffic and personalize content. For detailed information about the cookies we use, their purposes and how you can manage them, see our Cookie Policy.

Our Services are not directed at minors (generally, those under 18 or the age of legal majority in your jurisdiction). We do not knowingly collect personal data from minors. If you are a parent or guardian and become aware that a minor has provided us with personal data without your consent, please contact us immediately so we can take appropriate measures.

We may update this Privacy Notice at any time to reflect changes in our practices, technologies, legal requirements or other factors. When we make changes, we will update the "Last Updated" date at the top of this Notice. If changes are significant, we will notify you more prominently (for example, through a notice on our Website or by sending you an email communication). We recommend that you review this Notice periodically to stay informed about how we protect your information.

If you have questions, comments or concerns about this Privacy Notice or our data processing practices, or if you wish to exercise any of your rights, contact the Data Controller corresponding to your jurisdiction:

For Users in Mexico (and Rest of the World, unless otherwise indicated):

For Users in Spain and the EEA: