Hosted in Madrid, end-to-end encryption. Never shared with third parties.
When you apply for a loan, we collect only the information strictly necessary to review your application: identity, contact details, professional and financial situation, uploaded supporting documents. For the newsletter, only your email and language. No other data is collected without your explicit consent.
To review your application, assess your creditworthiness, perform the loan contract where applicable, and comply with our legal obligations (anti-money laundering, FICP register). No data is used for third-party marketing or resold.
Exclusively within European territory. Primary servers in Madrid, encrypted backups in Frankfurt. No copy, no processing outside the European Union, including for the third-party services we use (mailing, accounting, eIDAS electronic signature).
Term of the loan contract plus 10 years (legal requirement). Unfulfilled applications: 3 years from submission. Newsletter: until you unsubscribe. Complete deletion on request for all data not subject to legal retention.
At any time you can access your data, rectify it, request its erasure, object to its processing, or request portability to another provider. Write to privacy@bonsaifinanz.com — we respond within 30 days.
Our data protection officer can be reached at dpo@bonsaifinanz.com. In the event of a dispute, you may contact the Spanish Data Protection Agency (AEPD).
