Cookie Policy

1. Introduction and definition of cookies

Bektor uses cookies and similar technologies on the website https://bektor.ai to improve the browsing experience, analyse site usage, and display personalised advertising.

What are cookies?

Cookies are small text files stored on your device (computer, tablet, smartphone) when you visit a website. They allow the website to remember information about your visit, such as your preferences and settings, making your next visit easier and the site more useful.

Similar technologies

In addition to cookies, we use other tracking technologies such as:

• Tracking pixels: Small invisible images embedded in web pages or emails that allow user interaction to be tracked.

• JavaScript scripts: Code executed in your browser to collect information about your browsing.

• Local storage: HTML5 technology that allows data to be stored persistently in your browser.

For the purposes of this policy, when we refer to "cookies" we also include these similar technologies.

2. Data controller identification

The data controller for personal data collected through cookies on this website is:

• Controller: BEKTOR AI WORKFORCE, S.L.

• CIF: B26959254

• Address: María de Molina 39, Floor 4, 28006, Madrid, Spain

• Trade name: Bektor

• Contact email: dpo@bektor.ai

• Website: https://bektor.ai

3. Types of cookies used

3.1. By ownership

• First-party cookies: Installed and managed directly by Bektor from the domain bektor.ai. Used primarily for technical and authentication functions.

• Third-party cookies: Installed by external services such as Google Analytics, Meta/Facebook, and LinkedIn. These third parties may access the information collected according to their own privacy policies.

3.2. By purpose

• Technical or necessary cookies: Essential for the correct functioning of the website. They enable navigation, use of different options, access to restricted areas, and remembering cart items. They do not require consent but are subject to disclosure.

• Analytical cookies: Allow quantification of visitors and statistical analysis of how users use our website. This helps us improve site structure, content, and usability. They require prior consent.

• Advertising and marketing cookies: Used to display relevant advertising based on your interests and browsing behaviour. They enable the management of advertising spaces and the creation of user profiles. They require prior consent.

3.3. By duration

• Session cookies: Deleted automatically when you close your browser. They are temporary and limited to the browsing session.

• Persistent cookies: Remain stored on your device for a specified period (indicated for each cookie) even after closing the browser, until they expire or you delete them manually.

4. Detailed table of cookies used

The following details all cookies that may be installed on your device when visiting our website.

4.1. Technical and necessary cookies (no consent required)

4.2. Analytical cookies (consent required)

Important note: Google Analytics 4 cookies require prior consent because they do not meet the exemption conditions established by the AEPD, as data is shared with Google and may be used for purposes beyond simple audience measurement.

4.3. Advertising and marketing cookies (consent required)

4.4. Third-party cookies for specific functionalities

5. Information about third parties and their policies

5.1. Google Analytics 4

• Controller: Google LLC (Google Ireland Limited for EEA users)

• Purpose: Statistical analysis of web traffic, user behaviour, traffic sources, and site performance.

• International transfers: Data may be transferred to the United States and other countries where Google has infrastructure, under the EU-U.S. Data Privacy Framework.

• Security measures: Google applies technical and organisational measures to protect data, including encryption and partial anonymisation of IP addresses.

• Privacy policy: https://policies.google.com/privacy

• Google's data use: https://policies.google.com/technologies/partner-sites

• Opt-out: https://tools.google.com/dlpage/gaoptout

Consent Mode v2 implementation: We have implemented Google Consent Mode v2, which adjusts the behaviour of Google tags according to the consent you have granted, using conversion modelling when full consent is not granted.

5.2. Meta Pixel (Facebook)

• Controller: Meta Platforms Ireland Limited

• Purpose: Measuring the effectiveness of advertising campaigns, creating custom audiences, remarketing, and optimising ads on Facebook and Instagram.

• International transfers: Data may be transferred to the United States under EU standard contractual clauses and the EU-U.S. Data Privacy Framework.

• Profiling: Meta creates advertising profiles based on your browsing behaviour and data collected through the pixel to show you personalised ads.

• Privacy policy: https://www.facebook.com/privacy/policy

• Cookie policy: https://www.facebook.com/policies/cookies

• Ad settings: https://www.facebook.com/ads/preferences

5.3. Tally Forms

• Controller: Tally UG

• Purpose: Management of contact forms and collection of information voluntarily provided by users.

• Privacy policy: https://tally.so/help/privacy-policy

6. International data transfers

Some of the third parties mentioned above transfer personal data outside the European Economic Area (EEA).

6.1. Transfers to the United States

Google LLC and Meta Platforms transfer data to the United States. These transfers are carried out under the following safeguards:

• EU-U.S. Data Privacy Framework: Both Google and Meta are certified under this data protection framework between the EU and the US, which provides an adequate level of protection recognised by the European Commission since July 2023.

• Standard Contractual Clauses (SCCs): Additionally, these third parties apply the SCCs approved by the European Commission as a complementary safeguard.

You can consult the list of companies certified under the Data Privacy Framework at: https://www.dataprivacyframework.gov/s/

6.2. Additional security measures

All third parties with whom we share data apply:

• Data encryption in transit and at rest

• Strict access controls

• Regular security audits

• Compliance with international security standards (ISO 27001)

7. Consent management

7.1. How to grant, configure, or withdraw your consent

Your consent to the use of cookies is requested through an information banner that appears when you first access our website. This banner includes three clearly differentiated options:

• Accept all: You consent to the use of all cookies (technical, analytical, and advertising).

• Reject all: Only technical cookies necessary for the functioning of the site will be installed.

• Configure: You can choose which categories of cookies you wish to accept or reject.

7.2. Permanent configuration panel

At any time you can access the cookie configuration panel by clicking on the "Cookie settings" icon or link located in the footer of our website. From there you can:

• View all active cookies in your browser

• Modify your consent preferences

• Accept or reject specific categories

• Revoke previously granted consent

7.3. Withdrawal of consent

Withdrawing your consent is as easy as granting it. Simply access the configuration panel and modify your preferences. The withdrawal will take immediate effect and non-technical cookies will no longer be installed on future visits.

7.4. Renewal of consent

In accordance with best practices, we will ask you to renew your consent every 24 months to ensure you still agree with the use of cookies on our site.

7.5. Consequences of rejecting cookies

If you decide to reject analytical or advertising cookies:

• The website will continue to function correctly in its essential functions

• We will not be able to offer you personalised content and advertising

• We will not be able to measure site usage to improve it

• Your user experience may be less optimised

• Technical cookies will be installed regardless, as they are necessary for the basic functioning of the site.

8. Managing cookies in your browser

In addition to the configuration panel on our website, you can manage cookies directly from your browser settings.

8.1. Google Chrome

1. Click the menu (three vertical dots) > Settings

2. Select "Privacy and security"

3. Click "Cookies and other site data"

4. Configure your preferences or delete specific cookies

More information: https://support.google.com/chrome/answer/95647

8.2. Mozilla Firefox

1. Click the menu (three horizontal lines) > Settings

2. Select "Privacy & Security"

3. Under "Cookies and Site Data" configure your preferences

4. You can block or delete specific cookies

More information: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop

8.3. Safari (macOS)

1. Go to Preferences > Privacy

2. Configure cookie blocking

3. You can manage stored cookies by clicking "Manage Website Data"

More information: https://support.apple.com/en-gb/guide/safari/sfri11471/mac

8.4. Safari (iOS)

1. Go to Settings > Safari

2. Enable "Prevent Cross-Site Tracking"

3. You can block all cookies or only third-party ones

More information: https://support.apple.com/en-gb/HT201265

8.5. Microsoft Edge

1. Click the menu (three dots) > Settings

2. Select "Privacy, search, and services"

3. Under "Cookies and site permissions" configure your preferences

More information: https://support.microsoft.com/en-gb/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09

8.6. Opera

1. Go to Settings > Advanced > Privacy and security

2. Click "Cookies and other site data"

3. Configure your preferences

More information: https://help.opera.com/en/latest/web-preferences/#cookies

8.7. Important warning

Please note that if you block all cookies from your browser, some functionalities of our website may not work correctly. Technical cookies are necessary for the basic functioning of bektor.ai, including access to the client area.

9. User rights

9.1. Right to withdraw consent

You have the right to withdraw your consent at any time with the same ease with which you granted it. You can do so from:

• The cookie configuration panel permanently accessible in the footer

• Your browser settings following the instructions in the previous section

The withdrawal of consent will not affect the lawfulness of processing carried out prior to its withdrawal.

9.2. GDPR rights (ARSULIPO)

In relation to your personal data processed through cookies, you have the right to:

• Access: Obtain information about what personal data we are processing.

• Rectification: Correct inaccurate or incomplete data.

• Erasure ("right to be forgotten"): Request the deletion of your personal data when it is no longer necessary.

• Restriction of processing: Request that processing of your data be limited in certain circumstances.

• Portability: Receive your data in a structured format and transmit it to another controller.

• Objection: Object to the processing of your personal data, especially for direct marketing purposes.

9.3. How to exercise your rights

You can exercise any of these rights by contacting:

• Email: dpo@bektor.ai

• Postal address: María de Molina 39, Floor 4, 28006, Madrid, Spain

Your request must include:

• Your full name and surnames

• Copy of your ID/NIE or equivalent document

• Clear description of the right you wish to exercise

• Address to receive the response

We will respond to your request within a maximum of one month from receipt, which may be extended by two further months in cases of complex requests.

9.4. Right to lodge a complaint with the supervisory authority

If you consider that the processing of your personal data violates data protection regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD):

Agencia Española de Protección de Datos
Calle Jorge Juan, 6
28001 Madrid
Phone: 901 100 099 / 91 266 35 17
Website: https://www.aepd.es
Electronic office: https://sedeagpd.gob.es

10. Updates and contact

10.1. Updates to this policy

This Cookie Policy may be modified when necessary to adapt to:

• Changes in applicable legislation

• Recommendations from data protection authorities

• New functionalities or services on our website

• Changes in the cookies used or third parties we work with

Whenever we make substantial changes to this policy, we will inform you through:

• A prominent notice on our website

• A notification in the cookie banner

• Updating the "Last updated" date at the beginning of this document

We recommend reviewing this policy periodically to stay informed about how we protect your privacy.

10.2. Version history

• Version 1.0 – May 25, 2026: First version of the Cookie Policy, compliant with GDPR, LSSI, LOPDGDD, and AEPD Cookie Guide (May 2024).

10.3. Contact

For any questions, queries, or requests related to this Cookie Policy or the processing of your personal data, you can contact us at:

• Controller: BEKTOR AI WORKFORCE, S.L.

• Address: María de Molina 39, Floor 4, 28006, Madrid, Spain

• Trade name: Bektor

• Email: dpo@bektor.ai

• Website: https://bektor.ai

We are committed to protecting your privacy and transparency in the use of cookies. If you have any questions or concerns, please do not hesitate to contact us.

11. Additional information

11.1. Relationship with the Privacy Policy

This Cookie Policy complements our Privacy Policy, where you will find more detailed information about:

• How we process your personal data in general

• What data do we collect in addition to cookies

• Legal bases for processing

• Retention periods

• Security measures implemented

For more information, consult our Privacy Policy.

11.2. Third-party liability

Bektor is not responsible for the content and accuracy of the privacy policies of third parties included in this Cookie Policy. We recommend reviewing each third party's policies to understand how they process your personal data.

11.3. Commitment to privacy

Bektor we are committed to:

• Strict compliance with data protection regulations

• Transparency in the use of cookies and tracking technologies

• Data minimisation: we only collect what is necessary

• Your right to control your personal data

We continuously work to improve our privacy and data protection practices.

Document prepared in accordance with:

• Regulation (EU) 2016/679 (GDPR)

• Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights (LOPDGDD)

• Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE), art. 22.2

• Directive 2002/58/EC on privacy and electronic communications (ePrivacy)

• AEPD Cookie Guide (May 2024)

• Guidelines 03/2022 of the EDPB on deceptive patterns in social network interfaces