Privacy policy

Last updated: 30 October 2026

This is a courtesy translation provided for information purposes only. In the event of any discrepancy, the Spanish version prevails.

At El Vínculo Licitaciones, S.L. we take the protection of your personal data seriously. This policy explains what data we process, for what purpose and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

This policy also addresses people who are not our users but appear in the public procurement data we reuse, for example as a sole trader who has been awarded a contract: for them it serves as the information on personal data not obtained from the data subject (Article 14 of the GDPR).

1. Data controller

2. Data we process

Depending on your relationship with us, we may process:

We also process personal data that you have not given us but that come from publicly accessible public procurement sources: in the United Kingdom, the Find a Tender Service; in the European Union, TED, the online version of the Supplement to the Official Journal of the EU, and each country’s national portal; in Spain, PLACSP and the regional platforms; in other countries, their official portals. They are mostly company data, but when the economic operator is a natural person (a sole trader or a self-employed professional) they relate to that person: name or trading name, tax or VAT identification number, the tenders they took part in or won, with amounts and dates, and business contact details where the notice publishes them. We also process any personal data contained in notices and tender documents, such as the name of the official in charge of the procedure.

3. Purpose and legal basis

We process your data for the following purposes:

We process the data from public sources to provide the tender search engine, the pages on tenders, contracting authorities and companies with their award history, email alerts and market analysis. The legal basis is legitimate interest (Article 6(1)(f) of the GDPR), ours and our users’, in understanding the public procurement market, whose data are published by law for transparency purposes. With these data the AI compares award histories to suggest similar tenders and the likely competitors for a tender; we do not take decisions based solely on automated processing that produce legal effects concerning you.

4. Retention period

We will keep your data for as long as the contractual relationship lasts or until you withdraw your consent and, thereafter, blocked for the limitation periods required by law (for example, in tax and commercial matters).

We set no time limit for the data from public sources: we keep them as a record of public procurement, which is the purpose for which we process them, unless you object to the processing or request their erasure (section 6).

5. Recipients and data processors

We do not disclose your data to third parties except where legally required. To provide the service we work with providers that may access data as data processors:

All of them have the corresponding data processing agreements in place in accordance with Article 28 of the GDPR.

The data from public sources can be viewed by platform users and, in part, appear on the public pages of the website, which search engines index (pages on tenders, contracting authorities and companies). They are also processed, as processors, by the infrastructure and artificial intelligence providers we use to deliver the service (for example, for semantic search and AI-generated summaries).

6. Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to contact@el-vinculo.com. You also have the right to lodge a complaint with a supervisory authority, in particular in the country where you live or work or where the alleged infringement took place (Article 77 of the GDPR): in the United Kingdom, where the UK GDPR and the Data Protection Act 2018 also apply, the Information Commissioner’s Office (ICO, ico.org.uk); in Ireland, the Data Protection Commission (www.dataprotection.ie); in Spain, where we are established, the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

These rights also apply if you are not our user and your data come from public sources: in particular, you may object at any time to their processing on grounds relating to your particular situation (Article 21 of the GDPR) by writing to the same address. If we uphold the request, your page is no longer published, on the website or in the app, and your name is removed from the pages indexed by search engines; we keep the data internally so that it is not republished when the sources repeat it.

7. Security

We apply appropriate technical and organisational measures to ensure a level of security appropriate to the risk of the processing: encrypted communications (HTTPS), access control to systems, securely stored passwords and regular backups.

See also our legal notice and our cookie policy.