The protection of your privacy and the security of your personal data are of utmost importance to us. Simiar is a trading brand of Bakata Solutions, S.L. (hereinafter referred to as "Bakata", "we", "us", or "our").

The Board of Directors and Governing Bodies of Bakata assume the highest responsibility and commitment to establishing, implementing, and maintaining this Privacy Policy. We ensure continuous improvement across all operations to achieve excellence in compliance with the UK Data Protection Act 2018 (incorporating the EU General Data Protection Regulation (GDPR)), as well as European and Spanish data protection regulations.

Our Privacy Policy is rooted in the principle of proactive accountability, meaning we are fully responsible for complying with the legal frameworks governing this Policy and are capable of demonstrating such compliance before the competent supervisory authorities.

1. Information We Collect and Our Commitment

Prior to you submitting any personal information to our website, we endeavour to ensure that you are fully informed as to:

• The exact purpose for collecting the information.
• What the information will be used for and our lawful basis.
• The identity of anyone else to whom the information may be given and what they will use it for.
• How you can request copies of, rectify, or delete any personal information we hold about you.

2. Core Principles of Our Data Processing

To guide our staff and guarantee the security of your data, Bakata governs all its processing activities under the following core principles:

• Data Protection by Design: We apply appropriate technical and organisational measures, such as pseudonymisation, both when determining the means of processing and at the time of the processing itself, to integrate necessary safeguards and minimise risks.
• Data Protection by Default: We implement strict measures to guarantee that, by default, only the personal data strictly necessary for each specific purpose of the processing is collected and used.
• Data Lifecycle Protection: Measures ensuring personal data protection are fully applicable throughout the entire lifecycle of the information.
• Lawfulness, Fairness, and Transparency: Personal data is processed lawfully, fairly, and in a transparent manner in relation to the data subject.
• Purpose Limitation: Your data is collected for specified, explicit, and legitimate purposes and will not be further processed in a manner incompatible with those purposes.
• Data Minimisation: Personal data shall be adequate, relevant, and limited to what is necessary for the purposes for which it is processed.
• Accuracy: We take all reasonable steps to ensure that inaccurate personal data is erased or rectified without delay.
• Storage Limitation: Personal data is kept in a form which permits identification of data subjects for no longer than is necessary.
• Integrity and Confidentiality: Data is processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction, or damage.
• Information and Training: All personnel with access to personal data are conveniently trained and informed about their data protection obligations to ensure continuous corporate compliance.

3. Data Controller and How to Exercise Your Rights

The Data Controller responsible for your information is Bakata Solutions, S.L. (NIF: B76706811), with registered offices at:

• Address: Calle El Simun, 2, Planta 2. Intech Enclave Barranco Grande. Parque Científico y Tecnológico de Tenerife. 38111. Santa Cruz de Tenerife, Spain.

Under data protection laws, you have the right to access, rectify, restrict, object to the processing of, or request the erasure of your personal data. You can exercise these rights at any time by contacting our privacy team via:

• Email: alfonso.lecuona@bakata.es
• Telephone: +34 922 083 252

Please note: We will ask you to provide proof of your identity and any information we may reasonably need in relation to your request. We will not start looking for your information until we confirm your identity.

Right to Complain to a Regulator

If you consider that we have processed your personal information unfairly or unlawfully, you have the right to lodge a complaint with a national data protection supervisory authority:

• In Spain: The Spanish Data Protection Agency (AEPD) at www.aepd.es.
• In the United Kingdom: The Information Commissioner’s Office (ICO) via their official website.

4. Recipients and Third Parties

We do not engage in international data transfers from our secure cloud infrastructure hosted by Binhex. Therefore, all core personal information managed directly by Bakata Solutions remains strictly within the European Economic Area (EEA).

However, when you browse our website, you may find links to our corporate social media profiles (Facebook, Instagram, LinkedIn, and WhatsApp) as well as embedded multimedia elements (such as YouTube). Please note that clicking these links or consenting to third-party frames takes you to external platforms governed by their own privacy settings and cookie policies. Bakata does not control, access, or manage the data collected by these third-party environments. We encourage you to read their respective privacy notices before interacting with them.

This Privacy Policy is reviewed regularly by the Management of Bakata Solutions, S.L.U., to ensure it remains aligned with all current legislative provisions.

Last updated: June 2026