Legal
Privacy Policy
Information on how LicitadIA processes personal data of its users, the legal bases for processing, and user rights under the GDPR.
Last updated: January 2026
Data controller
Personal data that you provide through the licitadia.com website will be processed by CEDESA DIGITAL, S.L., as the data controller.
- Corporate name: CEDESA DIGITAL, S.L.
- VAT Number: B06684369
- Registered office: Parque Científico y Tecnológico de Extremadura (PCTEX), Badajoz
- Phone: +34 924 09 06 08
- Email: contacto@cedesa.es
- Website: licitadia.com
Purposes of processing
LicitadIA processes the personal data you provide us with the following purposes:
- Respond to inquiries and information requests received via email or contact form.
- Manage business relationships with clients and suppliers, as well as follow-up on requested demos and pilot tests.
- Comply with applicable legal and contractual obligations.
- Send commercial communications about our products and services, exclusively when the user has given express consent.
Legal basis for processing
The processing of your personal data is based on the following legal grounds provided for in the General Data Protection Regulation (GDPR):
- Inquiries and requests: the data subject's consent (art. 6.1.a GDPR).
- Contractual relationships: the execution of a contract or pre-contractual measures (art. 6.1.b GDPR).
- Legal obligations: compliance with a legal obligation applicable to the controller (art. 6.1.c GDPR).
Data recipients
LicitadIA will not disclose your personal data to third parties unless there is a legal obligation or it is strictly necessary for the provision of the contracted service. In the latter case, the corresponding data processing agreement will be signed in accordance with Article 28 of the GDPR, ensuring the processor provides sufficient security guarantees.
Retention period
Personal data will be kept for as long as necessary to respond to the inquiry made or to maintain the contractual relationship in force. Once this relationship has ended, the data will be kept during the applicable limitation periods: generally, 5 years for civil obligations and 10 years for tax and accounting obligations.
Data subject rights
You may exercise at any time the rights of access, rectification, erasure, limitation of processing, data portability, and opposition by sending an email to contacto@cedesa.es with the subject "GDPR rights", attaching a copy of your identity document.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that the processing of your data does not comply with current regulations.
Security measures
LicitadIA has adopted the necessary technical and organizational measures to guarantee the security and integrity of the personal data processed and prevent its alteration, loss, unauthorized processing or access, taking into account the state of technology, the nature of the data, and the risks to which it is exposed.