Privacy policy

Identification of the responsible party:
JUNIOR ENTERPRISE ASSOCIATION KORA (hereinafter, KORA) with NIF G24760407 and registered office at Calle Uribitarte, 6, Abando, 48001, Bilbao
Contact: info@companykora.com
 
Who is responsible for processing your data?
This privacy policy applies to all personal data that the interested party provides to KORA, as well as to any individual interested in the activities and services that KORA offers through its websites and through any other means of communication. The objective of KORA's Privacy Policy is to provide transparency regarding how we process your personal data in compliance with current data protection regulations.
The interested party may contact KORA using the information detailed in the identification of the controller.
 
For what purpose do we process your personal data and under what legal basis?
KORA has a Record of Processing Activities where each of the following processing operations carried out as a controller is detailed:
GDPR PROCESSING
GDPR Purpose
Legitimate basis

Associated Persons
Partner Management
Art. 6.1 b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
Contact Persons
 Contact database management (people linked to customers, suppliers, institutions, public administrations, and companies in general)
Art. 6.1 f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party
Consumers and Customer Services
Event attendee registration and management
Art. 6.1 a) the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
Art. 6.1 f) the processing is necessary for the purposes of the legitimate interests pursued by the controller in relation to advertising and commercial promotion
Web users
Management of website information and contact requesters
Art. 6.1 f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party in relation to the management of the request and commercial promotion
ADMINISTRATION
Administrative and accounting management of clients
Art. 6.1 b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
 
In cases duly justified, where you require more detail regarding the Record of Processing Activities, you may contact KORA through any of the identified channels.
How long do we keep your personal data for?
KORA will retain data of affected individuals for the duration of their relationship with the organisation and for 5 years thereafter. The data will be preserved in accordance with the provisions of the archiving and documentation regulations established by each applicable legislation. In the event of a right being claimed, your data will be deleted according to the specific right requested.
Who has access to your personal data?
KORA may assign or communicate personal data to fulfil its obligations to Public Administrations in cases where this is required in accordance with current legislation at any given time.
What are the rights of those affected?
We inform you that you may exercise the following rights:
Right of access to your personal data to know which ones are being processed;
Right to rectification of any inaccurate personal data;
The right to have your personal data erased, where possible;
The right to request the restriction of the processing of your personal data when the accuracy, legality or necessity of the data processing is in doubt, in which case we may retain the data for the establishment, exercise or defence of legal claims.
Right to object to the processing of your personal data, where the legal basis authorising us to process it is legitimate interest. KORA will cease processing your data unless it has an overriding legitimate interest or for the establishment, exercise or defence of legal claims.
Right to data portability, when the legal basis that enables us to process them is your consent.
These rights may be exercised free of charge by the data subject, and where applicable, by their representative, by submitting a written request to info@companykora.com
In addition to the aforementioned rights, the data subject shall have the right to withdraw their consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. KORA may continue to process the data subject's data to the extent permitted by applicable law.
KORA reminds the data subject that they have the right to lodge a complaint with the competent supervisory authority in the country where they are located.
Reduces commercial communications delivery
The interested party has the right to withdraw consent given for the sending of commercial communications at any time by simply notifying KORA that they no longer wish to receive commercial communications. To do this, the interested party may click on the link included in each communication to cancel the sending of electronic commercial communications or withdraw their consent by sending a message to info@companykora.com.
What security measures do we have in place?
KORA undertakes to comply with its obligation of secrecy regarding personal data and its duty to safeguard it, and will adopt the necessary measures to prevent its alteration, loss, unauthorised processing or access, in accordance with applicable regulations.
KORA has implemented the necessary technical and organisational security measures to ensure the security of your personal data and to prevent its alteration, loss, and unauthorised processing and/or access, taking into account the state of the technology, the nature of the data stored, and the risks to which they are exposed, whether from human action or from the physical or natural environment, in accordance with applicable regulations.
Links
The KORA website may include hyperlinks to other sites that are not operated or controlled by KORA. Therefore, KORA does not guarantee, nor is it responsible for the legality, reliability, usefulness, truthfulness, and up-to-dateness of the content of such websites or their privacy practices. Please, before providing your personal information to these websites external to KORA, be aware that their data protection compliance may differ from ours.
Privacy Policy Modification
KORA may modify its Privacy Policy in accordance with the legislation applicable at any given time. In any event, any modification to the Privacy Policy will be duly notified to the Affected Party so that they are informed of the changes made to the processing of their personal data and, where the applicable regulations so require, the Affected Party may give their consent.
 
Privacy Policy last updated KORA  12 February 2026.