Privacy Policy
Last updated: 01/09/2026
1. Data Controller
Silk Cashback, SL
- CIF: B56738511
- Address: Calle Sagasta 1, 3º E, 28004 Madrid, Spain
- Madrid Commercial Registry, Volume 46105, Folio 11, Sheet M-810073, Entry 1
- Data protection contact: support@silkcashback.com
2. To whom does this policy apply?
a) Visitors to the Silk website. b) Contact persons from client businesses and their representatives. c) Contact persons from companies to which Silk sends marketing communications. d) Candidates who submit their resumes.
3. Data we process and where it comes from
| Category | Data | Origin |
|---|
| Professional identification and contact information | Name and surname, position, company, professional email and telephone number, public professional profile | The interested party, their company, or public sources and B2B data providers |
| Contractual and management | Business registration details, representation, communications and incidents | The interested party |
| Billing | Company tax information and payment method | The data subject. Card details are processed directly by the payment provider; Silk does not store them. |
| Navigation | IP address, device identifiers, pages visited | Cookies and similar technologies, in accordance with the Cookie Policy |
| Candidates | Curriculum vitae and data provided in the process | The interested party |
Silk
does not process special categories of data (art. 9 GDPR) in none of these cases.
4. Why do we process the data and on what legal basis?
| Purpose | Legal basis | Conservation |
|---|
| Manage the registration of the business and provide the service | Performance of the contract, or legitimate interest when the interested party acts as a contact of the contracting company (art. 6.1.by 6.1.f) | Contract validity |
| Billing and tax and accounting compliance | Legal obligation (art. 6.1.c) | 6 years (Commercial Code) and the tax statute of limitations periods |
| Answering inquiries and providing support | Legitimate interest (art. 6.1.f) | 1 year since the last communication |
| Business development | Legitimate interest (art. 6.1.f), with the guarantees of art. 21.2 LSSI for clients, or consent when required | Until the interested party objects, and at most[2]years without interaction |
| Sending communications about the service to active customers | Contract performance or legitimate interest | Contract validity |
| Website analytics and improvement | Consent, in accordance with the Cookie Policy | As stated in that policy. |
| Staff selection | Candidate consent (art. 6.1.a) | 1 year, unless previously revoked |
| Fraud prevention and platform security | Legitimate interest (art. 6.1.f) | 3 years since the incident was recorded |
| Exercise and defense of claims | Legitimate interest (art. 6.1.f) | Legal limitation periods |
Once the applicable period has ended, the data will be blocked and kept only at the disposal of the competent authorities for the limitation periods, after which it will be deleted.
5. Commercial communications
When Silk obtains professional contact data from public sources or B2B data providers, it will inform the data subject in the first communication of the origin of their data and their rights, in accordance with Art. 14 GDPR.
All marketing communications will include a simple and free way to opt out. Simply reply to the email you received or write to
support@silkcashback.com to stop receiving them.
6. Recipients and processors
Silk
does not sell or transfer personal data to third parties for commercial purposes.
Data may be communicated to Public Administrations, Courts and Tribunals when there is a legal obligation.
7. International transfers
Some of the listed suppliers may be located outside the European Economic Area. In such cases, the transfer is covered by an adequacy decision of the European Commission or, failing that, by Standard Contractual Clauses with any necessary supplementary measures.
You can request a copy of the applied guarantees by writing to support@silkcashback.com.
8. Rights of interested parties
You can exercise your rights at any time
access, rectification, erasure, objection, limitation of processing and portabilityas well as withdrawing the consent given, without affecting the lawfulness of the previous processing.
- As: writing to support@silkcashback.com, indicating the right being exercised and attaching a copy of a document that proves identity.
- Response time: one month, extendable for two additional months in complex cases, with prior notification.
- Claim: If you believe that your rights have not been properly addressed, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es,C/ Jorge Juan 6, 28001 Madrid).
9. Security
Silk applies technical and organizational measures appropriate to the risk, including encryption in transit and at rest, role-based access control, activity logging, staff training, confidentiality agreements, and periodic supplier reviews.
In the event of a security breach that poses a risk to the rights and freedoms of the data subjects, Silk will notify the Spanish Data Protection Agency (AEPD) within 72 hours and, when the risk is high, the data subjects themselves.
10. Customer data of financial institutions
Retail offers are distributed through financial institutions and loyalty programs. This involves the processing of customer transaction data by these institutions.
It is governed by the information and conditions provided by each entity to its own clients.not because of this policy.
In this context, Silk exclusively processes pseudonymized transaction data, does not access bank accounts through aggregation services (PSD2 / open banking) and does not communicate personal data of these customers to merchants, who receive information in aggregated format.
11. Minors
Silk’s services are exclusively for professionals and businesses. Silk does not knowingly collect data from minors through its channels.
12. Cookies
The use of cookies and similar technologies on the web is regulated in the
Cookie Policy, accessible from the site itself.
13. Changes to this policy
Silk may update this Privacy Policy. Substantial changes will be communicated by email to affected parties with reasonable notice. The current version will always be the one published on the website, with its date indicated.
