Legal
Privacy policy
How TenderLoop handles personal data, in plain words.
Data controller
Sami Halawa Ribas, sole trader (autónomo), NIF 02558168Q, C/ Cristo de la Victoria 88, 3º Izq., 28026 Madrid, Spain. Contact: sami@samihalawa.com. The controller is established in Spain and acts under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
What this website processes
This website sets no cookies, has no accounts and runs no analytics or advertising trackers. Our web server keeps standard access logs (IP address, time, requested page, user agent) for security and to run the service. Legal basis: legitimate interest in the security of the site (art. 6.1.f GDPR). Logs are kept for a short period and then deleted.
If you email us, we process your address and message to answer you (art. 6.1.b or 6.1.f GDPR) and keep it as long as needed for that purpose.
What the TenderLoop record processes
TenderLoop stores the record that a bidder and the bidder’s AI agents write: one entry per tender with status, deadlines, next steps, files, money and notes with their authors. The record is stored by TenderLoop. It shows only what was logged, and TenderLoop does not read procurement portals. Entries may contain personal data of buyers, bidders and officials, for example names in notes and files. They are processed to give the bidder the status of their own tenders. For this processing the bidder is the controller and the operator stores the record on the bidder’s behalf.
Portal logins and session data stay with the bidder’s agents, the bidder’s password manager, or the bidder’s own Crawlab instance if the bidder uses optional readers. They are not sent to the operator of this website.
No selling, no profiling
We do not sell personal data and we do not use it for advertising or automated decisions with legal effect.
Recipients and transfers
We do not share personal data with third parties except hosting providers needed to serve this site, and authorities where the law requires it. Where a processor is outside the European Economic Area, transfers rely on an adequacy decision or standard contractual clauses.
Your rights
You may ask for access, rectification, erasure, restriction, portability and objection, and withdraw consent where it was the basis. Write to sami@samihalawa.com. We answer within one month. You may also complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es).
Resumen: el responsable es Sami Halawa Ribas (NIF 02558168Q, Madrid). No vendemos datos. Puede ejercer sus derechos en sami@samihalawa.com y reclamar ante la AEPD.
Last updated: 7 November 2026.