Privacy Policy

1. The purpose of this privacy policy.

ILOVEPDF is committed to respecting users' privacy and ensuring security when using our services. Your privacy and the security of your personal data are our priority. Please refer to our privacy policy to understand how we process your personal data.

This document can be printed for reference using the print command in the configuration options of any browser.

2. Who is the data controller for the processing of your personal data?

"Personal data" is any information relating to an identified or identifiable individual, such as your first and last name, email address, or signature.

ILOVEPDF, S.L. ("ILOVEPDF" or "we"), with CIF B66921552 and registered office at Calle Sabino de Arana, 60, 08028 Barcelona, is the data controller of your personal data in accordance with the information provided in this privacy policy.

Please note that when using our services (e.g. iLovePDF, iLoveIMG, iLoveSign or iLoveAPI), you provide us with files containing personal data for which you act as a data controller, ILOVEPDF will act as a data processor. In these cases, ILOVEPDF will process these personal data only and exclusively to the extent necessary to provide you with the service and the data processing agreement that is attached as Appendix I to this privacy policy will apply.

In addition, if you provide us with personal data of other people or upload files that contain personal data of third parties, please ensure that you are authorized to do so and that the third parties have read this privacy policy.

If you have any questions regarding this privacy policy, please contact us by email at: privacy@ilovepdf.com

3. What personal data do we process?

We process personal data that you provide directly to us (e.g., when you fill out the registration form or when you send us an enquiry), as well as other data derived from the use of our services (e.g., if you use iLoveSign, certain information relating to the signature).

In relation to the content of the files, we confirm you that we will not access, analyze, review, index or carry out any other action on their content except as necessary to provide the ILOVEPDF services as indicated in the Terms and Conditions.

ILOVEPDF DOES NOT USE YOUR CONTENT TO TRAIN, IMPROVE, OR DEVELOP ITS AI MODELS OR ANY THIRD-PARTY AI MODELS.

4. For which purposes and under which legal basis we process your personal data?

Regardless of the service(s) you use, we may process your personal data for the following purposes:

1. To manage the process of using or registering for our services and maintaining and managing the relationship established with ILOVEPDF when using or contracting our services, which includes all the processing of personal data that is necessary to establish, maintain and manage the relationship with ILOVEPDF: provide you with the services for which you have registered, processing payments, sending necessary communications (for example, those relating to payments), technical assistance, etc. This processing of personal data has as its legal basis the fact that it is necessary to manage the services you request and/or to which you are a party (article 6.1 b) of the General Data Protection Regulation).

2. To deal with queries, incidents, exercise of rights and, in general, to provide answers to any questions or comments you may send us. This processing of personal data has as its legal basis the legitimate interest of ILOVEPDF in responding to your requests (article 6.1 f) of the General Data Protection Regulation).

3. Where the processing of your personal data is necessary to comply with legal obligations, such as responding to government or other authority requests in the context of an investigation. This processing of personal data has as its legal basis compliance with a legal obligation (article 6.1 c) of the General Data Protection Regulation).

4. Sending newsletters and other commercial communications. The purpose is to send you periodic newsletters and other commercial communications about our services by email. The legal basis for sending newsletters and commercial communications is the consent given when subscribing to these communications. Please note that consent is free and you can therefore enjoy our services without us having to send you these communications.

5. Manage your participation in draws, contests and similar promotions organized by ILOVEPDF. The processing of personal data derived from your participation in these draws, contests and promotions has as its legal basis the consent given when confirming your participation in them.

6. To carry out satisfaction surveys and collect your opinion in relation to the services to which you have access as a user. This processing of personal data has as its legal basis the legitimate interest of ILOVEPDF in knowing your degree of satisfaction with the services of ILOVEPDF and improving the services we offer you to ensure an adequate experience that meets your expectations (article 6.1 f) of the General Data Protection Regulation).

7. Cookies and Similar Technologies. If you have accepted the use of cookies and similar technologies on your browsing devices, we will process the data obtained through these cookies and similar technologies for the purposes indicated in the Cookies Policy. The legal basis for the processing of personal data derived from the use of cookies and similar technologies is the consent given when accepting them, unless the cookies are strictly necessary for the provision of the service.

5. Do we disclose your personal data to third parties? Do we carry out international transfers of personal data?

We will disclose your personal data to third parties in the following cases:

1. When communication to third parties is necessary for compliance with a legal obligation. For example, in cases where the competent authorities require ILOVEPDF to provide them with your personal data. In these cases, the transfer of your personal data will be covered by compliance with a legal obligation (Article 6.1 c) of the General Data Protection Regulation).

2. In the case of sale of ILOVEPDF to third parties or structural modification of all or part of ILOVEPDF, to the extent that the transmission of your data to third parties is necessary for the successful completion of the operation. In these cases, the transfer of your personal data will be covered by ILOVEPDF's legitimate interest in carrying out the sale or structural modification (article 6.1 f) of the General Data Protection Regulation).

3. When we use service providers acting on behalf of ILOVEPDF, in their capacity as processors (e.g. hosting services, payment management services, etc.) and contractually subject to our instructions. In these cases, these third parties only process your personal data to the extent necessary to provide the services to ILOVEPDF.

As a general rule, and except the user has selected otherwise, we process your personal data within the European Economic Area. Notwithstanding the above, and for users from outside European Economic Area, in order to optimize the performance and efficiency of our services, ILOVEPDF may process your personal data in geographic areas closer to your location. In such cases, ILOVEPDF will prioritize processing in countries for which the European Commission has adopted an adequacy decision pursuant to Article 45 of the GDPR. In the absence of an adequacy decision, ILOVEPDF will ensure that international transfers of personal data are carried out in accordance with the mechanisms provided for in the applicable regulation, including the execution of standard contractual clauses adopted by the European Commission pursuant to Article 46(2)(c) of the GDPR with service providers that have infrastructure in such territories. In all cases, ILOVEPDF will ensure that the level of protection afforded to your personal data is essentially equivalent to that guaranteed within transfers are carried out in accordance with applicable regulations, for example by signing standard contractual clauses adopted by the European Commission. You can obtain more information about the international transfers made by ILOVEPDF and the coverage mechanisms used by sending an email to the contact address indicated in section 2 of this privacy policy ("Who is responsible for the processing of your personal data?").

6. How long do we keep your personal data?

We only store your personal data to the extent that its retention and processing are necessary to fulfil the purposes for which it was collected (for example, for as long as you continue to use our services) and, thereafter, for as long as necessary for compliance with the relevant legal obligations. Once these periods have expired, your personal data will be blocked for the legally established time in which responsibilities from the processing may arise. Your personal data will be subsequently deleted.

Also, please note that, except for iLoveSign services, to which the storage period of files contemplated in their respective Specific Terms of Service apply, ILOVEPDF will delete the files of your Content (as defined in the Specific Terms of Service) within TWO (2) HOURS of being processed on ILOVEPDF's servers.

7. What rights do I have in relation to my personal data?

You can request from ILOVEPDF the rights of access, rectification, objection, erasure, restriction of processing and portability, in the event that the requirements established in the General Data Protection Regulation and in Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights are met. In addition, in case you have given your consent for any of the processing indicated in this privacy policy, you can revoke the consent at any time. To exercise your rights, you can send a request to privacy@ilovepdf.com.

Likewise, if you have any complaint arising from the processing of your personal data, you can contact the Spanish Data Protection Agency .

8. Do we process personal data of minors?

ILOVEPDF is committed to the protection of minors. While our services are not specifically directed at this group, minors and students may access and use our services in a variety of contexts, including educational settings. In such cases, use must take place under the supervision of, and where required by applicable law, with the authorization of their parents, legal guardians, or the relevant educational institution, including teachers or other personnel designated by the institution for such purposes. Where access is provided through accounts or environments made available by educational institutions, such use shall be understood to take place within the scope of educational activities and under the responsibility of the relevant institution. In the context of educational accounts, ILOVEPDF applies enhanced privacy safeguards. In particular, such accounts are designed to avoid the use of advertising and to limit tracking or analytics to what is strictly necessary for the provision, security and improvement of the service, in accordance with applicable data protection laws. If you are a minor and have used our services without the required supervision or authorization, or if you become aware that a minor has done so, we encourage you to contact us so that we can take appropriate measures.

9. Data Protection Officer (DPO)

ILOVEPDF has appointed a Data Protection Officer, who may be contacted for any matter related to the processing of personal data and the exercise of rights:

• Name: Carlos Tortajada
• Email: privacy@ilovepdf.com
• Postal address: C/Sabino Arana 60, Local 2, 08028, Barcelona, Spain

10. Modification of the privacy policy

We will review and update this privacy policy when there are relevant changes in the law or in any of the processing of your personal data. If we make a change to this policy, we will inform you of this by appropriate means.

APPENDIX I - Data Processing Agreement

APPENDIX II - SCC EC (Module 4)

Last revision: Thursday, February 19, 2026