Privacy policy

Data controller and data we may receive

The data controller is BYB Z&J 2005 S. L, tax ID B26692269, with legal address at Av. del Dr. Furest i Roca, 53, 17455, Caldes de Malavella and email basarideal2024@gmail.com.

We may receive information you voluntarily provide by phone, email or WhatsApp. Technical connection data is also processed to operate and protect the website. If you accept optional analytics, the limited data described below will be processed.

Purposes and legal bases

• Answering enquiries and handling requests you initiate: requested pre-contractual measures (Article 6(1)(b) GDPR). If an enquiry does not concern a possible purchase, the basis is the legitimate interest in handling business-related communications (Article 6(1)(f) GDPR).
• Maintaining website security, availability and integrity and preventing abuse: the controller's legitimate interest (Article 6(1)(f) GDPR).
• Complying with tax, accounting, consumer and other legal obligations: Article 6(1)(c) GDPR. Retaining and using information to bring or defend claims: legitimate interest (Article 6(1)(f) GDPR).
• Cloudflare Web Analytics provides aggregated performance statistics and, according to its documentation, does not identify or profile individual visitors.
• GoatCounter is used exclusively to produce aggregated audience statistics needed to understand and improve use of the website. The legal basis for personal-data processing is legitimate interest (Article 6(1)(f) GDPR); technical access is configured under the audience-measurement exemption criteria of Article 22(2) LSSI, without reuse, cross-site tracking or advertising.

Recipients and transfers

Cloudflare, Inc. and its group entities provide hosting, content delivery and security as processors under the applicable data processing agreement. Cloudflare Web Analytics states that it does not process visitors' personal data for its aggregated measurement.

GoatCounter.com, operated by Martin Tournoij in Ireland, will act as a processor only when a valid data processing agreement is in place. It hosts data with Hetzner Online GmbH in Finland and Germany as a subprocessor. Individual page views must remain disabled.

Google Ireland Limited receives data as an independent controller when you choose to load Google Maps. Google may also be involved as email provider depending on the account contracted. WhatsApp Ireland Limited processes contact data under the applicable WhatsApp Business terms when you choose that channel.

GoatCounter hosts the stated data within the European Economic Area. Restricted transfers by Cloudflare, Google or WhatsApp will rely on safeguards incorporated into their current agreements, such as the EU-US Data Privacy Framework where applicable and, alternatively, standard contractual clauses. You may request information or a copy of the safeguards by contacting the controller.

Retention

Enquiries that do not result in a purchase will be deleted or anonymised no later than twelve months after the last communication. If there is a purchase or claim, the necessary records will be blocked for the applicable tax, accounting and liability periods, generally four years for tax obligations, five years for personal actions and six years for commercial records.

Technical security logs will be retained for the period available under the contracted service and only while needed to investigate incidents, prevent abuse or address liabilities.

Aggregated GoatCounter data will be deleted in full at least every twenty-four months. After deletion, backups may persist for up to thirty days.

We do not create profiles or make automated decisions. There is no web form, user account, newsletter or behavioural advertising.

Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to basarideal2024@gmail.com and identifying your request.

Providing data through the contact channels is voluntary. If you do not provide the minimum information needed to answer or handle your request, we will be unable to do so. You should not send special-category data or unnecessary information.

You may object at any time to processing based on legitimate interest by contacting the controller. The integration respects the browser's Global Privacy Control and Do Not Track signals and does not load GoatCounter when they are enabled. You may also complain to the Spanish Data Protection Agency (www.aepd.es).