Privacy policy

1. Who is responsible for your data

2. What data we collect

We only collect the data you give us or that is needed for the website to work and improve:

• Contact forms: name, work email, company, website, the service you are interested in and your message.
• Newsletter and guide downloads: your email address and, for downloads, the guide you request.
• Call booking: the name, email and answers you provide when booking a call through our scheduling tool, and the date and time of the call.
• Job applications: the data you send to jobs@brandonbrand.eu, such as your CV, portfolio and contact details.
• Emails you send to hello@brandonbrand.eu or press@brandonbrand.eu.
• Browsing data, only if you accept analytics cookies: pages visited, time on the website, approximate location, device and browser, collected through Google Analytics 4, which does not store IP addresses, and without identifying you by name.

Please do not send us special categories of data (such as health data) that are not necessary for your enquiry or application.

3. Why we use your data and on what legal basis

• To answer your enquiries and prepare a proposal: steps taken at your request before entering into a contract, and our legitimate interest in responding to messages we receive (Article 6.1.b and 6.1.f GDPR).
• To arrange and hold calls you book with us: steps taken at your request before entering into a contract (Article 6.1.b GDPR).
• To give you access to a guide you request: your request (Article 6.1.b GDPR). To send you our newsletter: your consent (Article 6.1.a GDPR), which you can withdraw at any time using the unsubscribe link in each email. Downloading a guide does not subscribe you to the newsletter unless you tick the optional box.
• To manage job applications: your consent when you send us your application, and steps prior to a possible contract (Article 6.1.a and 6.1.b GDPR).
• To provide our services to clients and manage the relationship: performance of a contract (Article 6.1.b GDPR).
• To measure how the website is used and improve it with Google Analytics: your consent through the cookie banner (Article 6.1.a GDPR), which you can withdraw at any time from "Cookie settings".
• To meet our accounting, tax and other legal obligations: legal obligation (Article 6.1.c GDPR).
• To keep the website secure and working properly: our legitimate interest (Article 6.1.f GDPR).

We do not use your data to make decisions based solely on automated processing, including profiling.

4. How long we keep your data

• Enquiries and call bookings: for as long as needed to handle them and, if no business relationship follows, for up to 12 months after our last contact.
• Newsletter: until you unsubscribe. Guide downloads: up to 12 months after your request, unless you also subscribe to the newsletter.
• Job applications: until the selection process ends. If you agree, we may keep your application for up to 12 months for future openings.
• Analytics data: up to 14 months in Google Analytics, after which it is deleted automatically.
• Client data: for the duration of the relationship and afterwards for the periods required by law, such as the six years set out in the Spanish Commercial Code for accounting records.

5. Who we share your data with

We do not sell your data. We share it only with service providers that process it on our behalf, under a data processing agreement, and only as needed to provide their service:

• Website hosting and form management: Webflow, Inc.
• Call scheduling: Calendly LLC.
• Website analytics: Google Ireland Limited (Google Analytics).
• Our email and newsletter service providers.
• Accounting and legal advisers, where necessary.

We may also disclose data to public authorities and courts when required by law.

6. International transfers

Some of our providers, such as Webflow, Calendly and Google, are based in the United States or may process data there. When your data is transferred outside the European Economic Area, these transfers are covered by the EU-US Data Privacy Framework and, where applicable, by the Standard Contractual Clauses approved by the European Commission.

7. Your rights

You can exercise the following rights at any time: access, rectification, erasure, objection, restriction of processing and data portability, as well as the right to withdraw your consent without affecting the lawfulness of processing carried out before its withdrawal.

To do so, write to hello@brandonbrand.eu with the subject "Data protection". We may ask you for information to confirm your identity. We will reply within one month.

If you consider that we have not processed your data properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

8. Security

We apply appropriate technical and organisational measures to protect your data against loss, misuse, unauthorised access or alteration, taking into account the state of the art and the nature of the data.

9. Minors

This website is aimed at companies and professionals. We do not knowingly collect data from people under 18 years of age.

10. Changes to this policy

We may update this policy to reflect changes in the law or in how we process data. The version published on this page always applies, and we will indicate the date of the last update below.