Privacy policy
Last updated:
This policy explains what personal data we process on bauber.xyz, why, on what legal basis and how you can exercise your rights, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
- Controller: BAUBER.XYZ SL
- Tax ID (NIF): B93944700
- Registered office: Rambla Poblenou 38, 08005 Barcelona
- Registry details: Commercial Registry of Barcelona, Section 8, Sheet 662478, Entry 1
- Privacy contact: data@bauber.xyz
2. What data we process and why
Contact form. Name, email, the content of your message, the page language and the IP address it is sent from. We use them to answer your enquiry and, where relevant, prepare a quote. The IP address is used only to prevent abuse.
Call booking. If you book a call, you do so through the Google Calendar appointment page embedded on the website. Google collects your name, email and chosen time slot, and we use them to hold the meeting.
Email communications. If you write to us directly, we process your address and the content of the conversation to respond.
Usage statistics. We use our own analytics tool (wst.bauber.xyz), which records pages visited, referring page, browser language, screen size and scroll depth, linked to a random session identifier. It does not use cookies, does not build profiles and honours your browser’s “Do Not Track” setting.
Security. The form is protected by Cloudflare Turnstile, which analyses technical browser signals to tell humans from bots.
We do not make automated decisions or build profiles that produce legal effects concerning you.
3. Legal basis
- Consent (art. 6.1.a GDPR): when you submit the form after accepting this policy. You can withdraw it at any time.
- Pre-contractual steps or performance of a contract (art. 6.1.b GDPR): when the enquiry or call concerns hiring our services.
- Legitimate interest (art. 6.1.f GDPR): for website security and spam prevention, and to obtain aggregate statistics that help us improve it.
4. Retention
Contact data is kept while your enquiry is handled and for at most 12 months after the last communication, unless a contractual relationship begins; in that case it is kept for the duration of the relationship and thereafter for the applicable statutory limitation periods (tax, commercial and liability). Statistical data is kept in aggregate form.
5. Recipients and processors
We do not share your data with third parties unless legally required. To provide the service we rely on the following providers, acting as data processors:
- Cloudflare, Inc.: website hosting, form handling and bot verification (Turnstile).
- Google Ireland Ltd. / Google LLC: the email account where we receive messages and the appointment calendar (Google Calendar).
Some of these providers may process data outside the European Economic Area. Such transfers rely on the EU-U.S. Data Privacy Framework, under which both are certified, and/or on the standard contractual clauses approved by the European Commission.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent, by writing to data@bauber.xyz. Please state which right you wish to exercise; if needed to verify your identity, we may ask for additional information.
If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Cookies and local storage
The website does not set its own cookies. It does use browser storage for:
- Preferences (
localStorage): your chosen language, light/dark theme and aesthetic. These are technical and needed to remember your choice. - Statistics (
sessionStorage): a random session identifier that is deleted when you close the tab.
Embedded third-party services may set their own cookies: Cloudflare Turnstile on the contact page (security, strictly necessary) and Google Calendar, whose booking calendar is shown on the contact page. See Google’s cookie policy and Cloudflare’s privacy policy.
You can delete or block storage and cookies in your browser settings.
8. Minors
This website is aimed at professionals and businesses. We do not knowingly collect data from children under 14.
9. Security
We apply appropriate technical and organisational measures to protect your data: encrypted connections (HTTPS), restricted access to information and providers offering sufficient guarantees.
10. Changes to this policy
We may update this policy to reflect legal changes or changes in the services we use. The version in force will always be published on this page with its update date.