This notice aims to inform you about the principles and criteria that guide how we use the data you provide to us, as well as any data we may have obtained from third parties.

Our data protection policy is designed and communicated in compliance with applicable law, and in particular with EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC (hereinafter, GDPR).

This policy may change over time due to legislative updates. Should any modifications occur, we will inform you through this page.

BRANDFOR BRANDING, S.L. (hereinafter, the Company) has implemented the necessary technical and organisational measures to guarantee the confidentiality and security of personal data, preventing their alteration, loss, misuse or unauthorised access, in accordance with applicable regulations and ensuring an appropriate level of security based on the type of data processed.

The Company manages data relating to individuals in their professional capacity, as well as personal data in the private sphere. Both categories have been taken into account in the drafting of this Privacy Policy.

What is Personal Data?

“Personal data” refers to any information that can directly (e.g. your first and last name) or indirectly (e.g. your national ID number) identify you without disproportionate effort. Personal data may include information relating to a natural person such as private email or postal addresses, mobile phone numbers, usernames, and similar identifiers.

Who Is the Data Controller?

• Identity: BRANDFOR BRANDING, S.L. (en adelante BRANDFOR)
• Postal Address: c/ Antonio Maura, 13, 1º. 28014 Madrid.
• Telephone: 910882533
• Email: administracion@brandfor.com | info@brandfor.com

¿Con qué finalidad tratamos sus datos personales?

The Company processes personal data provided by individuals for the following purposes:

• Contractual purposes: To manage and perform the provision of agreed services, maintain business relationships, and manage any other services contracted subsequently.
• Purposes based on the data subject’s consent: For marketing purposes, including the offering of our own or third-party products or services related to consultancy, marketing, and brand management, in both professional and private contexts. This also includes the sending of newsletters and communications related to our business activity.

How Long Do We Keep Your Data?

Personal data will be retained for as long as you do not request their deletion. Once deletion is requested, the data will be blocked and kept only at the disposal of courts, public prosecutors, or competent public authorities—particularly data protection authorities—for the duration of any applicable limitation periods relating to possible legal liabilities arising from processing or contractual relationships. Do We Create Profiles?

Do We Create Profiles?

No profiling or automated decision-making is carried out.

Lawful Basis for Processing

The lawful basis for processing your personal data is:

The performance of a contract to which you are a party, or the application of pre-contractual measures.

Where you have expressly given your consent, such consent shall constitute the legal basis for processing.

Data Recipients

Your data may be shared with

our collaborators, subcontractors, legal firms, and other service providers acting as data processors on our behalf. In relation to any transfer of your personal data to countries outside the European Economic Area (EEA), the Company will implement appropriate safeguards to ensure an adequate level of protection in accordance with applicable data protection laws.

Your Rights

Data subjects have the right to:

• Obtain confirmation as to whether or not the Company processes personal data concerning them.
• Access their personal data.
• Rectify inaccurate or incomplete data.
• Request erasure of data when, among other reasons, they are no longer necessary for the purposes for which they were collected. Request restriction of processing under the conditions set forth in Article 18 of the GDPR, in which case we will retain them solely for the exercise or defence of legal claims.
• Object to the processing of their data for marketing purposes, including profiling.
  Exercise the right to data portability, allowing them to receive their data in a structured, commonly used, and machine-readable format and to transmit them to another controller

How Can You Exercise Your Rights?

• You may exercise your rights by writing to the Company at the above postal address
• or by email to administracion@brandfor.com

How to File a Complaint

If you believe that your request has not been properly handled, you may contact the Spanish Data Protection Agency (Agencia Española de Protección de Datos) for further assistance. You can find more information at www.agpd.es

Categories of Data Processed

Categories of Data Processed

• Identification data.
• Professional role or position data.

No special categories of data, as defined in Articles 9 and 10 of the GDPR, are processed.

All personal data are processed confidentially in accordance with the Company’s privacy and security policies.

Only the data necessary to fulfil the purposes outlined above are collected and processed.

Source of Data

The personal data we process are obtained from:

The information you provide when contracting services with the Company.
Data you provide when accessing our website; or information obtained through any type of relationship you establish with us, directly or indirectly.