Privacy Policy

1. Who is responsible for your data?

The data controller is:

• Bobsagency SLU
• Av. Rosas dels Pins 99
• 08358 Arenys de Munt, Barcelona
• Spain
• Email: admin@bobsagency.com

2. What personal data do we collect?

When you contact us through our website or by email, we may collect the information you provide to us, including:

• your name;
• company name;
• email address;
• the information contained in your message or project brief; and
• any other information you voluntarily provide when contacting us.

Our website and hosting infrastructure may also process basic technical information necessary to deliver and secure the website, such as IP address, browser information and server logs.

We do not ask you to provide sensitive personal data through our website.

3. Why do we process your data?

We process personal data submitted through the website or by email in order to:

• respond to your enquiries or requests;
• discuss potential projects or services with you;
• take steps at your request before entering into a contract; and
• manage communications relating to an existing or potential business relationship.

Where your enquiry relates to potentially engaging our services, the legal basis is taking steps at your request before entering into a contract or performing a contract, under Article 6(1)(b) GDPR.

Where processing is not directly related to a potential contract, we may process the information on the basis of our legitimate interest in responding to and managing legitimate business communications, under Article 6(1)(f) GDPR.

4. Who may have access to your data?

Your personal data may be accessed by service providers that support Bobs in operating its website, email and IT systems, where this is necessary for them to provide their services to us.

These providers act on our behalf and, where required, are subject to appropriate data protection obligations.

We may also disclose personal data where required to do so by law or by a competent public authority.

We do not sell personal data.

5. International data transfers

If a service provider processes personal data outside the European Economic Area, we will ensure that the transfer is covered by an appropriate safeguard recognised under the GDPR, such as an adequacy decision or the European Commission's Standard Contractual Clauses.

6. How long do we keep your data?

We retain personal data only for as long as necessary for the purpose for which it was collected.

Information relating to an enquiry will normally be retained while the enquiry is being handled and, afterwards, only for as long as necessary to manage any follow-up, comply with applicable legal obligations or establish, exercise or defend legal claims.

If the enquiry develops into a client relationship, relevant information may be retained for the duration of that relationship and afterwards for the periods required by applicable legal, tax and accounting obligations.

7. Your rights

Under applicable data protection law, you may have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request deletion of your data;
• request restriction of processing;
• object to certain processing; and
• request data portability where applicable.

You can exercise these rights by contacting admin@bobsagency.com.

You also have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD) if you believe that your personal data has been processed unlawfully.

8. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure.

9. Changes to this policy

We may update this Privacy Policy when our website, services or data-processing practices change. The date at the top of this page indicates when the policy was last updated.