PRIVACY POLICY

1. Data Controller

The controller responsible for the processing of your personal data is Biurrun Inversiones, a Spanish company with registered office at C/Tomás López 10 and NIF B56365158. You may contact the controller at: [email protected].

2. Purpose of Data Processing

We collect and process your personal data for the following purposes:

• To provide you with the services requested through our website.
• To send you newsletters and commercial/promotional communications related to our services via email, SMS, post, or other digital means (with your prior consent).
• To improve our services based on your interactions and preferences.

3. Legal Basis for Processing

The legal bases for processing your personal data are:

• The performance of a contract (Article 6.1.b GDPR).
• Your explicit consent for marketing and non-essential cookies (Article 6.1.a GDPR).
• The legitimate interest of the controller in maintaining the website's security and functionality (Article 6.1.f GDPR).

4. Data Retention

Personal data will be retained as long as there is an active contractual or service-based relationship, or until the user exercises their right to deletion. Once the retention period expires, the data will be securely deleted or anonymised.

5. User Rights (GDPR)

You have the right to:

• Access your personal data.
• Rectify inaccurate or incomplete data.
• Request deletion ('right to be forgotten').
• Restrict the processing of your data.
• Object to the processing of your data.
• Request data portability.
• Withdraw your consent at any time.

To exercise these rights, contact us at [email protected], including a valid ID.

6. Data Security

We have implemented technical and organisational measures to safeguard your personal data against unauthorised access, alteration, disclosure or destruction. However, please be aware that no security system is completely infallible.

7. CCPA Compliance (for California Users)

Under the California Consumer Privacy Act (CCPA), residents of California have the right to:

• Know what personal data is collected, shared, or sold.
• Request deletion of personal data.
• Opt-out of the sale of personal data.
• Not be discriminated against for exercising these rights.

To exercise any of these rights, contact: [email protected] with the subject 'California Privacy Request'.

8. External Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external websites. We encourage users to review the privacy policies of those websites.